Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55f3443a-8ece-44d5-a73c-e7649218fad4.roa
File: 55f3443a-8ece-44d5-a73c-e7649218fad4.roa (raw, json)
Hash identifier: te/jG/K2H+D0TubpelBYQwCjS2h90HrIUM6jG2WjfQ0=
Subject key identifier: 5E:8C:CD:DD:FC:AA:2A:D3:85:EB:80:CB:36:25:DC:DE:52:B0:EA:4B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 20639068D32679D5FDB70A9B4394B61F44C98F97
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55f3443a-8ece-44d5-a73c-e7649218fad4.roa
Signing time: Sun 19 Oct 2025 03:00:40 +0000
ROA not before: Sun 19 Oct 2025 03:00:40 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.30.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:63:90:68:d3:26:79:d5:fd:b7:0a:9b:43:94:b6:1f:44:c9:8f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 03:00:40 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=74196cdc2a852059125b9b711a39386e6a7f81a6fa1729389fc4ffc376ccfa5a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c3:f2:bd:1d:51:55:9a:36:ab:3f:57:ce:af:
93:87:c4:a5:d8:01:5d:19:09:3c:11:a3:d9:47:b5:
9c:7c:4a:02:f6:04:17:b1:45:b5:f3:e4:cc:6f:08:
81:bf:ae:13:d8:ba:17:58:40:a9:97:db:0f:a6:c4:
42:c5:2e:b5:fb:e7:ba:f6:95:21:8b:f5:21:54:41:
3e:b8:e3:6e:df:83:c6:47:de:49:3d:1d:7b:25:bc:
d0:5f:f2:99:22:bc:b8:7f:c5:15:18:e3:5d:0a:54:
1d:24:82:69:0b:e2:b7:b9:66:3a:32:ab:ec:46:7f:
7e:74:dd:d0:cf:66:51:e3:e3:bc:d6:fa:df:cc:7d:
e1:7b:54:25:ce:d7:2a:b3:f1:73:63:7c:c3:47:11:
8b:f6:62:2c:ce:b9:06:06:71:17:0f:e7:9e:1b:37:
ae:e5:95:a1:d4:79:8a:26:a9:31:16:d8:e5:ca:03:
c2:de:36:f1:17:99:b1:44:ce:d1:c2:a3:53:d4:dd:
dc:d4:17:a3:14:ce:87:27:b0:83:87:d1:ed:29:d5:
4e:2c:a9:b6:6f:33:99:27:85:8f:99:40:9a:93:dd:
9f:3e:e4:90:cc:39:a0:ec:d4:ab:29:5a:71:6c:ad:
d7:39:a0:cd:1e:df:d4:cb:c8:34:d7:38:f8:6a:5e:
e9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8C:CD:DD:FC:AA:2A:D3:85:EB:80:CB:36:25:DC:DE:52:B0:EA:4B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55f3443a-8ece-44d5-a73c-e7649218fad4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.30.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:2f:28:45:9f:5c:de:1b:d8:0d:fc:f0:53:c0:0d:d3:a5:dd:
92:4a:18:0a:4f:b9:f2:8f:db:0a:33:5b:a9:9b:18:21:2a:e9:
cc:5b:f1:97:ae:d3:b4:c0:a0:20:b1:ca:08:07:a7:ef:2c:13:
30:d3:31:e5:d7:28:55:04:ef:77:15:c8:a3:f5:26:df:f6:3e:
c8:27:09:92:82:ee:fe:70:d1:7b:f6:02:bf:d5:96:ca:67:24:
1c:4f:a9:9e:17:70:dd:af:16:56:3f:df:68:06:f2:5b:e7:82:
67:42:7e:25:d3:e8:a9:fd:4f:2c:aa:19:03:37:70:8c:6e:f6:
33:86:5a:00:05:a1:21:e4:19:4b:13:74:20:21:66:ed:2c:30:
d1:16:02:1b:b0:0c:c3:39:d6:10:5c:84:94:96:10:8f:23:da:
32:d7:76:93:b7:30:c9:c1:cf:9c:cb:5a:77:24:94:fd:f2:9b:
29:6c:64:c0:41:d5:30:37:23:29:04:8b:fa:83:ae:4f:68:d3:
84:ca:ed:e3:68:a2:27:81:86:4f:0b:e5:2b:13:9d:91:ff:02:
33:bf:01:23:6e:7a:97:97:4c:6b:5c:45:bf:22:1f:ee:d5:c2:
13:f0:87:76:68:f4:e9:67:27:1a:f3:8b:b3:41:71:69:23:bb:
62:6f:1c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:36 2025 by rpki-client