Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5fbb4262-e8da-4ad5-82d9-6f2b65d1aaaf.roa
File: 5fbb4262-e8da-4ad5-82d9-6f2b65d1aaaf.roa (raw, json)
Hash identifier: wmDR/OoJPgHOdgBdRqVlWgwkKTs0sNhjYSisPROA6lw=
Subject key identifier: 45:6D:72:3C:D2:1F:AB:93:A0:12:9B:2B:76:98:8A:6C:CE:20:1B:24
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2252D3C95B0D6D0069205D7B135E3B7023184CC6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5fbb4262-e8da-4ad5-82d9-6f2b65d1aaaf.roa
Signing time: Sun 19 Oct 2025 02:42:06 +0000
ROA not before: Sun 19 Oct 2025 02:42:06 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:52:d3:c9:5b:0d:6d:00:69:20:5d:7b:13:5e:3b:70:23:18:4c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 02:42:06 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=703a6db592b5391ebd278959eb10f2b3bf824bac9b4d7d1f409175f952257c92, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:81:d2:2c:38:83:01:d9:58:fe:92:40:03:d9:
16:f8:32:f4:55:a7:62:48:22:20:13:6c:7b:69:d9:
5c:95:a1:2a:9f:6d:d7:b8:15:a5:34:b2:e5:b4:fc:
ad:80:9c:54:f5:88:09:58:95:94:d2:26:dd:4c:02:
4d:9d:2b:6f:87:35:7a:99:84:27:81:7a:7a:62:09:
49:8f:b0:ad:70:57:3e:bf:55:0a:61:70:e9:76:7b:
58:90:3e:24:09:e6:2f:ee:68:ea:fb:d6:62:a0:3c:
1a:d5:ad:7e:18:01:3a:a0:16:09:d1:42:26:09:3f:
18:a0:80:8e:8e:3a:a3:10:a1:19:54:1b:45:b8:36:
16:41:af:d8:7f:8b:14:ee:1b:35:bb:b8:d3:dc:09:
1c:c7:fe:d5:43:6f:87:f4:af:3a:c1:af:e9:f8:a4:
d9:16:ad:16:4b:10:6e:c9:e3:a4:f5:ac:b7:f3:69:
4d:40:18:13:93:f3:eb:80:24:82:2c:ad:a5:dc:7d:
19:f2:5f:cd:da:5b:25:c0:81:f7:4d:a2:c0:b9:e6:
e7:e6:71:7d:bc:40:84:74:01:fb:f7:5b:f3:3a:1e:
5a:46:be:cc:1b:79:3f:84:1f:ab:e9:d6:e1:bd:fe:
ec:e6:e0:f6:05:59:e0:58:7b:34:4c:e2:17:30:00:
10:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6D:72:3C:D2:1F:AB:93:A0:12:9B:2B:76:98:8A:6C:CE:20:1B:24
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5fbb4262-e8da-4ad5-82d9-6f2b65d1aaaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.202.0/24
Signature Algorithm: sha256WithRSAEncryption
37:66:8f:03:98:81:30:1b:3b:fc:b7:0b:5b:14:4a:78:5d:16:
e3:59:bc:73:8d:b8:39:8a:d2:88:18:bd:f4:7e:c7:9d:f8:74:
9a:88:39:6e:b5:e2:80:45:d8:ed:1f:ac:84:d4:18:32:2e:89:
13:ec:e5:9f:e2:6d:e3:cc:9b:9a:94:3e:6e:55:8c:f6:7a:31:
ed:35:37:cc:69:d0:fd:72:6e:c7:11:3a:05:4a:20:df:d5:d6:
d3:09:fd:e4:f0:c2:15:2e:a2:c0:11:a3:00:bb:62:82:f5:98:
0b:50:e8:09:e3:6b:cd:46:4c:70:c1:d7:55:56:cb:5f:55:01:
c2:83:ce:b5:c0:5e:75:af:b5:0a:9b:c2:33:a6:b6:d4:f6:96:
fc:58:50:fc:1f:fa:a9:5f:35:8e:c0:a7:3a:38:21:e9:c0:c5:
45:d2:cb:28:b0:77:20:fa:9c:65:82:20:2f:32:ce:b3:bc:02:
73:1a:41:1c:00:8f:87:c3:23:42:b7:1e:bb:84:8d:dc:8a:af:
23:14:41:4c:75:25:7c:be:99:55:82:e8:6b:4a:1a:79:7b:8a:
7e:3f:9c:1b:88:11:ac:d1:72:a9:21:ef:b7:eb:e2:d8:1e:eb:
dc:8f:84:a6:e3:ce:6c:8f:03:0d:8d:7f:cf:85:cb:42:7a:ba:
68:2e:0c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:23:49 2025 by rpki-client