Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66af6e74-8fa2-4a04-ba6c-e8b73deb2e22.roa
File: 66af6e74-8fa2-4a04-ba6c-e8b73deb2e22.roa (raw, json)
Hash identifier: BbSZmF5QIblJW4M+kH4FWHAUlKaX7rH+zY3usmvCmO4=
Subject key identifier: BD:9F:BC:93:81:CE:33:E6:B5:3F:08:F1:CF:1B:D8:BA:EE:5A:E7:8A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 252A9C35D0E9FF33097484207F5B0244C1E18AD3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66af6e74-8fa2-4a04-ba6c-e8b73deb2e22.roa
Signing time: Mon 20 Oct 2025 03:50:02 +0000
ROA not before: Mon 20 Oct 2025 03:50:02 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.176.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:2a:9c:35:d0:e9:ff:33:09:74:84:20:7f:5b:02:44:c1:e1:8a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 03:50:02 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=4da5c82b823f219886def4305dbeed18b9a457a3a13e549c6a19e2883eb6d8dc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fc:0c:ee:15:22:36:51:b9:e3:53:bf:58:cc:
3e:94:d5:b4:39:63:5f:da:44:02:88:97:b2:0c:41:
94:bd:e9:04:84:fe:35:1b:ea:69:07:03:3f:db:b9:
5c:76:3f:67:56:d9:3c:9a:6b:93:fd:2c:0c:13:45:
3f:dd:3f:07:bc:1f:23:25:70:63:9a:86:c0:3f:d4:
0e:f0:79:c5:3c:b3:eb:77:ef:ef:15:a3:bd:ee:ca:
e9:57:fa:14:f6:94:99:59:de:0e:ad:fa:e5:af:6a:
d0:b4:3f:6e:04:b8:96:e8:fc:b9:48:b7:4d:25:38:
0b:50:44:b9:7f:7a:77:1a:3a:9e:0f:a7:83:79:97:
f2:03:58:99:9c:22:31:c5:4c:16:48:68:b4:7e:fa:
ce:27:76:72:0e:5e:d7:c7:1b:6f:d4:06:cf:e9:70:
9c:39:2b:6d:a3:28:61:5b:1a:a2:c5:02:84:83:3e:
57:d7:79:e7:47:59:9b:fc:da:75:a6:92:62:bf:2c:
e0:7c:c1:9e:fc:63:27:99:cb:07:eb:9e:ee:d2:e1:
ac:7f:b4:7c:e8:1a:32:73:be:9a:e6:92:0b:ad:e5:
8b:1f:42:d1:c0:ff:cf:27:2a:a7:e5:b4:d5:1d:a6:
93:0d:47:d5:c6:bf:b6:4c:60:8b:2b:79:a1:be:b5:
5f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9F:BC:93:81:CE:33:E6:B5:3F:08:F1:CF:1B:D8:BA:EE:5A:E7:8A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66af6e74-8fa2-4a04-ba6c-e8b73deb2e22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.176.0/21
Signature Algorithm: sha256WithRSAEncryption
06:44:f5:06:59:54:61:6d:bd:57:8c:28:4c:5e:48:93:80:3b:
65:0e:1e:db:58:60:e5:11:ec:19:50:d8:b2:31:42:e5:ed:f0:
cc:d2:62:59:1e:aa:10:c6:e0:a2:c4:74:fa:f1:87:51:4c:dd:
67:28:1f:c4:22:18:3b:60:8a:27:1c:d8:51:7e:dd:9b:b1:a1:
05:27:de:b9:98:7b:13:67:5a:dc:67:02:31:33:4c:d4:e2:69:
2c:ab:a1:51:ef:37:07:bf:1e:1e:4a:f5:75:97:54:64:cc:b9:
fb:fc:52:cb:c2:b8:21:14:cc:8a:ee:a3:99:c9:43:53:80:eb:
0e:fb:f2:72:70:89:84:2f:47:d3:06:7f:84:62:c9:dd:3f:ce:
fa:67:29:cd:49:04:bd:48:ff:2b:82:b0:39:6a:9f:e4:49:c1:
aa:ae:c1:ce:56:e7:96:88:7a:59:13:c1:d6:9d:38:2d:2c:dc:
27:b7:c5:3e:cf:2c:14:5f:ad:00:0b:3a:aa:23:86:14:8b:87:
b6:4b:43:36:60:16:f2:cc:35:8d:7f:8e:36:8d:4b:24:d4:58:
3f:38:62:f5:5a:f5:e6:6d:95:d1:ec:76:e2:13:15:1a:83:29:
f0:48:32:32:ff:51:5a:9a:8e:c5:ca:0f:1c:b7:be:58:97:54:
1b:69:9e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:43 2025 by rpki-client