Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d045b5f-1deb-4229-b363-cdc6242945ec.roa
File: 6d045b5f-1deb-4229-b363-cdc6242945ec.roa (raw, json)
Hash identifier: RcTpGz1mjT3CjxqAU+FVsLR/3Ff3XNcnXCB/ffyn1a4=
Subject key identifier: 02:76:B8:FB:1C:CD:15:BB:6D:AA:C4:18:2B:3E:23:B1:C5:87:35:7E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6CFFA1C0EA2A24C8D6D1DD6A994153BFC70BB294
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d045b5f-1deb-4229-b363-cdc6242945ec.roa
Signing time: Mon 20 Oct 2025 01:51:09 +0000
ROA not before: Mon 20 Oct 2025 01:51:09 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:ff:a1:c0:ea:2a:24:c8:d6:d1:dd:6a:99:41:53:bf:c7:0b:b2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 01:51:09 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=fa1050f093f7661233ef64eddbcb79525e03d13c90f49e3ec2122849d857faf0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:02:5c:ee:4c:51:11:2c:d9:13:bb:12:65:31:
be:63:73:fc:6a:a7:e0:c1:1c:15:a3:3d:24:67:60:
4e:50:1b:4d:6b:c0:0c:b7:de:70:71:ba:58:bf:04:
50:0e:30:ee:19:5b:a3:52:85:e2:bc:15:49:72:0b:
3b:07:fe:cc:75:a0:46:d0:81:c2:fd:a9:36:f7:da:
3f:23:77:4d:83:3a:24:5c:b8:3b:42:74:46:c4:30:
2c:25:b2:ce:d3:d6:76:a5:12:8a:a5:ef:a7:e1:80:
d8:cc:2b:38:cd:c7:55:ee:2c:df:15:da:4d:16:90:
92:8b:81:3a:10:ff:5c:52:37:cc:b1:67:26:8a:6b:
2a:f6:95:e1:96:97:32:0b:15:b6:af:bc:a1:3e:3b:
01:e9:f2:6c:ed:60:b4:e1:99:34:4d:0d:6d:f9:94:
d5:d2:cb:00:47:1d:68:6c:c8:b4:56:1f:fc:52:36:
00:f7:b5:9e:87:36:d2:c6:ad:90:2e:e2:67:af:b7:
83:ee:87:b5:08:44:fc:86:9d:ae:29:12:ec:f2:ee:
0c:08:88:a3:46:2f:59:b4:32:71:42:c5:0f:1b:ff:
11:8f:37:02:e1:d6:72:bd:bb:c5:9e:0a:3a:a0:bb:
8c:46:d5:ee:13:b7:54:3c:20:9f:5a:57:02:9b:96:
59:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:76:B8:FB:1C:CD:15:BB:6D:AA:C4:18:2B:3E:23:B1:C5:87:35:7E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d045b5f-1deb-4229-b363-cdc6242945ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.192.0/22
Signature Algorithm: sha256WithRSAEncryption
73:70:cd:01:2e:46:b3:de:14:12:ae:ed:88:26:7f:b2:18:f0:
94:1e:da:63:c9:48:17:82:fa:7e:a9:7a:2f:98:af:54:fb:93:
b8:6b:ad:04:5a:e0:78:d9:82:a6:98:ba:70:0b:e3:53:5c:df:
fa:fc:e9:e9:1c:a8:af:cf:2e:c5:44:b1:6b:4f:c5:2c:75:f0:
b0:86:4c:87:8e:cd:a7:13:0a:de:72:71:6d:b0:e7:7d:a3:d5:
52:37:6b:31:b6:64:60:0b:b3:78:a8:17:78:77:f1:95:23:4e:
8f:ac:be:c5:4d:11:81:a0:57:64:f3:4f:8d:bb:ca:8b:07:01:
6a:e7:cc:10:b5:39:69:6d:14:e9:d0:99:bc:8a:6d:b1:31:6b:
ab:41:37:2a:a8:a5:55:41:ac:bb:80:a3:a9:55:a7:05:4d:26:
c6:84:e6:88:23:61:14:49:a1:be:9c:38:5d:2a:74:f7:0b:66:
d4:23:c1:2e:7b:53:e9:d2:9d:db:7b:25:a9:b9:c3:e5:54:a2:
ee:cc:26:ae:c8:16:76:54:bf:95:f6:d5:9a:50:d5:ee:26:eb:
3e:da:f1:b2:78:47:c2:5a:1a:4a:2d:ad:63:ce:15:56:4c:8d:
41:eb:aa:80:49:ff:b9:26:27:3a:41:04:69:90:e5:1b:62:89:
78:29:36:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:17:49 2025 by rpki-client