Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7047edd4-b74b-4c8c-aa7e-d524d53f133b.roa
File: 7047edd4-b74b-4c8c-aa7e-d524d53f133b.roa (raw, json)
Hash identifier: iKzE2MpDLqd6uzmi+jsdMSodbHYgLc7NyQBWAIfIWLw=
Subject key identifier: 74:9D:4F:67:3F:AE:67:CB:8A:15:7F:03:61:5C:E2:4F:B1:37:37:FE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3BA4F95EEDDE057F4AECF12BE423951A1F0BA4CD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7047edd4-b74b-4c8c-aa7e-d524d53f133b.roa
Signing time: Mon 20 Oct 2025 06:31:34 +0000
ROA not before: Mon 20 Oct 2025 06:31:34 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:a4:f9:5e:ed:de:05:7f:4a:ec:f1:2b:e4:23:95:1a:1f:0b:a4:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 06:31:34 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=d185b1fc015863207774fd1c287fc3afbbf5d9ea290fc53691d12a44261838d3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:50:f7:93:f6:cb:3a:5e:c8:b3:cf:b6:f6:1d:
3f:fc:9b:8b:fd:24:d3:19:90:8a:5d:07:55:90:dd:
86:ec:96:07:99:c5:0e:d9:76:39:ab:93:5e:9a:e3:
85:ec:33:aa:58:d7:23:04:9e:26:58:18:11:cf:60:
4f:1b:cb:83:ab:47:0f:d9:19:cb:03:a2:52:05:31:
a2:ad:7b:5f:12:00:6c:5f:71:1d:f8:4b:30:9f:7b:
00:8b:72:e5:01:1f:c8:08:c9:dd:3e:fe:b6:be:72:
cd:30:84:25:6c:ee:78:25:97:f8:23:36:5a:db:96:
d0:67:16:aa:fb:35:72:e0:a0:06:6e:8f:f7:f9:53:
58:20:7d:e6:e8:29:fe:04:38:90:2a:ec:ff:ff:b7:
8d:78:d5:e8:8d:bc:45:6a:83:06:c2:a5:0c:ee:f6:
16:8c:d1:39:48:23:39:d9:ab:b6:ea:20:f2:a8:34:
9c:3e:93:91:af:d8:db:0c:1a:89:c3:bd:1b:84:d6:
8e:df:e4:95:6a:7e:fe:9c:9d:4a:38:cb:be:96:78:
51:e3:f9:d7:53:49:c7:19:8c:0c:cb:be:33:db:8d:
a1:bb:5e:a6:16:4a:d0:8d:e0:9e:ab:ac:62:a8:f0:
6e:0a:b6:b6:83:cf:b6:dc:43:f1:51:14:0e:b5:53:
92:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9D:4F:67:3F:AE:67:CB:8A:15:7F:03:61:5C:E2:4F:B1:37:37:FE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7047edd4-b74b-4c8c-aa7e-d524d53f133b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.255.0/24
Signature Algorithm: sha256WithRSAEncryption
82:92:e7:5d:82:0f:c1:b2:3d:e0:51:78:96:76:b9:17:4c:65:
36:15:90:09:0e:07:98:f6:80:8a:a9:4d:fe:cd:4b:c7:06:3e:
c3:86:06:ae:cd:71:b7:cc:47:92:12:47:37:b0:8f:b2:00:a9:
ff:78:67:19:b7:29:cd:04:8e:0b:0c:22:43:45:02:63:86:ef:
61:f1:b4:ee:18:f7:6f:30:3e:01:a4:a0:f6:74:20:a8:36:6d:
7c:b1:d7:e8:f8:ab:75:e7:f5:b2:d4:19:7d:ef:00:00:ee:70:
d5:31:0f:0b:df:3a:c9:da:6b:f0:bb:8d:a4:1a:35:9a:27:b9:
8e:20:fb:68:21:45:b9:ac:96:7a:9e:77:0d:ce:54:84:af:84:
dd:8a:54:6d:0d:45:c5:9e:09:a4:a8:3a:1c:8f:ae:7f:09:1d:
44:5d:7e:87:ef:e9:12:dd:f1:09:68:59:3d:df:78:8d:88:6a:
77:cb:98:16:19:33:9f:e0:9f:e0:a0:c2:a2:1e:66:b0:68:0f:
d4:52:2f:ad:d6:ae:1e:fa:67:dd:90:c8:80:9c:4f:29:39:7d:
d5:a3:28:57:4a:3f:58:0d:5c:4e:fb:36:0f:5b:02:dd:ec:7f:
ee:de:3e:3e:4b:43:c5:1f:9f:28:3a:57:77:16:cc:61:42:8c:
c6:f1:92:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:25:38 2025 by rpki-client