Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7523a89b-4739-4adc-a6fa-0cbf84895fcf.roa
File: 7523a89b-4739-4adc-a6fa-0cbf84895fcf.roa (raw, json)
Hash identifier: doRJNr/F2VaZJbkdMy7VJe1rY4KADrbKNppQW8NrDNY=
Subject key identifier: 62:95:B6:0F:BC:79:0B:0D:39:30:80:5F:79:F4:80:5D:10:88:8B:78
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: E4D0171477351470E884ADDA14B97559D5FF51
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7523a89b-4739-4adc-a6fa-0cbf84895fcf.roa
Signing time: Sun 19 Oct 2025 01:20:50 +0000
ROA not before: Sun 19 Oct 2025 01:20:50 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
e4:d0:17:14:77:35:14:70:e8:84:ad:da:14:b9:75:59:d5:ff:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 01:20:50 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=5b20625d2c966dd7fa1e05e5893bc1642b6a6cf440b03fa8e3fcba187e39518e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:83:04:24:89:f1:21:3c:e5:a9:66:d9:6f:
bd:32:c9:02:de:bc:56:44:ac:11:02:7a:3a:c4:83:
e1:b5:00:ed:79:cb:65:34:ff:9a:33:35:3b:c2:f6:
82:a6:cf:fa:e3:1c:c7:78:2a:b8:36:6e:c3:73:f0:
a9:b5:03:4f:d3:6a:b2:8a:68:a6:2f:b7:07:34:7d:
18:77:13:88:3c:cc:f7:a5:c0:9c:ac:bb:a4:53:76:
ff:82:10:eb:8a:b0:c1:5a:83:1f:ab:18:39:e4:2a:
4e:87:0b:a0:62:8b:82:a7:f4:95:a5:a6:10:57:db:
f6:e8:56:4e:25:f6:9a:d2:54:b7:18:81:8c:45:67:
09:c1:3f:d3:50:e5:43:95:da:0e:24:73:0c:71:f9:
42:96:81:a5:72:30:d8:b9:3d:1c:ce:1a:03:09:ab:
d4:fd:5f:59:5b:4c:ff:eb:6e:1c:dc:af:b1:6c:40:
6a:20:6b:bd:34:73:7d:ed:43:8a:ff:be:2c:dd:66:
6f:8a:0f:81:dd:6a:c0:78:3a:b7:39:3e:7c:1c:ca:
56:a8:b2:a3:d6:9b:f3:74:e9:e9:be:8f:7f:f7:78:
59:a7:d2:4a:be:ae:00:4f:81:78:22:f5:16:1f:16:
6c:a6:9d:2f:a8:b8:6c:79:58:a8:f2:7c:f4:0d:45:
b8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:95:B6:0F:BC:79:0B:0D:39:30:80:5F:79:F4:80:5D:10:88:8B:78
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7523a89b-4739-4adc-a6fa-0cbf84895fcf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.122.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:d1:ff:84:f2:92:61:52:1b:f5:94:c6:3e:d7:75:39:8e:39:
d2:54:39:d5:1e:f7:89:e7:af:46:df:37:57:f0:9d:a1:61:e8:
8e:02:6d:bc:88:65:57:31:27:73:ed:18:d7:ca:cc:31:a8:18:
58:c0:69:7d:c4:8e:44:de:15:f5:19:f9:d1:9c:89:cc:e4:95:
ec:b5:46:a9:99:1e:5c:af:56:6c:f1:5e:e9:b3:8b:d2:4d:f2:
69:2e:93:17:77:d1:8e:e7:ad:7d:40:2c:46:2f:ad:6d:12:53:
64:8e:ab:30:39:1a:1c:31:89:2f:07:f7:f5:63:ef:d9:1d:8d:
97:c7:3b:35:2b:64:c8:34:72:4a:12:c1:e9:a0:0f:f6:76:51:
27:8f:da:27:c7:89:8b:5c:bf:8f:c7:fd:7f:9d:6e:14:d3:86:
4d:4f:b3:04:5a:c6:49:23:b6:d8:f3:19:01:b0:4a:aa:20:2d:
96:eb:e7:f0:28:a1:b5:4a:f7:c7:f2:37:4b:51:bc:cc:b7:c8:
a9:55:7b:05:7b:30:27:3c:45:37:ea:2a:69:a0:5f:9e:c6:fa:
d1:ed:82:86:9b:43:ed:aa:b9:6c:03:1b:f8:e4:3a:45:ad:89:
f8:94:87:c7:14:e8:55:a6:ad:b3:d0:05:ea:3f:5e:5e:f3:c3:
fb:c3:12:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:49:59 2025 by rpki-client