Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75f29b04-ac1a-457e-84b4-b2db89b31a04.roa
File: 75f29b04-ac1a-457e-84b4-b2db89b31a04.roa (raw, json)
Hash identifier: l9n9NL/z8b15BVoJgQPQ7mqYzXwGME2x2Y6LKW43pF0=
Subject key identifier: A0:08:85:81:50:08:CF:92:99:EE:E8:85:37:5B:5E:B8:27:73:A2:7A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3E8517570AEFAF01A5139B5C1BCCC4D39F30A7F5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75f29b04-ac1a-457e-84b4-b2db89b31a04.roa
Signing time: Mon 20 Oct 2025 05:12:08 +0000
ROA not before: Mon 20 Oct 2025 05:12:08 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:85:17:57:0a:ef:af:01:a5:13:9b:5c:1b:cc:c4:d3:9f:30:a7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 05:12:08 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=eea92b03572cdd34929a583eff8bfa18edd6f529f9dc0dab49cdb66e39582b10, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d9:fd:dd:66:3f:96:9d:e8:22:93:79:1a:a9:
54:2b:74:8d:b0:0f:a6:7d:94:77:a1:b4:af:1a:41:
b9:d6:3b:d6:5e:1a:2e:a9:fa:b3:24:fa:03:58:ba:
16:15:d7:12:cb:5d:4e:d1:ec:e3:a3:d2:35:56:48:
91:ce:0f:83:c0:d0:6d:35:14:df:1b:b8:b2:f1:d7:
8a:bb:af:11:31:fc:42:58:8f:9c:8a:d9:04:d7:37:
9b:0a:6e:4f:c1:90:d8:ec:59:02:24:d9:45:1c:0a:
b7:c1:47:23:eb:46:40:25:3c:4f:d9:85:2f:ca:7f:
a0:41:d7:c9:c3:d6:0e:39:46:02:c7:1f:d9:91:d1:
41:b8:24:35:51:8f:86:24:7f:35:c3:dd:f2:0a:4b:
e4:40:8a:d9:47:d2:e6:c4:51:de:63:76:23:a8:62:
59:a7:c1:6c:43:d1:ba:3e:53:6b:5a:af:b8:32:24:
9d:20:16:86:f7:f2:41:37:7e:0c:57:5a:d3:d3:03:
1a:d4:fc:73:a4:03:f0:f0:49:76:ee:99:34:74:99:
23:39:94:07:f3:90:ea:8a:f7:3a:ff:ec:19:b3:31:
45:64:18:99:0b:1d:39:46:7b:c6:a8:10:92:8c:ca:
51:b7:56:d2:43:ba:8a:53:1a:d9:bd:03:fb:2e:a3:
44:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:08:85:81:50:08:CF:92:99:EE:E8:85:37:5B:5E:B8:27:73:A2:7A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75f29b04-ac1a-457e-84b4-b2db89b31a04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.239.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:82:24:a1:be:a3:5b:23:49:9a:bd:a9:51:9d:89:15:a6:ef:
3e:a7:18:fc:8b:df:57:d2:ad:40:ed:e3:dd:84:f7:09:e6:e8:
aa:cd:46:b2:ed:8d:ad:26:39:07:67:4b:62:c8:b3:25:77:71:
d9:cf:95:f3:f5:22:b4:0a:11:35:20:62:8c:28:07:e0:1b:3b:
cd:4a:6c:f3:41:a8:cc:51:f1:ec:54:aa:e4:7c:46:5a:78:60:
db:68:ed:7b:4d:da:21:b8:7c:c5:24:95:37:c5:3a:68:86:7d:
95:38:82:bf:ab:49:68:43:27:e8:17:f2:b9:8c:41:c2:e3:84:
99:2e:64:f4:61:22:68:21:7e:9a:a6:db:0b:d6:b1:6b:ed:c5:
2d:0b:b2:e8:9a:dc:51:b2:81:37:2f:33:05:28:3d:f6:9d:8b:
35:bd:28:32:17:37:5f:9d:6d:ed:9e:0c:89:77:7f:ef:7a:02:
c1:31:c4:cc:50:e1:d2:c8:2b:ba:23:fd:fd:32:62:7f:32:17:
3a:00:0b:8c:53:6e:8a:40:75:fc:2d:fc:45:a7:58:cd:13:db:
dc:3e:fb:af:48:5a:3b:f0:3b:3d:46:5f:b2:0b:4f:e3:ea:cd:
fc:28:69:ae:e6:96:5c:f7:b8:9e:5d:30:ae:a8:4f:f0:d9:cb:
f1:89:66:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:03:25 2025 by rpki-client