Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/776b7b5c-0bb0-4d8e-87f6-d724990dc4b6.roa
File: 776b7b5c-0bb0-4d8e-87f6-d724990dc4b6.roa (raw, json)
Hash identifier: fitA01CMjKPUFVXUJ8+4kZvWDrEu8c2tMYwoNzvpJdE=
Subject key identifier: F0:6B:74:87:27:9B:AA:92:46:B7:6C:AD:82:40:A9:BE:F3:B4:21:A4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 13455DF57C5B5301ED78CAB03C68388A24BA2D3C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/776b7b5c-0bb0-4d8e-87f6-d724990dc4b6.roa
Signing time: Sun 19 Oct 2025 01:40:57 +0000
ROA not before: Sun 19 Oct 2025 01:40:57 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:45:5d:f5:7c:5b:53:01:ed:78:ca:b0:3c:68:38:8a:24:ba:2d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 01:40:57 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=075957157468014622e3f90fe506e3512f1ec12c0d7fa6d1087d548ca5b659e0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:05:09:c4:35:7a:ad:cc:83:46:05:cf:7c:4f:
8a:87:d8:f8:52:5e:b8:d6:b3:8e:3d:4d:53:00:8a:
2f:08:05:5a:9b:8c:65:53:69:1e:62:12:b2:4a:d5:
fc:68:3c:ec:97:2d:f6:4a:6f:0e:85:39:64:6c:aa:
96:47:70:23:e3:55:f2:fd:df:55:f7:31:4a:b0:02:
ed:57:18:cf:6c:b2:d1:e0:3e:3f:68:cf:5e:4b:ae:
14:0f:c4:6a:0b:cf:84:ab:64:64:6c:34:d3:82:7f:
78:0b:77:42:6e:2e:ff:ae:e4:11:d8:47:48:c7:cb:
f4:d4:da:1a:0f:07:5c:7c:4d:d6:6d:07:e2:a1:cc:
51:97:27:0f:87:d1:38:a8:88:63:aa:55:1d:f5:fc:
45:ef:77:e1:61:b0:1c:2f:dd:c0:12:ec:71:26:a2:
69:14:2c:1c:3f:21:7b:3a:58:5b:ec:6a:5e:ec:22:
d6:0b:3a:9f:1c:74:41:b2:fa:f7:e0:6c:84:92:e2:
6e:92:12:49:39:01:57:6a:31:d7:d4:c4:f2:fc:87:
15:f5:e3:5d:06:15:ff:6c:8b:83:95:a7:f2:9f:17:
ff:5c:80:47:97:2c:a0:b3:29:2f:b3:e6:57:5f:1e:
9c:6d:be:41:4e:eb:d2:96:5e:bb:a9:47:7d:26:bd:
63:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6B:74:87:27:9B:AA:92:46:B7:6C:AD:82:40:A9:BE:F3:B4:21:A4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/776b7b5c-0bb0-4d8e-87f6-d724990dc4b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.93.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ce:d3:e4:09:5e:7b:11:ae:48:7c:bd:aa:a7:eb:d1:16:c2:
6b:ce:b1:96:81:36:37:e7:ca:44:eb:35:b8:8b:14:25:7d:a9:
d0:bf:c6:92:09:ad:59:34:88:ba:29:ad:ea:d7:d5:1a:98:31:
a5:c9:fc:76:f3:21:0e:62:e7:51:97:3d:65:bd:14:98:1d:65:
a9:7f:8b:ed:5e:f5:f9:63:1d:83:0a:d6:70:b3:da:ee:3f:ed:
16:53:7a:4e:c7:3a:d9:ec:45:c2:e2:51:60:e4:a4:af:10:7b:
f1:84:f4:33:d9:d9:fc:5f:da:a8:14:83:0e:22:64:69:81:d4:
ec:13:09:9e:58:79:61:23:ea:1c:30:e3:72:3d:fc:9d:44:9d:
17:7c:b6:bd:f6:e0:9a:37:0e:3a:10:5a:42:0a:7f:f8:96:1a:
06:b0:3b:6a:0c:85:bb:d6:f8:0d:5c:cc:ba:36:21:05:48:65:
41:88:8d:ef:9c:0d:d9:9c:04:26:8b:c0:58:04:e2:6f:da:2a:
55:bc:f4:ab:85:b7:6c:1f:c2:4c:c3:6a:e4:52:25:1e:45:d8:
df:db:d1:dd:8d:80:d5:b3:e8:cf:b9:27:2a:a2:48:45:f1:e7:
58:1d:9e:a2:9e:b2:e9:16:79:85:2a:e3:b4:88:27:13:2a:0b:
19:eb:24:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:30 2025 by rpki-client