Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c36ac80-f62b-43fd-ab49-b9fad0083f11.roa
File: 7c36ac80-f62b-43fd-ab49-b9fad0083f11.roa (raw, json)
Hash identifier: 4yMy9UIuErAMNyxwbiMYokiHRXVGEv8kTbpfaFxa91I=
Subject key identifier: 92:19:47:4F:8D:DB:D3:03:B5:D9:07:15:51:43:5B:37:31:49:3F:E3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2636A3B469753341B79644C9FFB04F08464A659E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c36ac80-f62b-43fd-ab49-b9fad0083f11.roa
Signing time: Mon 20 Oct 2025 01:41:33 +0000
ROA not before: Mon 20 Oct 2025 01:41:33 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:36:a3:b4:69:75:33:41:b7:96:44:c9:ff:b0:4f:08:46:4a:65:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 01:41:33 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=0a297dc3c867c8cc4b95f1ecfbc801ebede05b659d033006a291f3a94743e421, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a9:be:1a:8b:ac:da:43:a8:d5:d2:e8:f3:59:
a0:e9:4c:4c:0e:c2:77:c6:e8:6a:8d:c5:ee:c7:e1:
b1:68:a6:e6:87:eb:e4:4a:66:11:a1:5d:2c:a4:81:
9a:5f:e3:2d:57:51:23:b4:d6:d2:fd:b1:bc:4e:69:
bb:a8:0f:b6:08:8b:4c:40:e1:86:69:8e:60:91:b7:
09:2c:85:d9:3a:44:a3:4b:c0:4f:95:19:d2:6e:47:
e5:7f:92:87:c3:89:ab:e2:f0:09:8b:c1:fa:24:50:
25:33:36:28:4e:cc:3b:9f:7d:70:f5:ed:3b:dc:af:
f2:30:24:46:87:c8:ab:cc:92:34:4e:87:78:15:2a:
33:ca:62:16:56:58:3f:9e:6f:4a:7f:14:af:f4:12:
f8:20:e8:f0:a1:71:05:5e:eb:ff:9f:95:c5:b1:40:
9c:d3:bb:34:9c:e1:a4:f5:f2:9f:d7:a4:ff:dc:4e:
05:b7:67:c5:de:c2:d3:a8:c3:52:ed:02:66:e0:23:
b2:83:91:32:81:25:f4:da:0e:84:23:1f:d9:4a:51:
3e:e0:6b:15:e7:98:28:cf:a3:21:54:82:43:65:af:
ba:da:4c:f4:26:c0:6e:0e:8a:b4:33:cd:9c:da:a4:
fc:6c:54:57:57:60:30:e0:32:7d:dd:bb:1d:ea:bd:
2f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:19:47:4F:8D:DB:D3:03:B5:D9:07:15:51:43:5B:37:31:49:3F:E3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c36ac80-f62b-43fd-ab49-b9fad0083f11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.26.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:8a:d8:50:5e:89:76:77:e0:d3:ed:f7:fc:a9:30:9f:41:28:
be:ab:fb:ab:0d:c9:31:92:6b:c5:a6:cc:55:2b:23:de:33:48:
0f:0c:a8:1f:7b:ed:88:c4:af:b3:e1:cc:31:23:45:ab:c6:8f:
6a:8a:87:50:26:95:a2:a5:5f:c9:45:9c:e6:28:fd:17:c7:29:
2c:71:45:b6:5f:00:b9:0b:51:65:a3:73:aa:3f:37:c5:bd:fa:
33:a9:d2:74:bd:c0:df:9f:37:d4:e1:31:44:01:c0:7f:4a:70:
f9:23:57:22:18:6a:bb:94:3b:07:db:20:0c:fe:a8:7e:62:2b:
7d:06:d0:ea:2c:8f:bc:e7:41:8e:7e:c7:3c:7b:65:33:d8:0b:
58:36:82:cc:82:d8:02:62:ad:b8:29:f1:23:fd:3b:00:5d:c4:
f5:e9:13:a3:34:10:2c:e2:33:83:28:2f:da:21:13:56:2f:95:
f6:59:1d:1e:8f:2e:43:4c:48:6c:f6:f6:e0:1b:c9:9b:00:88:
04:3b:ee:d2:8f:86:99:33:e8:84:ba:cc:9b:ed:71:d8:ee:4b:
6c:62:41:f1:d6:6f:06:83:03:48:09:8f:41:5b:8e:6d:38:f1:
9e:d5:f9:64:7b:ad:dd:cf:71:b2:b0:2a:6c:fe:77:7d:dd:56:
9a:37:1d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:29:47 2025 by rpki-client