Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c61b0fe-71c3-4244-902d-55ef0daa2736.roa
File: 7c61b0fe-71c3-4244-902d-55ef0daa2736.roa (raw, json)
Hash identifier: 13DLSr7nmFe2CIMYwBDNy2d+TynRPzlUMns2cesr7eA=
Subject key identifier: DF:4D:48:DB:A1:40:6F:4A:03:99:2F:05:4F:14:18:E2:DC:B1:04:A4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 05424A86BAFAAF7BF22AA24D04FB186F9F2C0BB5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c61b0fe-71c3-4244-902d-55ef0daa2736.roa
Signing time: Mon 20 Oct 2025 01:01:28 +0000
ROA not before: Mon 20 Oct 2025 01:01:28 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:42:4a:86:ba:fa:af:7b:f2:2a:a2:4d:04:fb:18:6f:9f:2c:0b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 01:01:28 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=2f57d2d71d3ae628ca6d65430498d7fec171f46cf55d8f8629fa8ee33f534c0b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:21:05:6c:3d:73:78:0a:17:eb:9c:a4:57:66:
4a:b3:a5:b0:58:f0:8b:20:b4:9c:c4:16:22:95:cd:
b9:a2:49:5c:e1:39:2d:3e:04:61:e3:ec:fd:6c:8a:
54:f5:a9:b2:e8:d3:06:c4:75:3f:91:b9:12:00:97:
0a:ce:13:02:38:05:1a:79:61:2b:e7:f1:f9:1e:d7:
2f:fd:fc:69:d4:ce:63:df:c3:ce:aa:84:65:d5:25:
48:df:f7:28:21:fc:0c:92:67:02:34:10:61:75:ed:
41:14:67:c0:38:a2:6e:f2:69:a1:6b:64:66:84:ed:
93:32:46:25:55:1d:7d:23:9d:05:1a:c9:d8:18:0e:
97:22:50:dc:ab:c8:a2:17:82:15:9e:8a:79:a6:26:
a9:45:30:dd:66:6c:db:01:ef:da:d4:2a:8e:b1:0d:
eb:ea:43:4a:37:19:39:64:1f:8f:75:52:d5:45:4d:
20:1c:15:e7:72:3f:94:df:03:7c:0c:a4:de:b4:5b:
e8:01:6a:07:6a:b6:0a:c7:e3:ca:05:3e:e7:e9:aa:
54:61:67:8f:28:b7:4a:82:86:44:b8:a8:c7:f4:de:
8f:44:ee:de:5a:6c:e7:64:a9:68:0d:4f:8a:b3:03:
41:8f:69:a2:34:87:7c:da:88:d9:c7:93:8e:a6:5f:
9c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4D:48:DB:A1:40:6F:4A:03:99:2F:05:4F:14:18:E2:DC:B1:04:A4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c61b0fe-71c3-4244-902d-55ef0daa2736.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.114.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:dd:0a:a7:f6:cc:a0:6d:83:35:b0:c3:04:ea:ca:a4:b3:2f:
af:1b:6b:57:58:75:bd:57:27:6f:56:53:ea:46:d8:d0:fd:06:
86:c1:ca:36:31:7d:56:66:b4:79:46:0f:39:04:57:d2:52:4e:
25:03:6b:2a:5e:a5:7f:22:a5:2c:8d:05:e1:10:a0:6d:b5:44:
fc:e8:be:aa:d4:80:ae:37:56:ac:a8:2f:bc:4e:19:81:c9:67:
88:36:4b:5c:ce:32:c6:39:d3:6b:b6:9f:b5:5d:1a:9a:fe:a3:
5f:fb:71:e3:b6:3d:10:34:d6:87:a0:ab:86:0e:89:03:06:87:
d3:9a:6d:3c:a1:1a:d3:24:16:65:c7:bf:1b:d9:81:89:3a:e7:
4d:22:dc:47:f7:e9:5c:c5:58:c1:0e:44:92:17:b2:0c:e3:ad:
be:88:15:3e:d4:3d:19:68:80:f6:f2:67:83:50:9d:fd:a3:7a:
fe:82:93:be:6f:5a:0f:9a:3d:f9:d3:f1:bd:c2:74:29:79:3d:
62:5d:e7:74:31:f7:fe:b1:00:d4:c5:1b:81:9f:e2:33:de:d0:
d2:36:7f:35:0e:7f:fa:69:63:9f:00:0b:d2:aa:19:e5:27:15:
a4:7c:b5:6f:88:e1:c6:e7:fb:0b:91:09:7e:0a:7d:13:05:70:
5a:7f:93:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:10:58 2025 by rpki-client