Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/886605d5-3b49-46e8-b14e-3837bf7c528f.roa
File: 886605d5-3b49-46e8-b14e-3837bf7c528f.roa (raw, json)
Hash identifier: tFkjOnemL61Q3jsT/sWBHPZurngLF8CmogbvpRDjaJA=
Subject key identifier: 41:2F:90:97:CD:32:78:07:09:97:91:D8:45:47:AC:D6:8C:F2:D4:EB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 04550CCCDCB7FEB514B9670F79094F346D5D0540
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/886605d5-3b49-46e8-b14e-3837bf7c528f.roa
Signing time: Sun 19 Oct 2025 03:10:03 +0000
ROA not before: Sun 19 Oct 2025 03:10:03 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:55:0c:cc:dc:b7:fe:b5:14:b9:67:0f:79:09:4f:34:6d:5d:05:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 03:10:03 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=1fa9c4af74ce64b255982539e21bc1e23ab3dd8df7dd97bcbc1d463c3e391840, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:11:42:72:78:a6:72:c8:e7:c5:f7:f1:70:4e:
df:ee:fc:5f:0e:64:72:52:e6:74:18:cc:97:3e:9a:
5b:ea:b0:e0:44:7d:85:0e:b4:cd:c5:70:17:52:35:
00:68:bd:1b:42:a1:7b:29:f8:39:6a:ed:75:fe:39:
b0:e3:04:dd:fd:64:ff:4b:cd:87:aa:37:71:dd:e8:
12:ea:11:21:63:9f:a4:97:71:09:94:a0:23:df:95:
5b:ed:a2:f5:92:f2:45:31:a0:e9:34:58:cd:9f:ec:
44:6b:71:29:79:15:c1:cc:d4:f7:6a:8c:28:7c:97:
1b:e4:4f:8f:f7:d9:81:20:3f:dc:35:24:19:c7:8b:
c2:4e:bc:bc:ba:15:f3:3e:a9:86:ca:f2:03:22:aa:
4a:ac:16:b0:3c:b7:1c:d0:ec:da:9f:e8:c5:61:2b:
b4:1a:12:85:80:27:f2:83:28:49:18:fd:58:79:cb:
08:9b:87:45:4a:27:7a:01:1d:ad:e3:b6:33:22:24:
0a:54:bd:8f:fc:2b:74:5a:ce:84:a1:f3:d6:89:8f:
0a:93:e6:bd:ab:50:1a:af:27:73:95:c9:3a:d7:87:
83:a5:fd:31:e9:96:12:ab:d4:ac:49:13:f5:d0:24:
4f:f7:95:37:51:2e:ed:1b:17:c7:3f:24:af:13:45:
21:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2F:90:97:CD:32:78:07:09:97:91:D8:45:47:AC:D6:8C:F2:D4:EB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/886605d5-3b49-46e8-b14e-3837bf7c528f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.125.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:8b:6b:62:bb:90:23:d6:2e:bc:a5:ed:4f:de:dd:f4:a7:47:
fd:65:b0:9e:22:eb:d8:49:d3:b3:a9:5c:08:91:b4:e3:85:43:
15:a9:a0:b4:32:7e:70:9e:2a:bd:1e:96:31:a1:26:c6:08:3f:
dd:61:2e:df:ca:f3:cf:24:8b:13:d6:4c:75:64:c2:cb:b6:4b:
ab:5f:e7:80:fe:17:e8:34:58:63:99:b9:30:3f:66:73:b9:f0:
c8:07:1e:dd:ad:f0:b1:09:6c:76:3a:62:39:b4:94:25:e3:50:
04:7f:ca:6a:51:ae:d4:1b:26:12:08:17:34:0e:f2:d5:71:43:
ca:b9:eb:d9:f2:42:67:a6:30:37:b8:00:c0:a3:29:0b:97:f2:
0f:8d:58:dc:81:d8:bc:69:48:65:e2:a4:74:fc:31:59:10:24:
35:8c:60:13:e6:bc:e3:6e:d0:2c:91:85:7c:29:d0:32:c3:9f:
5b:4b:48:f4:49:66:04:b4:e6:b2:73:43:69:8b:bf:80:6f:ae:
bd:dc:90:0b:43:53:d1:3b:c1:19:e0:fd:e6:ff:d0:01:ba:45:
66:82:c5:fd:21:21:71:ec:ad:b9:21:5f:96:7a:2c:18:74:ef:
09:90:2e:2c:2c:4f:62:39:77:1f:02:3f:b6:a7:87:0f:d1:93:
b9:b7:d7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:19:04 2025 by rpki-client