Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bab4e06-9116-4c3b-bf1f-459959867236.roa
File: 8bab4e06-9116-4c3b-bf1f-459959867236.roa (raw, json)
Hash identifier: ZYwFY64pRFj7vkTsf4I6E70NvnyXe00CWkYogWghCaY=
Subject key identifier: 1F:55:24:7D:2C:D3:01:F1:03:4F:DF:40:F8:F9:F2:E1:F5:02:DD:C3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7516BDC3B2885CAA282989B4D730FB408AD5C231
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bab4e06-9116-4c3b-bf1f-459959867236.roa
Signing time: Mon 20 Oct 2025 06:20:57 +0000
ROA not before: Mon 20 Oct 2025 06:20:57 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:16:bd:c3:b2:88:5c:aa:28:29:89:b4:d7:30:fb:40:8a:d5:c2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 06:20:57 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=deacaa7a779b36f545a4eb914ea10e0590c34eb0840c0c386801fbdc0ada7260, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:84:4c:03:06:6c:9f:61:ea:63:d1:12:61:84:
92:b4:d9:fc:a5:d3:dc:e0:2c:64:79:4c:e4:2d:f3:
27:71:6f:fd:fb:47:b1:7f:55:c7:d2:78:a3:9f:54:
ef:08:f9:ad:12:1f:ae:b1:a0:f0:e6:cd:16:f4:4d:
65:03:d0:55:54:f1:e2:13:16:1a:84:e4:00:73:3a:
60:37:b5:2d:94:b2:8b:1f:17:9e:3b:a0:33:35:78:
50:6c:e1:21:fe:4e:41:46:de:dd:20:2c:47:67:28:
23:43:15:3e:84:16:2b:92:04:e3:30:06:21:eb:e7:
fa:a3:08:0c:b7:94:c8:23:e0:4a:09:f3:b6:70:76:
fb:e7:99:8e:bb:ae:c5:b9:3c:c1:f7:78:31:cd:86:
7d:32:59:f7:34:d5:23:37:02:50:77:a6:8a:f4:50:
3f:11:12:2c:33:ef:27:6f:26:ef:e3:51:b3:97:7f:
6e:22:20:d5:e9:e6:ab:9b:a7:34:89:80:c4:0a:e8:
c8:f9:38:d9:c5:8e:31:8a:44:05:dd:ce:9e:a2:6f:
9b:f7:80:85:1c:88:53:60:88:e0:d3:98:b9:0e:ef:
52:da:7e:33:62:25:00:1a:c5:a6:b1:35:ed:0a:64:
7d:8e:a1:87:22:3e:76:a2:c5:7e:15:8e:51:26:33:
6a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:55:24:7D:2C:D3:01:F1:03:4F:DF:40:F8:F9:F2:E1:F5:02:DD:C3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bab4e06-9116-4c3b-bf1f-459959867236.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.90.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ad:5b:18:30:43:9b:14:a4:36:78:c9:7c:da:63:98:27:5c:
66:92:50:5d:2a:29:57:0a:0d:81:4b:da:cb:fe:24:87:00:c6:
cb:8f:87:24:74:cb:19:58:4f:90:1f:cd:ed:59:83:b3:b0:34:
61:09:1e:f3:38:b8:98:15:45:54:6a:62:2b:91:fe:71:45:c6:
5f:cc:91:34:7c:e1:55:e2:b3:73:3b:9f:4e:d3:24:42:a4:ff:
5f:67:81:57:40:ac:a6:ee:63:b6:55:88:a1:98:7c:c7:0f:17:
0a:5a:78:b2:ec:3a:e4:5b:02:12:bc:f9:4b:17:85:6e:4e:32:
c1:1f:6d:a1:b6:0f:b6:3b:65:19:f7:ca:a2:98:99:f9:18:c8:
8a:74:9e:2d:77:3b:bd:da:b1:d5:b3:0e:ba:00:f1:a6:1e:ac:
a2:34:b8:0c:49:51:9d:fc:a8:80:64:96:fe:f5:10:18:de:02:
8d:77:63:cf:fc:bd:2f:8a:de:e0:15:02:fc:5b:21:03:a3:a6:
aa:e0:cb:4c:67:93:31:29:8c:72:4d:5f:bc:db:81:ea:1a:41:
96:81:31:fa:8f:19:db:9b:8f:4e:cb:66:5e:01:6d:04:9c:87:
e7:c1:00:1e:db:5c:e6:bb:39:72:84:bf:e0:c3:0e:26:e6:f2:
04:c4:81:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:51:07 2025 by rpki-client