Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cb95083-97a4-46d5-ba88-93be75021f57.roa
File: 8cb95083-97a4-46d5-ba88-93be75021f57.roa (raw, json)
Hash identifier: /BkxJN76UhfmQdprtiq3XI/ZESzbvmNGVgEiOYAjJOk=
Subject key identifier: 24:8F:FC:8F:29:85:16:B1:0F:FB:9D:75:40:69:9F:73:01:A4:8A:3A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 057512DD2EF11A941770A650E00C50FB2DF8EC91
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cb95083-97a4-46d5-ba88-93be75021f57.roa
Signing time: Mon 20 Oct 2025 05:01:04 +0000
ROA not before: Mon 20 Oct 2025 05:01:04 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:75:12:dd:2e:f1:1a:94:17:70:a6:50:e0:0c:50:fb:2d:f8:ec:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 05:01:04 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=512d119f7ec9272b37d052ad5619fa6c331e597fdee81334db5dab2b56231278, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c0:40:ca:dc:09:89:03:43:82:57:7c:98:f8:
d5:73:10:c5:d8:21:93:2b:05:c3:aa:bc:48:6b:3b:
8b:11:17:38:a6:9d:b2:88:41:fd:5b:7d:da:71:fe:
c2:57:76:3c:d6:9b:32:87:9f:c9:d0:4a:8d:be:a4:
53:4f:37:8d:8c:9c:af:ce:00:45:9a:d6:a7:04:b7:
8a:e0:2a:0e:09:44:2f:fc:0a:fa:6d:1a:c3:91:88:
02:40:f5:62:15:c7:08:f5:6b:ce:dc:c9:be:e6:93:
36:5a:99:79:c8:da:83:1c:13:b8:e2:fb:4e:c7:4c:
0a:57:c1:e9:fe:9d:22:1b:3f:86:03:30:a6:e9:db:
bf:53:b3:e6:ca:b9:18:38:78:58:15:b6:9a:0e:ff:
0d:37:79:e2:3f:34:12:30:1e:ba:b4:c8:64:aa:bd:
39:86:0e:70:58:bb:5a:aa:2a:ee:d6:aa:1c:8c:6f:
bd:a6:76:3d:76:39:9b:ec:eb:ec:60:b7:b4:72:9e:
4d:28:e6:c3:83:2f:d6:5e:eb:f6:96:e7:e2:3e:77:
15:e3:ed:8e:51:36:a6:e9:b7:4a:ba:d5:2a:27:75:
1b:5c:67:5c:7d:e7:00:d7:c6:05:15:e0:4d:53:05:
a0:1a:65:b1:1a:4d:b8:a5:48:4e:42:fb:9c:7e:63:
58:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8F:FC:8F:29:85:16:B1:0F:FB:9D:75:40:69:9F:73:01:A4:8A:3A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cb95083-97a4-46d5-ba88-93be75021f57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.71.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:1b:87:86:ec:21:10:98:05:30:a8:1a:af:be:d1:7f:4a:dc:
31:5d:62:88:0f:cc:57:47:90:52:7f:05:fe:21:f9:7b:a5:c8:
1d:bc:1c:f5:d8:c2:e9:7d:aa:c7:30:0a:de:68:68:36:ac:fe:
c3:32:23:2f:de:55:cb:06:2b:06:de:e1:2f:ae:dd:81:1c:78:
54:71:d5:a5:24:41:00:39:d8:8b:05:6e:f3:e7:74:7f:74:60:
50:4f:eb:41:0f:4b:d9:71:7e:16:16:c9:79:30:ef:67:eb:e2:
e2:2e:c6:a9:fb:82:5e:ee:f0:b2:c5:71:48:2c:34:17:33:82:
53:5e:c2:1b:be:a8:fe:0e:fe:10:04:6d:62:e5:00:29:a6:2e:
17:a1:e8:72:e9:12:c5:ec:da:e0:3c:84:d0:df:c8:8b:4e:66:
b9:b3:4d:32:aa:eb:5e:f1:c7:da:12:31:77:f3:65:93:dd:f5:
17:ac:5e:6e:a1:fb:fa:66:a4:f0:99:33:7a:85:4e:01:f5:bd:
3e:20:c7:6d:d0:0e:79:7c:85:3e:fe:4e:95:cc:93:9e:09:84:
fb:7a:53:95:77:54:0f:ec:73:ce:69:27:49:b3:af:50:ed:2c:
ab:fb:b5:84:98:4e:11:01:1a:bb:38:1a:4d:3c:d5:13:51:22:
39:6a:60:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:13:47 2025 by rpki-client