Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91aa65e0-df5e-4fdb-a788-2fc53144f3de.roa
File: 91aa65e0-df5e-4fdb-a788-2fc53144f3de.roa (raw, json)
Hash identifier: Pp7SAa5wK80myNpJC5y6qfgBOucNfi6Gt773RsvhGvo=
Subject key identifier: A9:FE:88:3E:82:B6:8E:AB:0B:1C:55:73:BF:9C:92:38:7C:2C:83:0A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0C23359F575E38ABFBBF60B5CE9A8655BAC867DD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91aa65e0-df5e-4fdb-a788-2fc53144f3de.roa
Signing time: Mon 20 Oct 2025 04:20:08 +0000
ROA not before: Mon 20 Oct 2025 04:20:08 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:23:35:9f:57:5e:38:ab:fb:bf:60:b5:ce:9a:86:55:ba:c8:67:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 04:20:08 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=7e5697982a3360ec4a7b8494443f0261802483a7bf33b17e620bc1c742851a96, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ae:b9:0a:0f:6a:ff:4d:c2:96:2d:76:69:58:
24:43:34:2c:f1:01:10:29:3b:8b:7a:ae:b9:06:3f:
e6:e7:31:89:d9:2d:76:8b:6d:71:05:9b:6b:f9:de:
65:0b:93:03:9a:32:47:2b:57:92:d0:07:72:42:65:
3e:4e:d1:97:b2:6e:98:e9:16:6f:4e:91:ec:79:f6:
0f:ef:4f:2b:c1:23:43:86:54:28:6d:00:ae:78:8c:
8a:0d:da:3d:0d:7c:15:de:88:f7:ed:46:5c:19:29:
5c:a3:30:78:58:38:58:0b:d1:92:b0:69:de:45:16:
9e:fd:9c:fd:ce:7d:e7:f1:c6:e0:71:b4:31:7e:93:
8a:ab:bc:5a:f6:0d:28:2e:f5:8e:36:10:c5:5f:3d:
bc:6a:7f:72:0f:49:1c:b8:66:a1:30:3d:91:01:8b:
60:44:c0:70:b0:82:12:1d:4a:4a:59:57:85:fb:e2:
2f:86:bf:f3:29:21:04:26:a3:bb:cc:49:30:51:96:
cc:a5:7a:bf:a2:d0:35:97:e5:18:f2:42:74:c2:70:
2f:17:7d:99:67:04:dc:01:71:22:03:ab:e2:1e:ee:
ea:88:ed:23:12:0c:ac:2a:e7:36:ff:5f:1b:bd:2a:
cb:43:3c:d8:96:82:d5:31:e2:9a:d2:32:12:b3:9d:
10:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FE:88:3E:82:B6:8E:AB:0B:1C:55:73:BF:9C:92:38:7C:2C:83:0A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91aa65e0-df5e-4fdb-a788-2fc53144f3de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.192.0/18
Signature Algorithm: sha256WithRSAEncryption
99:31:c6:bf:79:c7:a3:0c:c0:d3:ea:fc:81:e8:70:de:2d:80:
09:ab:9b:20:8d:e0:7d:c0:2a:d7:0e:85:2e:b6:76:fc:e0:49:
87:12:6a:f4:90:39:30:47:05:25:42:fe:f3:1c:62:66:2c:e5:
2f:65:05:a0:49:68:4e:b2:f3:c9:d7:f7:0f:65:d9:ff:a8:fb:
28:7d:b9:72:d6:12:ca:67:68:63:d8:be:82:ee:f5:8a:91:4f:
2f:85:2c:17:b9:b6:71:73:d2:53:45:5f:25:11:86:c3:b7:d5:
19:53:9b:93:1e:bf:ae:c3:eb:0e:43:71:5b:24:96:58:67:f9:
e8:de:9d:33:06:1d:0a:64:dd:10:69:aa:a9:42:5c:83:d1:4e:
87:04:c0:27:d7:48:9d:f9:45:2e:d9:bf:9b:4d:42:1d:4e:2f:
7e:6d:88:84:b4:bb:ea:6f:b4:d4:87:71:36:08:16:ec:31:d9:
2c:13:5e:34:cb:18:8e:0e:42:c0:77:28:90:a5:89:77:4d:83:
fd:ae:24:ba:49:2d:72:94:18:22:26:ec:31:12:58:91:ae:cc:
ce:1b:9d:26:8d:19:52:59:89:d7:87:16:d1:d7:17:86:b8:d3:
5c:68:81:fb:f4:55:75:33:3d:6a:c3:cc:52:53:41:f1:7c:04:
a6:b7:c1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:58 2025 by rpki-client