Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94750188-25ec-42f0-91a5-ee9fce8254e3.roa
File: 94750188-25ec-42f0-91a5-ee9fce8254e3.roa (raw, json)
Hash identifier: Y6iv7MYAzYgkjb1ODp1AypZI55MTqc3xsrzxo2Ku3EU=
Subject key identifier: 15:82:8A:2F:89:CB:6F:82:E4:94:F9:DF:C6:53:BD:FF:62:0B:66:34
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6D8F2E4E81ED8F7BCD4C827C976F4B20AA9AFEF2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94750188-25ec-42f0-91a5-ee9fce8254e3.roa
Signing time: Sun 19 Oct 2025 00:10:37 +0000
ROA not before: Sun 19 Oct 2025 00:10:37 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:8f:2e:4e:81:ed:8f:7b:cd:4c:82:7c:97:6f:4b:20:aa:9a:fe:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 00:10:37 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=c7d9864f9b413c6e437b2c42ff246880d990fc809f8fbf6c4d51b2edab753aef, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bd:ab:5a:b4:d0:27:ef:63:e0:15:15:82:3d:
84:45:e9:67:7f:41:33:ca:ac:f3:15:f0:1a:39:39:
e0:d9:85:6e:95:70:86:93:ca:ca:e3:b1:e7:eb:d5:
15:b9:6f:32:69:72:dd:b7:ef:89:2e:03:d0:b1:1f:
02:45:10:87:44:fc:0c:20:35:0d:4d:b8:6f:a5:68:
ab:4c:1c:ba:3a:42:fb:f0:8c:ff:54:a3:fb:79:07:
be:42:7d:36:a9:a0:e0:f8:88:34:58:31:0f:c9:cc:
3c:f8:51:cc:f4:02:aa:61:c2:9a:f2:bf:b6:0f:e7:
22:b5:01:9e:70:fc:5a:e7:23:b0:1f:5a:ee:ba:91:
97:1d:8f:1a:07:3b:88:fc:d3:b3:90:5e:3c:04:a6:
c9:c8:a7:68:09:54:55:c6:f7:2a:6f:e4:8d:54:3f:
dc:ed:ab:76:bc:7f:53:cb:88:b5:ca:4e:07:e8:6b:
4c:82:06:0e:92:93:e3:9e:00:3a:65:1c:7c:42:80:
3f:7e:05:f4:c9:78:41:2d:0a:73:af:f1:59:4b:fa:
93:9e:0b:75:ec:38:5b:c7:62:b6:6f:ef:03:68:b4:
4d:46:1e:db:bb:94:e0:91:80:76:cf:18:d0:f8:0a:
8f:cb:d2:29:56:6c:3b:76:93:8a:20:8a:72:19:71:
6e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:82:8A:2F:89:CB:6F:82:E4:94:F9:DF:C6:53:BD:FF:62:0B:66:34
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94750188-25ec-42f0-91a5-ee9fce8254e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.16.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:3d:51:39:bb:ba:48:c3:f9:c6:b3:7e:ac:fc:bf:07:26:73:
08:92:ff:7b:d0:ca:5f:6f:aa:58:7f:e0:a2:ef:92:82:ab:4f:
4f:c7:13:a2:60:97:ea:54:69:24:80:80:42:85:f8:28:aa:d4:
b9:c9:6a:88:9a:5a:90:04:36:09:ae:3e:c9:1c:38:6c:d7:4b:
34:cb:46:4b:2a:3f:e6:e5:55:cf:87:81:c1:38:0d:ed:70:1a:
e0:ae:32:96:fc:45:3a:03:14:96:0b:7b:e9:75:31:9f:bc:19:
c5:d4:72:24:58:36:8c:2f:ef:be:42:aa:e9:98:52:fa:11:63:
ce:4c:1b:0e:75:e2:06:50:95:b8:cf:b8:f6:28:aa:17:f9:b0:
e7:02:3e:98:4a:f0:31:7a:26:a6:ee:e2:f5:4b:75:a5:78:ea:
58:63:43:66:1a:41:26:40:d9:80:0e:c1:c7:bc:79:01:52:f4:
43:06:00:f3:2c:b9:75:1d:c5:aa:c0:42:e6:10:2f:10:db:7d:
2f:1a:dd:4f:48:52:49:2e:8c:54:4e:a7:5f:01:51:a9:54:66:
c7:22:04:4c:62:3e:9e:ce:14:1a:26:14:70:0f:bb:03:e9:14:
c0:87:28:cb:0c:a9:64:b9:9d:14:b9:2e:8d:b4:0e:09:f0:41:
4e:cf:9a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:30:07 2025 by rpki-client