Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94e08960-f5cd-40c7-9372-5a6a9d4418d7.roa
File: 94e08960-f5cd-40c7-9372-5a6a9d4418d7.roa (raw, json)
Hash identifier: rtFiJATRerxF8U0rW/k6f5djKYxCcbyPubvBc8P7LHY=
Subject key identifier: 11:71:88:8D:64:64:9B:A5:95:61:02:17:4D:6F:0C:93:4A:05:EF:37
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2D1F2AE8505652DE024A898F01D4C31A2711400F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94e08960-f5cd-40c7-9372-5a6a9d4418d7.roa
Signing time: Mon 20 Oct 2025 02:12:30 +0000
ROA not before: Mon 20 Oct 2025 02:12:30 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:1f:2a:e8:50:56:52:de:02:4a:89:8f:01:d4:c3:1a:27:11:40:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:12:30 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=8a80556de10a70def483711cd1b245b90537e18d6808e1ecec4d06cd2f6b654b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:88:cc:b3:ea:c0:05:b7:28:a4:b9:06:5a:
c7:61:71:8a:c8:cd:18:c5:74:40:c9:53:4e:b2:fb:
2d:8f:c3:a5:19:ef:4a:9c:5f:b0:b0:1e:fc:2b:dc:
fe:54:c3:68:84:6e:68:89:6f:77:b0:4e:04:45:5a:
3a:d7:5b:55:87:ab:8e:ce:18:29:dc:67:68:37:6b:
4f:6d:e2:ad:5b:9d:40:86:fa:9d:1f:4d:6a:5a:08:
07:8f:98:05:80:ed:55:1f:29:95:56:80:ed:bb:6f:
48:be:df:96:c1:20:fb:fd:df:50:38:58:a0:34:a7:
fa:37:c2:0a:03:27:aa:8c:6b:79:2c:1c:d3:10:fc:
5b:76:7f:1b:70:66:02:40:bc:6d:40:37:3a:a5:42:
e0:f3:e5:bb:82:58:14:e5:3b:ae:f4:4a:1a:f6:a1:
d6:69:ad:86:df:74:fe:98:95:7f:d2:d7:8d:a4:b8:
6b:a4:d2:07:37:ff:8d:79:78:29:19:f5:97:aa:3e:
96:e4:5e:db:35:f1:71:cb:20:bc:d5:97:43:02:30:
29:8d:f3:4e:57:72:7f:45:2f:37:06:c8:92:7e:d3:
25:02:8c:e9:34:44:24:37:cc:28:48:f7:9f:29:cd:
7c:e2:e6:3a:d2:0d:93:02:c9:af:97:21:63:2b:23:
5e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:71:88:8D:64:64:9B:A5:95:61:02:17:4D:6F:0C:93:4A:05:EF:37
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94e08960-f5cd-40c7-9372-5a6a9d4418d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.232.0/21
Signature Algorithm: sha256WithRSAEncryption
15:d8:4c:69:de:0a:1c:d5:7f:54:6c:80:6e:f7:9d:a3:67:ae:
16:8f:35:4a:0f:7b:b8:25:2a:96:69:5f:30:14:a4:25:fb:ad:
31:a9:e3:76:43:80:e3:c6:dd:16:99:ef:d6:47:a7:db:01:91:
14:0b:26:75:d2:dc:eb:46:95:2e:b1:43:0c:ae:0a:a3:14:5f:
07:22:16:4d:ac:2b:ee:ca:fd:cd:c1:74:cc:05:dc:3d:27:be:
2c:3e:a4:b7:de:a6:31:49:cd:6d:57:95:d7:41:16:c9:6e:a3:
65:cb:9e:01:ca:fd:b1:4a:2e:93:1e:82:ba:05:1f:a4:cc:5a:
fb:46:22:80:22:76:26:a9:79:75:a8:19:89:1c:4c:7b:68:57:
d4:b6:da:0e:de:d9:71:5b:12:c5:4b:58:bf:f6:a9:c6:cd:a9:
54:a7:a9:bb:a2:5b:b7:f2:bc:02:b3:b9:da:28:ed:35:67:93:
a3:0a:f3:f2:8c:4a:51:5b:4a:7d:78:01:05:fd:25:58:95:bb:
28:5b:2b:8d:f5:7a:c3:72:a3:0a:94:6f:81:31:1f:94:a5:0d:
39:b0:a5:f9:23:17:9c:55:db:ff:d0:cf:ea:b3:94:d0:84:3f:
8e:b4:aa:1f:07:74:88:1f:1c:e0:bf:01:b7:89:00:39:38:00:
d8:0d:88:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:54 2025 by rpki-client