Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c577539-6d9b-478c-9441-7ec27606162a.roa
File: 9c577539-6d9b-478c-9441-7ec27606162a.roa (raw, json)
Hash identifier: xX25dkCp3HUfW9Nou5+YOaFScFAombdRWhRZT27PBpw=
Subject key identifier: FE:4E:99:2E:1B:B0:F5:34:24:1E:D6:FE:22:E3:03:F9:AC:63:E7:38
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4F7D06AE200D6897420C73E79D490A8D30D42E5B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c577539-6d9b-478c-9441-7ec27606162a.roa
Signing time: Sun 19 Oct 2025 01:20:52 +0000
ROA not before: Sun 19 Oct 2025 01:20:52 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:7d:06:ae:20:0d:68:97:42:0c:73:e7:9d:49:0a:8d:30:d4:2e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 01:20:52 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=76f4da7931d4decc4cb9d71342da333f836526a179a3aec90b51122b6b17400b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1c:db:ab:c1:be:2f:82:24:a7:33:c3:1f:af:
a9:fa:da:51:38:68:11:79:b1:35:6c:91:e0:9b:c4:
fa:00:ee:c2:99:fb:0a:6c:a9:f3:8c:9a:25:32:15:
0d:43:af:cc:e3:aa:08:ab:98:ae:4b:c1:85:25:03:
02:d2:f7:2d:2d:db:89:b9:51:ac:28:46:5c:89:d3:
56:98:be:6e:ef:f6:e6:ea:31:a9:c5:8e:53:f5:6b:
f8:b7:bb:61:72:08:c3:9a:50:da:23:ec:2c:a4:01:
70:f1:50:15:c0:d5:53:97:26:21:eb:ad:eb:e9:43:
69:f7:ef:fb:87:c7:7e:a2:0a:f9:59:6d:7e:8c:72:
29:31:23:30:b2:38:b0:44:ae:a8:7b:7a:5e:1a:bc:
fc:41:72:fe:b3:46:93:01:5c:b2:4b:9b:b4:b8:96:
3f:59:3e:c0:a4:26:f0:ab:6a:51:95:91:2a:fa:77:
a4:f9:e8:6b:ef:e6:96:d3:6a:dc:ab:8c:90:a2:ab:
c1:50:08:93:a3:96:9a:d9:1b:0e:62:36:b9:6e:08:
65:4a:db:2e:1a:50:4d:da:f4:79:72:e5:c7:2e:a1:
c9:e8:8f:1f:28:03:1b:f2:2b:b4:cf:94:10:e8:54:
f3:27:ed:0d:76:a6:4b:55:38:45:84:af:9c:8c:90:
da:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4E:99:2E:1B:B0:F5:34:24:1E:D6:FE:22:E3:03:F9:AC:63:E7:38
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c577539-6d9b-478c-9441-7ec27606162a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.61.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:6a:a1:27:a3:24:4f:22:cd:01:d9:48:ad:33:a0:da:5e:7c:
54:73:49:ee:1e:3d:d1:af:d1:d8:96:4c:01:bf:77:51:44:00:
20:b7:65:d6:90:2b:51:af:bf:ea:91:a3:dd:b3:37:7f:28:f5:
6f:b0:69:04:86:6e:5f:95:43:d6:32:85:0a:be:d0:03:6a:5d:
30:e0:81:90:a0:d5:05:6a:57:6e:1c:75:af:56:c4:2c:98:fc:
f1:7b:55:e4:5f:0b:2d:cf:8e:41:4c:31:4b:65:e3:74:51:38:
02:41:e3:1c:32:dd:77:34:33:57:0a:ce:27:10:e7:72:c2:3c:
ac:ab:0f:46:55:43:f3:7b:ac:20:e7:82:89:c7:63:48:5b:12:
f1:21:97:e3:d5:18:03:15:e9:7c:10:48:32:59:b2:54:c2:fc:
db:be:68:af:57:cd:46:ba:de:52:5a:2b:38:99:e8:db:53:cd:
e8:2b:35:02:ee:99:2a:f9:ea:50:15:df:4b:85:b0:40:c4:94:
f9:b2:ab:9f:35:0d:b9:2d:28:cf:41:74:9d:a4:04:40:dc:66:
cd:24:7c:b0:a5:7c:45:3b:cd:80:53:d9:ea:01:97:45:d9:5f:
e3:5c:a1:48:5d:6b:27:7b:ff:0c:d3:df:46:52:ba:6f:dc:3a:
38:4d:aa:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:28:26 2025 by rpki-client