Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9dbdebae-a350-4584-923b-54765c01d11b.roa
File: 9dbdebae-a350-4584-923b-54765c01d11b.roa (raw, json)
Hash identifier: W/4ta6fvzZjEYbLla/QCRUwgDez2rAKJPh4pmY18IcE=
Subject key identifier: 21:CE:B2:D7:F8:D9:67:BC:DC:49:BF:AD:F8:E3:3F:7C:DB:6B:AE:75
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 70AB4A184D7E1D0E9F87EB28DE1E008B5C3E6562
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9dbdebae-a350-4584-923b-54765c01d11b.roa
Signing time: Mon 20 Oct 2025 06:32:20 +0000
ROA not before: Mon 20 Oct 2025 06:32:20 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.246.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:ab:4a:18:4d:7e:1d:0e:9f:87:eb:28:de:1e:00:8b:5c:3e:65:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 06:32:20 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=14f60b76b1c7f76aa253a538aebc49ec7e1cd76d7fc084de7d6046c747bbfe2a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:13:58:c5:8e:93:8d:a8:42:ce:5c:8b:48:62:
cb:bc:6b:dd:ef:74:4d:f0:48:93:7f:92:8a:29:cc:
68:f8:00:d3:a5:b0:52:2b:4c:17:fc:97:cb:f9:58:
db:6a:7d:c8:8f:d5:ac:81:88:1a:ab:b1:27:c9:0b:
34:9d:fe:75:d3:78:c7:bf:5c:06:ef:43:25:4d:89:
62:7a:d0:85:3e:bf:35:4c:a6:83:35:df:73:e4:fd:
a7:ed:14:74:9a:45:3f:33:01:8f:ee:ed:56:42:70:
f0:d1:07:c0:d7:27:9d:21:31:d2:ba:60:a9:9d:c3:
6d:38:74:ec:2b:39:a5:c2:d6:4f:0e:92:15:51:cc:
23:f1:e7:d4:c3:6a:1f:03:1a:eb:a6:41:dd:43:76:
85:e1:91:bc:d3:6b:52:56:b9:fc:ac:47:3c:30:79:
e1:77:01:e8:0d:11:f5:66:37:4e:66:22:ee:a7:47:
3b:c3:9a:cf:ff:0c:e9:a2:ae:ed:fa:88:82:ca:7b:
40:8b:f9:6f:f5:d7:ca:fc:1c:2a:6a:cc:89:d8:19:
28:92:ea:c7:bb:39:eb:0d:06:44:f0:46:c6:ca:30:
43:1d:a0:03:e6:18:84:79:d2:e6:3c:68:30:a9:71:
ce:3b:90:ce:b7:e4:0b:a8:04:14:2e:65:e0:7b:84:
66:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CE:B2:D7:F8:D9:67:BC:DC:49:BF:AD:F8:E3:3F:7C:DB:6B:AE:75
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9dbdebae-a350-4584-923b-54765c01d11b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.246.0/23
Signature Algorithm: sha256WithRSAEncryption
22:a6:1b:61:d8:5e:ba:17:d5:b4:18:72:d9:bf:85:48:25:27:
f7:93:0d:37:21:7f:3b:34:96:fd:89:69:0d:20:8b:40:a2:c1:
e9:72:06:96:44:c1:4e:4c:fd:0b:c7:9d:cc:09:87:9d:b0:a4:
18:70:59:b6:ac:80:d0:e9:11:92:fd:18:b2:8b:52:ef:5f:12:
3d:30:08:21:ff:1c:85:b5:f5:15:bd:6b:0a:c5:3c:36:12:73:
66:e8:bc:3a:82:10:af:4c:7f:7c:44:32:c6:9a:2f:cd:2c:4d:
9c:74:63:a5:44:be:0a:f0:96:d7:df:4b:6d:80:cf:2e:d4:84:
08:28:7a:ec:fd:6d:0a:20:9b:57:2f:ea:6a:42:d9:da:a6:c8:
18:a5:51:e6:f0:d2:e6:fe:66:99:77:4d:5d:44:6c:63:16:f1:
36:ae:51:96:b3:2f:7a:a6:a1:7b:bb:ff:18:bd:02:82:07:40:
ce:46:ad:9a:15:ac:a2:ef:a2:9d:87:59:b5:c0:34:11:9b:cd:
f8:f2:64:90:31:8b:ed:16:0b:af:2d:8a:b3:7d:18:e6:dd:65:
e2:0a:35:3a:c0:2d:c7:8f:27:b5:0f:65:10:c3:a0:6f:7a:36:
bf:3a:83:b1:40:f8:52:29:21:61:30:99:c1:64:5b:60:f3:fe:
5d:aa:cc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:17:39 2025 by rpki-client