Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a78693d9-b2ab-492c-b49b-fe453e8a7c74.roa
File: a78693d9-b2ab-492c-b49b-fe453e8a7c74.roa (raw, json)
Hash identifier: eRUpA5WKB1JitFwrqsMwF2Z4oyLFMkT1XKhrTbUAnfI=
Subject key identifier: 40:E9:69:D9:6C:01:D2:F0:0E:6E:93:8C:7F:53:32:D9:BC:B4:A4:63
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1CC6E1427EA88DDCE08F3F4114BA1D148AD7629A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a78693d9-b2ab-492c-b49b-fe453e8a7c74.roa
Signing time: Sun 19 Oct 2025 01:20:09 +0000
ROA not before: Sun 19 Oct 2025 01:20:09 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:c6:e1:42:7e:a8:8d:dc:e0:8f:3f:41:14:ba:1d:14:8a:d7:62:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 01:20:09 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=f0c4e75156044362c9555da3784edde7ebd37efd0f1b63941e719f5f7c5081d1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:23:70:4e:eb:04:76:e9:80:3b:0c:e3:df:cc:
6c:0d:3e:b2:33:47:0d:f2:e9:fd:fd:b1:39:19:66:
3f:24:06:14:2b:e0:01:2d:35:66:97:6e:aa:08:83:
bc:91:8e:ea:db:e8:09:07:e2:6b:09:a5:2f:1f:4a:
1f:44:6d:4b:e3:cc:8a:52:da:c9:da:41:48:60:83:
1b:5e:83:12:f9:79:2b:22:d6:41:ad:94:ef:19:8c:
e3:07:91:e3:ac:37:a9:a0:3d:40:92:41:a3:5c:66:
67:ee:da:26:80:d5:69:c4:02:d1:e3:a2:cb:83:ff:
73:7e:12:ca:7b:39:10:48:31:8c:b5:ac:18:ff:d6:
40:4b:c3:8c:9e:9b:55:a3:5f:f7:63:54:7a:dc:d5:
ed:17:9f:db:51:71:97:0b:17:5b:c5:b9:a6:f0:66:
71:dc:76:77:92:bd:1c:9c:4c:f0:3b:cb:4a:1c:12:
d0:ae:f3:30:e5:f3:3f:53:58:40:4d:8e:4d:dc:3b:
bd:7e:c1:78:82:76:0b:a8:8a:fb:64:f0:86:3e:33:
24:f0:51:f1:4d:e5:6f:42:a1:ca:a6:dd:6a:52:19:
44:f6:04:5d:5a:ad:c3:65:dd:fd:d6:46:04:36:a2:
72:ed:33:2b:ee:6e:81:b9:b4:e9:06:f7:3c:2a:b9:
65:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E9:69:D9:6C:01:D2:F0:0E:6E:93:8C:7F:53:32:D9:BC:B4:A4:63
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a78693d9-b2ab-492c-b49b-fe453e8a7c74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.231.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:67:46:36:15:72:db:77:28:5a:36:c8:a6:36:8c:7d:dc:f8:
91:d3:2c:72:3f:11:4d:6f:34:30:54:d7:ff:17:1e:c2:01:2b:
29:16:3a:16:d0:cd:19:9e:b7:10:44:bf:bf:a1:56:3b:5a:3c:
ac:20:e3:21:ee:35:e0:3e:59:4e:07:8b:1a:55:ea:29:4c:0c:
78:3c:f2:f8:01:87:67:4c:75:55:05:d2:59:29:c9:0c:2f:a9:
80:31:ed:34:31:9c:99:44:1e:05:51:eb:f5:35:03:9b:d4:e9:
48:86:99:16:60:48:14:2a:b1:46:8f:4e:ed:2b:25:95:6d:c7:
d8:77:c8:64:03:7a:f8:e9:fa:a6:eb:e3:ca:f2:93:54:f6:54:
27:34:53:eb:5c:68:9f:61:0c:13:d9:0f:5b:77:5d:4f:37:8d:
72:89:cf:02:02:2b:89:1a:2d:e2:12:e4:6a:ad:bc:07:80:0c:
b1:12:05:36:f7:f8:cc:49:62:53:e4:0f:40:8e:84:4a:b2:ff:
af:94:af:e5:95:8c:22:ef:d6:1b:58:ac:90:37:73:9f:eb:c8:
38:9a:ba:f8:4b:c6:05:6c:65:eb:47:dc:f7:2d:1a:9b:f6:e9:
4a:1a:e0:60:92:f3:36:2f:d6:df:69:1d:30:48:49:98:b8:84:
72:06:40:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:49:04 2025 by rpki-client