Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1a12d01-b849-4a1b-b8aa-98af19221bc4.roa
File: b1a12d01-b849-4a1b-b8aa-98af19221bc4.roa (raw, json)
Hash identifier: 1LsIYlQn22dSeWEzi+J91BzvwzfK95jAUKAx2sF/NyQ=
Subject key identifier: 98:69:09:02:C7:86:ED:A7:A7:44:4F:01:67:78:75:5A:A0:F8:21:4F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4A0B739D46BBEC2C1E1C1BD4AD3CF50A1E8DC3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1a12d01-b849-4a1b-b8aa-98af19221bc4.roa
Signing time: Mon 20 Oct 2025 00:02:18 +0000
ROA not before: Mon 20 Oct 2025 00:02:18 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:0b:73:9d:46:bb:ec:2c:1e:1c:1b:d4:ad:3c:f5:0a:1e:8d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 00:02:18 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=08be09070205571e7a2ea161a29cfc89e37f98cdd1682c5319139615ea3e5a4a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d4:33:40:81:4f:88:dd:30:92:00:f6:a8:bd:
2e:67:c2:f7:39:c4:69:16:99:fa:0e:8e:05:9e:06:
de:0f:41:8e:77:6e:18:a1:08:e4:02:62:10:fe:99:
29:d2:84:51:89:6d:73:07:9c:b7:76:3e:ae:ea:b4:
67:eb:2e:61:c0:24:3c:5f:62:ba:f5:ef:57:ca:08:
ba:af:31:47:f7:30:f4:05:55:43:90:9a:46:8e:17:
74:fd:90:99:65:2a:01:2f:b4:fd:cb:76:d9:e8:29:
63:87:cb:2f:23:93:2d:b0:00:c3:c6:e9:ef:41:18:
6d:35:e9:46:73:6a:d7:46:88:f0:2c:c7:c7:80:57:
38:ea:8b:20:2b:29:2f:80:51:76:a7:66:a9:81:d1:
f2:ed:65:c9:99:ca:21:cc:24:7b:f9:1d:ff:49:34:
95:ec:13:fb:ac:41:8c:27:72:12:61:13:a8:47:8a:
d8:1d:dd:4d:57:ec:37:23:b5:ac:f1:1a:48:a8:7b:
75:3a:e7:26:35:bc:dc:51:cb:73:3f:59:86:ec:2b:
f5:8d:a5:f9:f8:8d:2b:26:19:e5:40:97:af:58:b9:
da:4b:69:bf:2b:9f:1c:09:60:de:d6:d4:1e:ef:4e:
b1:79:b3:6c:18:84:1e:b6:3e:1f:75:75:a4:e0:b1:
ff:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:69:09:02:C7:86:ED:A7:A7:44:4F:01:67:78:75:5A:A0:F8:21:4F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1a12d01-b849-4a1b-b8aa-98af19221bc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.116.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:62:fc:c0:81:b2:30:08:84:2e:c0:91:71:1e:01:82:3a:99:
c0:0d:6a:e1:8f:e0:8c:52:23:f0:b0:bc:52:f1:2a:3e:d9:f5:
ef:4c:48:68:67:b0:f6:46:63:50:4c:57:e8:db:e3:ee:06:aa:
e8:38:8b:f5:8e:70:4d:91:fc:99:33:6d:2a:66:63:d2:09:cd:
54:a8:3c:fe:7a:34:5a:ac:e4:b3:95:c9:54:59:a0:19:f5:ea:
58:cc:e5:f4:71:68:a4:52:56:c3:e7:f9:44:28:76:45:2a:a8:
b5:11:d2:7a:25:71:ee:e1:c4:f2:1f:b7:9d:39:54:9b:73:1c:
17:33:35:c2:46:2a:1b:32:4d:02:ee:74:a5:99:a0:f4:72:2c:
1b:d8:52:d3:4c:db:3d:ae:1b:4e:f3:6e:89:1a:b0:1d:d0:7d:
7c:79:77:aa:4a:5f:e5:52:42:db:64:3f:0d:85:d5:c7:03:a1:
18:45:c6:d7:8e:ce:9e:29:35:9b:ed:94:c8:11:40:8c:73:56:
28:62:e4:6c:eb:da:cb:4c:7e:49:7a:22:b2:ef:c5:eb:1b:01:
60:30:c2:f3:7a:06:cf:b8:70:63:49:3b:98:3f:4b:58:51:b0:
2d:53:a7:5a:cb:9c:ca:63:6f:46:44:39:25:43:70:9b:24:cc:
92:24:a9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:19:34 2025 by rpki-client