Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc2913a6-f5dc-480f-9402-d708b738be2a.roa
File: bc2913a6-f5dc-480f-9402-d708b738be2a.roa (raw, json)
Hash identifier: P7c4KQzQ303VPZiz3AyfEtVlMJsNQ+ADjLsjKyGIFlM=
Subject key identifier: 96:71:F4:5F:80:7E:96:78:52:52:DD:DD:D6:57:B2:F4:DA:EA:2E:E8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5A38AFF46CECC193928F4502ADD7C7DBDF635C75
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc2913a6-f5dc-480f-9402-d708b738be2a.roa
Signing time: Mon 20 Oct 2025 00:32:42 +0000
ROA not before: Mon 20 Oct 2025 00:32:42 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.250.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:38:af:f4:6c:ec:c1:93:92:8f:45:02:ad:d7:c7:db:df:63:5c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 00:32:42 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=71f3895662e24b5963166155dd536d6323563cb2cad874f82e27a25c74a5701e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:87:e8:f1:1b:f0:ff:1b:82:65:19:34:ac:1f:
65:62:a8:3e:8f:f0:2c:e2:00:0e:3f:a5:de:6f:78:
47:26:12:22:10:a1:94:c6:3c:25:e7:be:e9:eb:ab:
d4:93:06:49:4e:1f:ec:4b:df:fd:78:f6:6a:76:7a:
25:3c:8a:72:bf:41:1d:19:41:9a:6b:fa:37:30:5b:
b1:22:5d:54:e8:24:19:fb:d9:9c:06:38:52:0e:bf:
ef:a5:2d:6f:21:60:31:d1:37:64:21:5c:3f:90:05:
ba:1e:43:01:98:ce:66:d2:87:03:bd:7f:e0:e4:c2:
f1:ab:de:bf:f4:ab:53:b6:16:53:3e:62:3c:0f:d8:
15:04:86:d1:d5:e4:cc:30:21:3d:72:b0:6f:a0:ef:
2b:c6:8e:1e:53:67:d0:80:7c:c7:ed:70:6e:5d:6a:
fd:18:a0:db:5b:a1:a7:97:6e:f7:01:2f:bb:b6:fb:
9c:4b:eb:f5:3d:bd:79:ba:93:fe:6d:ec:7c:bc:e3:
e0:a6:a0:90:6b:72:22:32:96:fc:77:b2:a6:04:36:
76:81:4d:02:14:7f:1d:e3:05:b8:a2:6c:e9:2c:13:
c4:db:74:9a:6f:f0:05:b0:35:10:48:16:24:9c:96:
22:09:ed:53:03:e0:57:fd:c1:22:1d:ee:9e:da:d4:
7e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:71:F4:5F:80:7E:96:78:52:52:DD:DD:D6:57:B2:F4:DA:EA:2E:E8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc2913a6-f5dc-480f-9402-d708b738be2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.250.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:24:ab:93:e6:d7:7a:d7:3b:04:c6:60:ae:7c:9d:0f:09:aa:
fa:fc:c5:7c:51:60:8f:e3:59:a6:dc:7b:78:35:6d:ea:c2:66:
83:1e:bd:f6:73:45:0b:36:f8:f7:66:f4:ad:59:d1:2d:6f:16:
3d:f6:26:12:12:41:dd:85:1b:33:65:ac:9d:f2:b5:0e:58:7e:
1c:bb:ae:47:6e:b9:cf:f8:39:34:65:19:c9:d3:a0:f4:53:a9:
78:ab:3d:30:1b:7d:3d:50:38:1d:c2:97:ea:92:e0:f1:8e:17:
d2:8f:e9:40:7d:5e:6d:16:ab:0f:2a:da:30:7d:76:aa:7e:03:
bc:62:64:bf:ad:dd:b8:26:a8:8e:6b:7e:92:c8:83:78:dd:9c:
cc:3f:54:f6:4e:51:a9:c6:ba:dd:34:1c:50:61:54:bc:3c:29:
d3:09:c6:35:d9:5e:b0:dc:c9:20:06:43:d5:24:be:77:48:a0:
7e:53:d4:75:80:4f:db:b0:94:8c:fd:40:be:c5:e8:40:dc:d6:
8a:ce:cf:0b:39:a1:e1:34:e5:05:09:ac:05:31:d3:80:39:d4:
ac:23:ac:1a:38:02:7a:e0:e0:e0:b2:65:b5:cc:2c:69:45:2c:
2e:e9:49:35:51:26:29:80:e2:8c:5d:33:d5:a8:3d:94:1f:e4:
73:bd:bc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:53 2025 by rpki-client