Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5657e03-43f1-451c-ac41-1073d5d7c406.roa
File: d5657e03-43f1-451c-ac41-1073d5d7c406.roa (raw, json)
Hash identifier: xZr+MdTeoow9KnCIRpzp7VNqn6QAuXVWNraVgLOque8=
Subject key identifier: 62:AA:DC:BC:5B:C6:AB:85:94:23:D3:4F:BF:73:31:C0:E8:5B:3D:A3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 16B3C8A43EB7C5E61D0189BEC14B3EBC5B01C577
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5657e03-43f1-451c-ac41-1073d5d7c406.roa
Signing time: Mon 20 Oct 2025 02:20:52 +0000
ROA not before: Mon 20 Oct 2025 02:20:52 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:b3:c8:a4:3e:b7:c5:e6:1d:01:89:be:c1:4b:3e:bc:5b:01:c5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:20:52 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=799c10d043032320f562f952bd6fb9eb32e0c48f9f4f70ad913bce3a8541a5bc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:35:5b:60:0e:d5:87:65:4a:3e:fe:1c:46:aa:
66:ef:ad:37:db:41:4f:5e:fb:ad:54:3b:97:b1:20:
5a:7b:ad:c1:ca:97:db:20:0e:55:ef:95:d7:d7:8b:
38:09:4d:2b:76:77:f8:18:dd:06:0d:8c:c7:55:1e:
b5:c9:de:cb:5e:b0:8e:c0:35:22:ff:22:07:ab:60:
81:c1:68:0f:a9:89:07:3e:f5:4f:16:3d:cf:3b:5c:
80:d7:86:5a:46:be:f6:9c:21:1f:db:9a:3d:56:51:
d2:e4:a6:b7:56:db:7b:52:b2:52:0a:cf:f7:08:22:
9e:e0:e6:47:1a:b4:17:1f:8f:62:3c:f9:14:75:af:
ba:22:74:74:86:b7:42:48:9b:49:e5:58:4f:6c:77:
f9:a8:0e:02:6a:7f:e5:b6:f8:71:45:a6:0f:19:55:
e7:5c:cc:d8:99:03:d0:23:f9:2d:73:c2:87:bf:04:
a3:cb:67:9b:cf:53:a9:66:75:f2:d4:eb:7a:a4:d5:
90:e9:d4:18:8b:5d:aa:47:b7:47:0c:fa:75:d8:3d:
23:2f:c8:9b:1b:ee:76:7c:d6:07:6c:b3:54:2c:3f:
fd:1c:9e:ab:ae:69:1f:03:a8:64:65:63:86:ce:82:
79:5d:86:cc:e7:93:b8:ba:33:78:56:d3:b5:c9:39:
cd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AA:DC:BC:5B:C6:AB:85:94:23:D3:4F:BF:73:31:C0:E8:5B:3D:A3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5657e03-43f1-451c-ac41-1073d5d7c406.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.187.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:7e:21:cb:f8:35:94:d2:fa:ce:20:d5:c7:93:b2:91:0e:22:
5f:2f:2c:a2:db:fb:43:29:f5:b1:9a:0a:19:78:23:1d:b2:26:
ac:dc:54:e8:67:07:64:ad:8a:da:e7:0b:33:d9:d5:59:c9:a8:
fa:5f:b6:cf:22:d4:a0:f1:ff:71:d0:d7:e7:b7:5e:8e:8c:3d:
54:67:fd:03:34:38:73:c7:a1:cc:1b:9c:c5:77:cf:07:ee:ad:
14:f4:e9:f6:ad:95:7a:14:bb:98:d2:2b:f8:f1:2b:e5:75:5e:
69:f5:79:35:e4:47:48:d7:8d:8e:04:e1:d0:d3:58:03:9f:5f:
5a:0c:de:cb:50:16:26:19:6d:c1:ba:5e:29:2a:92:01:a0:8c:
57:3b:d0:5c:27:53:92:38:f9:de:ee:1f:21:da:6e:53:76:96:
0a:4e:87:51:a7:3a:53:4e:b7:49:b9:1b:f0:b7:5c:ba:9b:27:
4b:5f:01:04:0d:e5:d8:f0:c2:22:91:3d:4a:05:28:8c:73:2f:
09:b9:1a:d5:07:2a:17:d6:8c:8b:95:e5:99:77:66:93:c2:32:
60:0a:3b:47:84:ee:41:cb:f8:84:e9:86:65:10:4b:fc:1e:a0:
11:89:9a:d6:aa:8b:54:d6:79:71:08:68:b3:fa:58:9f:33:0a:
4c:44:91:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:33 2025 by rpki-client