Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dcb60ff4-8694-423f-ad7d-4b19435d67d1.roa
File: dcb60ff4-8694-423f-ad7d-4b19435d67d1.roa (raw, json)
Hash identifier: boYTqYjvcyr7LMqE+zSEGgK4H0wJzECdaM9u2BDUXkQ=
Subject key identifier: B1:33:B6:9B:F1:B8:42:48:60:B9:E5:1E:B1:11:7D:4F:B7:AE:67:62
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4B783E633E86538FD19DB91B9AB16F67820D3B3B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dcb60ff4-8694-423f-ad7d-4b19435d67d1.roa
Signing time: Mon 20 Oct 2025 00:21:03 +0000
ROA not before: Mon 20 Oct 2025 00:21:03 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.98.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:78:3e:63:3e:86:53:8f:d1:9d:b9:1b:9a:b1:6f:67:82:0d:3b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 00:21:03 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=8eaa7d2dfc33d35bc739739b91f88022af4e6d9e95edc37598c28a07d5c5bf5e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8d:c7:1c:cf:26:1e:76:cc:06:3f:bd:08:69:
41:35:09:ef:d1:fc:1f:87:ec:57:6a:84:89:58:56:
59:c2:00:e3:39:73:16:20:b9:00:a2:84:dc:b0:5c:
c7:4c:32:12:f0:2b:45:4f:2e:0f:7a:b1:1a:ed:42:
6e:0e:a2:f3:5e:9b:89:f9:ee:03:db:8c:25:6a:0c:
8c:4d:14:8b:2d:75:23:24:8b:df:92:6b:10:9f:27:
fb:87:fe:21:ab:67:09:e6:00:a5:87:ec:f2:61:ed:
46:4c:4a:8b:a4:21:f6:78:bb:cc:30:72:44:40:8e:
ed:de:90:4e:c0:41:3e:83:02:a1:12:3e:9d:1c:d6:
d0:32:fd:99:79:30:e0:6b:84:6f:34:92:d8:03:be:
7d:63:56:2c:e0:3c:7b:89:6a:c0:66:9c:ac:bb:4c:
2c:d8:2b:63:16:3d:59:2c:8e:4c:64:54:94:94:0c:
f8:49:30:de:fa:83:c9:6b:47:bc:dd:57:59:09:01:
da:cd:5f:fc:b9:2f:ca:c5:62:39:2c:88:23:1f:c4:
c9:28:53:01:2d:35:ce:f3:ab:ca:48:b6:40:7f:cd:
65:e5:d0:22:81:00:af:49:ea:85:21:84:af:46:4d:
22:52:fd:57:77:02:d5:0d:07:49:7a:a7:df:31:d7:
d7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:33:B6:9B:F1:B8:42:48:60:B9:E5:1E:B1:11:7D:4F:B7:AE:67:62
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dcb60ff4-8694-423f-ad7d-4b19435d67d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.98.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:4a:9b:e1:07:d5:4d:7a:71:b5:03:28:6e:ea:74:d7:4c:d5:
89:a8:64:1c:cf:f7:7b:93:a4:6b:03:ef:72:ce:f0:50:3e:5d:
ea:31:23:d1:b0:8f:0d:62:e6:ca:2f:d9:04:4e:14:7c:6b:60:
35:e3:79:7e:cd:4b:10:90:67:af:45:83:2c:aa:92:8f:a0:9c:
92:4d:85:98:f1:69:c1:7b:fe:b5:6f:c3:35:da:a1:f9:21:5c:
b4:b7:17:af:c0:52:36:0a:91:21:d8:10:63:6a:aa:f3:48:c8:
2c:c9:29:d0:14:c9:d3:ba:61:82:d1:b4:2f:8f:c3:82:3f:3b:
b8:d5:7a:87:cd:c0:cc:3c:02:d7:50:1a:2a:15:4a:61:6e:f0:
8a:cd:26:4a:f8:ad:87:e2:2a:fe:af:91:ae:c9:56:05:27:41:
50:ae:f3:f9:1c:a4:65:03:51:90:19:63:2a:e6:62:54:c6:a4:
24:e3:f6:14:a6:2c:38:71:02:18:96:0d:a6:36:ee:2b:88:6c:
dc:55:c9:94:49:de:f6:0d:32:35:67:d4:f8:d5:33:8f:81:d7:
f7:4f:4f:f9:3e:14:21:08:88:38:a9:a4:b7:91:27:80:17:68:
93:d3:f7:6b:96:8a:93:61:26:cd:eb:23:86:4c:59:4c:17:4e:
59:7f:8b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:09 2025 by rpki-client