Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eafb08f8-55db-492d-9b93-26493f2f38c1.roa
File: eafb08f8-55db-492d-9b93-26493f2f38c1.roa (raw, json)
Hash identifier: H1Mz+al97s53sZdQy9BbOSqwFgnCSSYu9RT/CnjyRrE=
Subject key identifier: FA:F2:F6:72:7B:3E:41:24:50:AE:B8:4A:95:9F:3C:7C:48:22:4D:27
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4563DCFB59997B38A4ACA63F3F566F3CB9071CB5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eafb08f8-55db-492d-9b93-26493f2f38c1.roa
Signing time: Mon 20 Oct 2025 03:22:16 +0000
ROA not before: Mon 20 Oct 2025 03:22:16 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:63:dc:fb:59:99:7b:38:a4:ac:a6:3f:3f:56:6f:3c:b9:07:1c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 03:22:16 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=2ab0c51d51740e6a7a37f65d81a10766bfbdadda18a322fc01175a3f25707a2f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9f:ea:d4:32:8e:dd:71:c9:f9:c4:63:8a:04:
33:e7:f4:6f:13:4b:42:0d:b4:dd:94:6a:59:fb:e8:
fe:dd:e8:03:df:81:43:87:35:ec:d5:35:6b:bc:74:
54:e8:c3:85:54:07:a1:b8:fb:c7:19:d2:c5:67:8a:
1f:3a:fe:d4:af:94:8f:aa:88:d7:1f:44:4a:34:dd:
db:c6:08:05:87:77:12:04:4f:72:02:06:48:a2:c8:
1c:b2:04:c2:f8:8a:50:c3:f2:91:03:7b:3e:4d:65:
f3:7a:6c:d1:09:ca:a0:82:8e:d9:9c:e2:4b:11:69:
db:c3:dc:d6:fa:b4:0d:92:96:e9:80:c7:98:75:ed:
fc:9b:2a:81:c5:ef:dc:bf:fc:78:70:0e:3a:c2:c8:
75:82:6d:60:56:7b:ca:a5:58:6d:ad:1b:8c:d0:fd:
c5:5c:30:71:c0:c1:ce:94:91:e5:90:15:3d:e7:43:
d3:83:c7:f7:96:eb:0a:77:ea:24:65:8f:1b:09:96:
b0:4d:2b:38:32:36:1e:18:91:05:b2:7f:0c:53:87:
6a:ed:8d:bb:2d:81:1f:95:e0:45:14:4c:78:8b:b4:
25:6d:fc:19:97:64:28:82:ec:ca:07:55:a9:78:42:
18:2c:f8:94:a9:d1:86:41:44:87:87:6e:7b:3b:b4:
e9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F2:F6:72:7B:3E:41:24:50:AE:B8:4A:95:9F:3C:7C:48:22:4D:27
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eafb08f8-55db-492d-9b93-26493f2f38c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.236.0/22
Signature Algorithm: sha256WithRSAEncryption
99:d3:65:05:40:fc:34:8b:ed:28:87:ab:19:44:7f:7f:40:78:
ef:d3:a5:75:45:24:13:c4:7a:1a:0c:66:df:0a:fc:25:8c:53:
1f:05:ca:c0:21:50:d1:93:02:90:80:87:dd:4e:5b:e4:1d:9b:
a1:67:34:72:20:7b:83:80:82:8f:e3:36:3d:89:62:fd:5b:16:
b5:72:da:11:3f:6e:05:f1:fa:2e:f6:7a:97:3a:f0:62:17:d4:
0b:08:b2:f1:15:d4:9a:fe:16:83:37:5d:ec:89:bb:79:1c:47:
c3:a1:4d:03:53:05:9f:32:de:21:92:6e:2f:8c:e0:87:da:1a:
e1:d1:9e:fa:f0:1d:db:06:d2:0f:ba:e6:bf:d7:5f:5d:5c:ac:
52:dd:71:e3:eb:d5:90:06:2d:69:d5:fc:00:9a:6a:bf:8c:d6:
6c:59:ea:19:08:cb:7a:e0:36:1d:08:ed:f2:d8:d8:08:da:8e:
55:4d:be:1b:dd:45:16:7e:92:02:53:2e:b9:78:fb:2d:be:c3:
5c:4a:97:60:e2:80:20:5b:0f:ea:a3:e8:9c:6b:e2:5c:fc:1b:
70:21:c6:bb:62:69:7c:99:fb:f0:97:d2:11:69:ac:29:cc:8c:
ef:6d:27:4f:ba:02:ee:18:ca:4b:55:75:8a:25:a0:43:fd:13:
49:4e:b4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:54 2025 by rpki-client