Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed63d1fa-aa16-4124-bb45-61da4a5d42be.roa
File: ed63d1fa-aa16-4124-bb45-61da4a5d42be.roa (raw, json)
Hash identifier: Vw7wAxYkJMz8wYOtQ4lvh18GnnJatcwEQJgezkfAQjk=
Subject key identifier: 95:88:1A:D9:A5:C0:F8:86:70:30:9D:51:8A:3F:C5:68:F4:6D:13:9A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3011979F25EBE6528F63843869DC5D63C7E95F1C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed63d1fa-aa16-4124-bb45-61da4a5d42be.roa
Signing time: Sun 19 Oct 2025 01:51:27 +0000
ROA not before: Sun 19 Oct 2025 01:51:27 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:11:97:9f:25:eb:e6:52:8f:63:84:38:69:dc:5d:63:c7:e9:5f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 01:51:27 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=2bb239d2a5d6a6de2264b1e750a277dee91ec8a37a46394b9e7fd7adb3c25ccb, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6f:b8:fd:d9:7d:35:56:88:cd:c1:ca:b5:27:
a4:8e:db:dc:ef:06:e6:bf:bf:f8:b4:7a:99:bd:42:
1f:a9:50:e4:f0:00:77:30:a9:cd:da:7e:7d:41:96:
1c:16:cb:fa:a7:1f:a2:19:5e:34:9c:81:8b:0b:73:
d9:14:d2:3f:e2:fa:71:54:26:38:3e:ab:4e:98:4a:
49:d6:6e:cf:29:e6:01:ef:ff:01:e8:8e:24:85:23:
cb:4b:76:1c:b1:51:cf:47:f5:bc:b2:04:f7:c0:9c:
5a:d8:94:57:92:74:90:d5:d2:27:f2:bf:ff:21:1d:
b8:92:be:f1:25:9a:71:c3:eb:33:e7:80:62:c0:6b:
fc:ec:b4:a0:00:ac:d2:1b:42:e5:99:e6:4f:b5:d7:
29:87:99:64:47:b7:35:f3:82:b0:f4:18:75:e3:d9:
bb:fe:7b:c7:ef:45:8b:f9:f0:64:79:e1:54:00:8e:
2b:6c:b5:fd:84:c3:a3:1d:e7:ea:b2:23:59:f3:2c:
c7:04:af:c5:66:97:4e:7f:0d:b2:db:40:33:be:ea:
27:8c:4e:ee:1e:5c:5a:f9:a1:ed:0e:a9:7f:de:96:
48:49:8e:af:7c:eb:c1:20:a4:36:63:51:f8:1e:14:
3f:6a:6c:69:be:4a:aa:7b:53:4b:55:b3:05:07:66:
80:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:88:1A:D9:A5:C0:F8:86:70:30:9D:51:8A:3F:C5:68:F4:6D:13:9A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed63d1fa-aa16-4124-bb45-61da4a5d42be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.38.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ca:4a:4d:40:8c:10:54:dd:ea:5e:ee:1f:71:f4:6e:48:1d:
e2:70:be:f9:df:ec:30:71:6d:97:70:72:db:79:ef:27:41:f5:
e3:c2:d8:7b:a9:dd:77:95:cc:b4:ed:5c:64:51:8f:8b:c9:e7:
e9:ad:6c:17:fe:aa:76:b6:1c:b6:31:78:e3:44:21:8f:b1:ce:
4a:97:d6:e8:fd:31:47:59:23:61:f5:e8:87:3f:05:4b:99:a1:
82:9a:19:5c:51:91:eb:68:fa:c4:70:f0:fa:8e:91:e7:26:a6:
a2:cb:f5:9b:d8:15:44:3a:0e:2d:1c:be:93:2a:91:5b:35:ce:
be:2e:ec:57:8d:a0:17:7e:2a:a4:79:14:90:74:56:de:d7:01:
11:e6:03:6c:e4:5a:d5:ca:2c:85:b4:70:0e:56:5d:4b:6a:13:
5a:2e:ff:46:37:a0:43:1a:d9:b9:6c:45:c0:cf:22:9d:9c:83:
87:bf:06:b4:1e:c2:66:6a:6f:aa:ec:db:d5:de:9a:52:c8:cb:
59:dd:85:79:e0:06:fa:17:66:c1:04:ef:f7:11:2f:e8:04:05:
26:8d:62:5f:9b:4b:03:0b:0f:58:89:ac:6d:3e:a2:c2:98:cf:
f1:a0:6e:06:3a:71:04:8f:cb:1e:66:aa:8e:c8:0e:25:4e:e1:
8f:e6:d0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:17:58 2025 by rpki-client