Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef057a5b-5e99-4803-8136-3ea78d1e9e44.roa
File: ef057a5b-5e99-4803-8136-3ea78d1e9e44.roa (raw, json)
Hash identifier: 62HGEsvJbuLMr5f8Ic6dFKehOpRv5OHokDOSMAgnQzs=
Subject key identifier: 9D:CD:B4:50:28:DD:B9:B6:51:43:33:37:08:CC:E8:46:55:70:36:F0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0E876FEBA5EA307533BABB447731FF25A018C135
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef057a5b-5e99-4803-8136-3ea78d1e9e44.roa
Signing time: Mon 20 Oct 2025 01:31:47 +0000
ROA not before: Mon 20 Oct 2025 01:31:47 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:87:6f:eb:a5:ea:30:75:33:ba:bb:44:77:31:ff:25:a0:18:c1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 01:31:47 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=c8f54de35c146b97e6c1b214505ac0a8dc141c036e908107bd28ef8ce157db69, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:40:e2:35:9f:d5:21:db:ac:5f:06:8c:08:db:
1c:e4:35:ed:0f:4a:44:16:e8:f2:07:91:35:ab:06:
97:67:06:cb:64:c3:48:35:5f:2e:2d:33:42:3b:76:
d3:8e:7d:fd:d9:82:f2:66:cb:df:16:90:16:4b:44:
44:65:6d:4b:d5:98:3f:ea:64:74:33:8c:ac:2e:fe:
43:e8:cf:29:41:02:02:f6:9e:6b:83:fa:59:5b:84:
79:07:81:96:80:23:f2:ad:30:97:a9:9f:56:37:d2:
81:52:cb:6c:af:5d:a7:a2:2d:10:cb:2d:62:a8:ac:
23:1e:ef:42:f6:2c:82:7f:bd:80:d6:f9:c8:91:99:
69:9f:f4:38:73:87:21:d3:17:24:97:56:6e:78:23:
c3:15:06:47:db:c6:41:d4:e7:bb:b7:98:ad:6d:5a:
60:0e:1c:2b:dd:69:79:07:e4:b0:1c:2b:d0:ff:6c:
7a:d0:f9:3f:ab:3e:3d:c3:fe:24:22:56:6c:5f:5d:
2a:3a:de:f6:1b:00:fd:1d:fe:42:b8:19:24:8d:37:
e2:98:e6:b1:e6:9c:cb:3a:ae:78:b3:fa:4b:91:49:
da:85:48:bc:48:82:95:3a:bf:a5:78:17:37:b0:30:
ca:b9:c7:2a:34:d6:7f:6e:b4:f4:9e:a7:01:ce:94:
fe:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CD:B4:50:28:DD:B9:B6:51:43:33:37:08:CC:E8:46:55:70:36:F0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef057a5b-5e99-4803-8136-3ea78d1e9e44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.120.0/21
Signature Algorithm: sha256WithRSAEncryption
9e:94:6c:55:60:d8:6a:3c:c0:47:06:93:73:f2:89:7c:9c:df:
35:65:1b:ba:51:de:27:5f:2d:97:0a:f5:7e:25:da:5c:32:c6:
d2:d5:ba:d6:9f:b8:e5:05:64:b3:90:a3:64:7c:66:e9:03:c3:
e6:0f:68:80:6a:23:77:54:92:81:64:71:4a:95:c2:9c:ad:88:
01:24:91:aa:65:05:2a:6f:66:b5:9e:5b:ab:97:f4:0a:36:e4:
c3:2a:a6:2c:32:d5:79:89:52:20:61:1e:63:06:60:1e:10:6d:
eb:40:7e:14:20:92:ee:ed:8d:58:08:ba:c8:35:bd:0b:16:5a:
e1:ad:ef:5a:76:e8:03:e5:86:01:e1:3f:3e:b3:b7:12:29:3b:
02:28:37:2d:9e:37:56:aa:6a:d5:66:d2:32:f5:fa:88:7a:ff:
08:c1:7e:8b:da:ff:f3:fb:77:4c:fd:f1:d8:75:3c:79:11:36:
d4:cf:2a:15:14:97:0f:b5:8f:25:bb:50:d1:cc:04:3a:7d:9c:
13:d3:06:31:4c:8e:a8:24:22:e1:a7:62:8e:d6:a5:0c:94:c4:
ba:66:92:83:e5:30:ae:ae:e2:05:b5:79:1b:13:f1:c6:04:70:
05:d1:74:33:de:8d:5c:4f:29:dd:d7:de:af:5a:cc:d1:e4:7f:
e7:6c:0e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:19:07 2025 by rpki-client