Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5b71ee2-0b1e-417c-809d-9b00c7697b7c.roa
File: f5b71ee2-0b1e-417c-809d-9b00c7697b7c.roa (raw, json)
Hash identifier: LNkdFDXGB/A16XH34VS25rr0ZQ2Ydyx2ugHr+hCwIKg=
Subject key identifier: 19:12:D5:85:2B:66:C6:82:3B:99:A1:7B:13:52:DC:33:25:77:D1:85
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 38FED65E8C0981A913FD7E25C769056E584AC507
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5b71ee2-0b1e-417c-809d-9b00c7697b7c.roa
Signing time: Mon 20 Oct 2025 02:10:09 +0000
ROA not before: Mon 20 Oct 2025 02:10:09 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:fe:d6:5e:8c:09:81:a9:13:fd:7e:25:c7:69:05:6e:58:4a:c5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:10:09 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=d5baf125439d7623f4d745fdf657031b7f553a2ecf925a8677656a538f1fd769, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9d:68:4a:18:1c:5e:0c:09:2f:dd:6b:bc:6f:
02:3e:06:06:2b:70:3d:d8:20:79:21:51:53:ee:2c:
d6:fd:e5:93:9a:fd:a9:41:40:d2:91:cf:54:75:e6:
4d:48:03:ea:7e:c8:a9:b4:d0:2f:04:a1:4e:68:e2:
7e:c1:a9:e0:83:ad:de:ad:cc:da:ac:df:22:01:00:
bd:78:e8:fb:6a:29:f0:2a:14:57:47:99:9e:07:dc:
3b:ec:71:2b:fd:12:ca:e4:ca:26:28:3a:9d:9a:f5:
f4:b6:84:62:4a:bb:03:b6:e0:6e:39:87:a3:b6:12:
73:e3:cf:b5:1c:5c:7b:ac:0a:8e:18:29:eb:11:bc:
50:e7:bf:ee:c2:9f:fa:22:a7:60:dc:5a:2f:4b:c9:
aa:8b:b1:b1:ef:f8:1a:73:1e:dc:63:ba:0d:bd:89:
d3:40:3d:c3:7c:d1:1f:38:c1:8d:74:71:e0:b4:58:
e2:57:b9:95:98:cb:f4:38:b7:01:ee:d3:33:03:f4:
cd:07:f6:1f:02:88:ad:52:3e:c2:f5:cc:84:36:a2:
fb:a7:b1:80:10:d5:42:41:c4:91:ea:fc:70:36:02:
6b:94:ca:9c:53:ad:5a:6f:03:05:74:b6:20:f2:a3:
d6:1e:cc:f8:26:74:11:0c:0c:bd:ca:dc:9c:e4:f4:
bd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:12:D5:85:2B:66:C6:82:3B:99:A1:7B:13:52:DC:33:25:77:D1:85
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5b71ee2-0b1e-417c-809d-9b00c7697b7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.19.0/24
Signature Algorithm: sha256WithRSAEncryption
32:dc:11:63:63:51:db:34:ce:37:54:10:f2:be:79:c6:2e:30:
c0:37:dd:59:b0:3f:89:0f:2b:c0:67:f0:6e:b4:a3:33:47:44:
89:29:bf:c6:04:b1:d3:b4:97:9d:00:16:9f:3f:0a:9a:73:53:
b3:12:95:ef:6c:f4:1e:8f:80:57:a8:a6:f9:39:a4:e2:eb:e2:
b3:3d:7d:85:5b:2b:09:ab:59:6c:53:1a:d3:56:3a:cc:b2:43:
f4:f7:4f:cc:55:fd:ce:82:a7:c9:9d:96:b7:aa:20:02:6d:2a:
88:43:82:08:36:ae:eb:70:d9:f0:1f:8f:a8:84:b8:17:50:05:
1a:90:59:3a:cc:67:39:0d:79:c8:33:98:74:27:82:6e:f0:d2:
43:c7:04:43:4a:e4:9c:39:ca:04:09:66:d2:ec:f7:b4:d3:9a:
c8:88:a9:50:d9:54:79:8b:64:7b:99:47:78:ca:23:ea:4a:66:
b4:a8:9f:56:74:00:46:44:34:83:ae:ae:f1:67:55:db:59:d0:
6c:bd:02:d1:bd:30:b4:de:1e:ab:0a:8f:d3:0a:ec:a7:1d:e4:
ff:12:c9:e3:89:4c:8e:24:82:65:15:45:94:e8:19:fa:8b:1a:
db:34:0e:78:24:68:46:b3:e1:32:f5:1c:dd:56:29:e5:04:34:
47:13:26:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:25:55 2025 by rpki-client