Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe2cdffd-f09d-4aa1-8516-ffe763bfe789.roa
File: fe2cdffd-f09d-4aa1-8516-ffe763bfe789.roa (raw, json)
Hash identifier: N8ctTaBj1hwF5ctl04+OS9eyGcRnuez4NRUhCkiX6ZU=
Subject key identifier: FF:52:A9:99:1F:85:CC:12:99:CC:2B:05:04:62:58:92:5D:B6:F4:F6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 089BE567604C57E1FE062F7A276243E9F1FF8785
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe2cdffd-f09d-4aa1-8516-ffe763bfe789.roa
Signing time: Sun 19 Oct 2025 00:50:07 +0000
ROA not before: Sun 19 Oct 2025 00:50:07 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:9b:e5:67:60:4c:57:e1:fe:06:2f:7a:27:62:43:e9:f1:ff:87:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 00:50:07 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=9924bca5897e5ac6678bfed8e4f897852aaa85976e3f1eb09f3fa46326358d2e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6e:15:8e:90:d7:07:7f:82:a4:fe:25:51:6c:
cd:6e:47:3a:b6:53:69:d6:97:8a:f9:09:93:fc:6a:
ea:c2:6a:d4:4d:de:c7:db:2f:08:79:90:ae:f8:96:
e1:de:17:67:d4:ba:b2:01:9a:c6:54:b2:59:af:38:
0a:6d:8b:db:de:e4:ea:6b:e1:ee:9d:90:22:ee:d0:
55:95:4d:af:fd:b3:9b:c5:98:2d:71:40:3f:a8:0b:
18:15:39:7a:54:f7:70:50:59:c8:8f:4f:e8:ad:61:
04:7a:6f:9c:67:43:de:2f:c0:2c:68:9e:fb:b5:4e:
59:ba:f5:1b:63:28:33:a8:84:ff:a6:d1:7d:e3:b0:
1e:47:2e:7a:17:8f:2d:35:3f:33:fb:53:4c:0e:ed:
2d:b8:b8:20:72:61:72:94:5a:6c:44:4c:83:2a:0d:
49:fb:ae:ee:88:8c:bc:b6:a1:2c:3f:95:6b:bc:de:
62:4a:6d:40:3c:aa:2e:a7:8e:78:70:b3:7a:60:49:
3b:e6:bc:f5:c7:7d:ed:19:c0:86:80:94:71:7b:42:
38:df:18:49:f6:97:a8:bd:9e:d3:9c:70:b6:2b:47:
13:06:8c:d2:23:95:cd:64:52:94:5f:4b:91:ce:87:
d2:46:0a:83:cf:65:a4:6b:44:7c:31:ec:f6:32:e2:
03:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:52:A9:99:1F:85:CC:12:99:CC:2B:05:04:62:58:92:5D:B6:F4:F6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe2cdffd-f09d-4aa1-8516-ffe763bfe789.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.46.0/24
Signature Algorithm: sha256WithRSAEncryption
45:b6:70:41:b3:36:6c:fc:37:f9:a6:0b:a9:2e:aa:3b:02:3b:
b6:96:89:0e:63:a0:77:2c:80:4a:52:e7:2d:63:79:3e:31:ff:
3b:16:7f:ef:f4:a3:ba:60:7a:7d:cc:b5:d5:fd:f0:60:b9:ee:
60:6e:73:2f:cf:24:6c:05:b5:6d:2d:b2:fe:fc:8f:f2:08:4e:
52:df:5a:ef:b3:86:59:2d:0b:3a:55:7a:02:8c:5a:24:e8:9d:
fc:25:23:7d:9a:d9:55:13:98:06:d9:e8:86:06:2c:f1:69:2c:
3d:e5:b6:d2:9c:42:dc:89:75:5c:91:7c:8c:31:94:49:4a:8e:
a9:c1:26:7d:08:cc:90:37:c4:31:d7:18:12:00:40:b1:e3:23:
bd:3b:92:f3:2a:96:39:f9:02:9c:5a:14:12:cf:ff:e3:31:25:
70:ae:2a:78:f5:37:ca:47:06:3a:22:b4:8a:d0:39:3a:fc:b5:
cf:82:4c:d6:0d:99:52:da:9c:61:ad:e5:be:1e:08:e2:8d:48:
77:94:89:e6:c3:11:55:91:a6:70:a0:b2:1a:df:00:62:15:81:
d8:a1:dd:6a:81:d6:5e:ef:9e:66:7b:9b:a7:a2:ac:75:8d:d3:
61:46:de:9c:e3:49:bb:d8:24:99:e1:0f:3c:22:a2:19:52:16:
04:bc:89:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:22 2025 by rpki-client