Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea7bb98-fc7b-4544-a88c-2a6d22f92fdd.roa
File: 5ea7bb98-fc7b-4544-a88c-2a6d22f92fdd.roa (raw, json)
Hash identifier: qiSQZhdzbGlDQuOBHGUM+u/48aOXyareL+dL/+DF2JI=
Subject key identifier: C8:24:80:95:B9:72:C8:80:B4:F5:7A:88:90:11:1F:EC:86:CE:6A:46
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 791B4E2614D70D7CF817C1A8A6F299EB79172B1A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea7bb98-fc7b-4544-a88c-2a6d22f92fdd.roa
Signing time: Mon 22 Sep 2025 15:21:35 +0000
ROA not before: Mon 22 Sep 2025 15:21:35 +0000
ROA not after: Mon 27 Oct 2025 23:59:59 +0000
asID: 14618
IP address blocks: 107.20.136.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:1b:4e:26:14:d7:0d:7c:f8:17:c1:a8:a6:f2:99:eb:79:17:2b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 22 15:21:35 2025 GMT
Not After : Oct 27 23:59:59 2025 GMT
Subject: serialNumber=7ee1ce320315c7294c923f9bb03a964691d08d3be8c6ea252b7b9f1bd9fdb1be, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:09:8f:f3:96:ad:c7:9c:b6:3b:92:01:f9:b3:
0f:7a:ef:77:bd:ef:1f:d4:a8:85:88:38:39:56:e7:
44:f0:52:5d:86:e4:5d:a1:c7:36:05:79:f8:15:fa:
b2:d1:44:95:30:b2:d8:18:f1:09:37:98:b0:71:6b:
1a:2c:1e:75:e6:71:5a:ac:dd:b6:e8:a3:01:b2:ec:
af:dc:94:a4:1c:6b:bc:08:68:33:30:ac:dc:0c:2b:
58:67:c6:65:05:43:60:3d:12:18:c7:d8:5c:d4:19:
af:41:e1:3c:07:20:98:1b:2e:be:4d:3c:51:ae:71:
81:45:e2:7d:af:77:9a:71:23:a5:75:a8:40:3d:bc:
b0:86:42:8d:f7:e9:7e:12:6f:78:d7:30:0d:dd:1d:
da:a4:06:e3:31:20:37:bc:b1:19:34:c8:b1:f0:cc:
98:89:68:83:35:86:1c:61:7b:a9:22:d6:62:82:a2:
f7:71:2a:ec:ae:b5:b2:fb:34:a1:11:51:1d:0d:81:
78:ad:cc:cd:6b:ba:29:e9:ae:54:06:bd:68:27:52:
8d:8a:d1:09:36:6e:2b:85:99:c7:f7:d1:09:db:a9:
65:e9:58:aa:cc:c2:6d:ae:26:14:3a:4b:5f:b0:45:
7e:fa:1f:ca:3e:13:a1:20:a1:e4:b7:90:cb:a2:90:
e2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:24:80:95:B9:72:C8:80:B4:F5:7A:88:90:11:1F:EC:86:CE:6A:46
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea7bb98-fc7b-4544-a88c-2a6d22f92fdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.20.136.0/21
Signature Algorithm: sha256WithRSAEncryption
b2:30:35:ac:c7:a8:cf:3c:56:67:80:27:1b:42:ae:56:57:ec:
4e:21:e2:68:c4:58:8e:54:0d:20:57:ae:b2:18:06:a7:43:a3:
c8:ef:85:db:d7:16:1a:29:7d:57:51:00:ba:90:cf:b3:cf:e4:
d8:ed:f0:18:63:f6:55:3a:d3:89:cc:f6:27:0c:58:ab:30:c2:
d7:09:96:f2:29:52:58:ac:2c:65:de:15:9d:ee:34:55:34:75:
1a:c1:e9:6d:e3:3a:71:11:4c:8b:f1:c0:54:d9:cd:56:e7:29:
86:a1:74:1f:43:ba:b2:77:03:50:fc:68:b6:bc:92:43:e0:de:
04:5d:3a:ad:c2:1e:e3:f3:a1:4a:d4:76:e8:2c:56:d3:9d:e6:
1c:30:9b:c6:ac:a6:e4:c6:96:5c:35:39:b4:ae:ff:f3:90:bb:
4d:33:06:ff:e5:e3:30:bf:68:29:0f:83:09:7b:d2:e4:41:98:
71:e4:1b:cc:a7:9c:df:64:56:ec:42:e8:e4:c8:48:28:b6:0b:
3a:35:f0:ff:2a:56:72:20:72:73:c5:5a:4f:27:e0:df:0b:38:
68:d4:08:80:a1:ea:88:85:51:3e:0a:29:6d:6d:aa:7c:47:e7:
61:61:6f:6f:d8:cc:12:e3:2b:ab:d5:98:c9:74:29:77:81:43:
98:04:17:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:43:00 2025 by rpki-client