Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/738b308f-965a-4ab8-a5bc-e6af6f74131b.roa
File: 738b308f-965a-4ab8-a5bc-e6af6f74131b.roa (raw, json)
Hash identifier: tMXGkr8Ti10SUEsuTHPTeIs9C27Ykm8BTzkwrFrK8oE=
Subject key identifier: C0:DE:98:30:AC:7F:04:AC:0E:75:E0:B5:63:F0:93:2C:27:64:25:2A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1D2B6E036673D6D9B1722CDF92D3D936EEA647AD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/738b308f-965a-4ab8-a5bc-e6af6f74131b.roa
Signing time: Tue 11 Nov 2025 01:41:23 +0000
ROA not before: Tue 11 Nov 2025 01:41:23 +0000
ROA not after: Tue 16 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 107.21.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:2b:6e:03:66:73:d6:d9:b1:72:2c:df:92:d3:d9:36:ee:a6:47:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 11 01:41:23 2025 GMT
Not After : Dec 16 23:59:59 2025 GMT
Subject: serialNumber=c8dd1349ead84ea6094cde201eca6067746d6d7d0235fbf753d5dc8b5190f940, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:19:a4:c1:09:73:f0:40:20:ce:b1:d4:c2:68:
66:07:28:e8:b0:6c:be:a1:a2:08:70:37:ee:b8:47:
f6:04:d7:5f:3f:c4:02:8c:f4:36:23:00:97:b2:5e:
36:3f:42:53:0e:22:55:3b:10:8c:6a:33:2c:e6:54:
a4:63:1f:90:e9:ab:de:7b:c2:91:9d:4b:30:94:85:
6e:2a:64:d7:26:19:dc:5d:84:f0:85:fc:21:9f:39:
7e:08:05:76:86:f6:ac:80:2c:2e:b0:5e:46:a1:bc:
bd:5c:76:0f:f0:6c:18:93:a0:c7:a6:2b:65:e7:f4:
83:61:05:3e:2c:f5:cb:df:cf:84:d5:08:99:69:16:
6b:f4:15:29:ab:bb:be:c0:5d:56:db:92:bb:c8:73:
2a:0a:a5:25:28:f4:c1:dc:cb:a5:be:a9:48:32:fa:
c5:5a:7d:82:b7:34:91:00:97:c6:31:14:7d:6b:f9:
83:e5:3a:0b:70:16:08:db:cc:e1:b0:9d:56:c2:73:
76:df:5d:a6:0b:2e:3b:3c:e9:e7:6a:7b:71:53:6c:
e6:c0:c3:e4:6c:ae:19:ae:b7:46:bd:a3:f3:0c:bc:
05:36:fd:c9:03:64:ca:47:58:87:25:47:5e:f7:3a:
ce:3c:6d:88:45:6c:57:12:6d:85:d4:5c:5e:7f:d3:
b1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DE:98:30:AC:7F:04:AC:0E:75:E0:B5:63:F0:93:2C:27:64:25:2A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/738b308f-965a-4ab8-a5bc-e6af6f74131b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.21.92.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:9a:00:94:5b:e8:24:10:40:91:46:46:f9:56:c2:46:f8:8a:
c0:04:ea:1b:4c:81:73:90:0f:8f:5e:ea:8e:6f:7d:19:8a:cd:
6f:a7:b1:c2:e4:f1:7e:9f:42:ff:18:01:4c:99:eb:fb:42:cc:
5f:e1:61:15:f7:08:a1:dd:6b:87:fa:cd:9e:e5:97:ff:dc:e4:
aa:1e:15:9c:1c:86:86:35:4a:b0:4d:a4:35:ca:a0:17:81:a6:
6f:01:4c:03:e5:f6:2f:3d:5f:cb:19:17:9c:b1:de:d5:91:0c:
3f:0e:20:ef:23:a2:8c:2f:01:1f:62:a6:ed:52:4f:94:0a:27:
11:28:6c:e4:48:0d:10:38:9d:90:58:1b:89:ca:b8:3a:af:cf:
41:15:cf:a2:a5:73:d6:a0:73:57:b6:8d:c7:bd:c4:60:b4:d8:
cf:5d:19:77:29:f4:a3:f7:94:f8:68:a7:21:a2:6d:5f:f3:2e:
7a:93:c9:1d:d6:65:30:e0:e7:42:8b:da:4e:a8:82:67:2b:01:
8b:39:f5:60:35:0b:99:b9:9f:82:07:bf:dc:ef:5d:ed:e2:1c:
3d:33:7d:c1:0e:8f:6c:5e:cd:53:c3:89:b2:c8:e6:2b:97:1d:
f6:99:16:e5:75:c7:be:40:87:9c:6c:5c:c8:2b:e1:c8:53:5c:
a3:90:a6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:49:16 2025 by rpki-client