Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08a600a2-83dd-40c7-a29a-ac9a49f60485.roa
File: 08a600a2-83dd-40c7-a29a-ac9a49f60485.roa (raw, json)
Hash identifier: jUHxHeccHNxDUZzD3VohOys/IPfyN/pM+3OpfONeSlE=
Subject key identifier: 38:39:81:9D:A4:5B:EC:CB:FF:85:A0:CF:78:AC:FB:E3:98:E4:D9:CE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 714A76997736C85AD615930F40FFDFEFB20393F0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08a600a2-83dd-40c7-a29a-ac9a49f60485.roa
Signing time: Sun 19 Oct 2025 00:31:47 +0000
ROA not before: Sun 19 Oct 2025 00:31:47 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:4a:76:99:77:36:c8:5a:d6:15:93:0f:40:ff:df:ef:b2:03:93:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 00:31:47 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=e178eb962daa695ecda730a12af2f5a8311f4e33bd78075da47dc5486087890a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9d:62:4b:51:2b:7a:94:09:76:4e:52:0c:9d:
f9:70:02:63:aa:45:59:90:af:8b:1f:98:e3:7e:30:
da:86:04:b5:ab:56:9f:b8:ed:6c:63:7d:e4:95:c9:
c8:8c:ed:87:f6:c5:80:f8:83:5b:27:0a:69:69:3b:
67:2a:6c:03:f0:bb:4a:02:94:06:0e:e1:d7:15:9f:
23:7b:9d:f4:ef:45:c9:ad:ff:d3:8e:29:42:ce:94:
89:ad:f2:60:5a:ea:b3:87:29:2d:3a:5a:30:1e:9f:
bd:fc:6d:ff:34:df:a6:65:a4:eb:75:eb:97:9e:97:
5b:48:26:de:c8:00:27:03:fc:b3:97:1d:c8:d2:08:
9a:26:be:07:55:27:04:96:67:bd:dc:85:24:45:3a:
83:92:3b:56:e2:78:41:12:de:82:ba:91:b3:59:08:
80:00:b6:e7:36:3d:00:c6:bd:2b:83:ea:ac:c3:c6:
1d:9f:02:53:08:c6:a9:a7:57:99:88:c1:7c:0b:bc:
19:ac:c4:54:68:d3:3d:8b:c6:02:e0:bf:dc:7e:b6:
20:8e:d4:86:27:c6:b0:ab:98:f1:9f:6f:0a:5b:ed:
7d:31:a9:29:8e:d7:ad:f0:b7:38:2c:ec:a4:5d:a1:
41:ee:b7:92:f8:d0:7c:38:dc:5f:09:b7:69:50:48:
75:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:39:81:9D:A4:5B:EC:CB:FF:85:A0:CF:78:AC:FB:E3:98:E4:D9:CE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08a600a2-83dd-40c7-a29a-ac9a49f60485.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.43.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:1c:d5:f2:45:6c:33:5e:89:88:1f:e6:1e:9b:fa:06:49:57:
50:ff:77:23:93:96:68:4d:2e:f0:13:92:c6:42:de:9c:84:3b:
47:d3:ed:e3:ea:75:59:59:66:cd:86:a8:02:5f:35:fd:77:45:
d0:b0:7a:8b:e4:3b:b1:99:f5:e6:9a:e6:8d:23:f6:b8:32:69:
18:29:30:34:b8:a0:f6:90:f1:46:41:1d:3c:5c:41:74:4a:b1:
cb:91:35:4e:7a:92:48:f8:c7:b6:a8:d3:2f:ed:13:f6:93:74:
ad:4b:49:45:ea:89:14:8d:77:6f:ee:47:52:14:9c:f2:7b:42:
6f:e9:4c:68:04:99:73:0e:62:0a:72:da:be:f3:20:2a:32:62:
10:3a:1a:a4:b7:d5:a1:bf:40:48:d3:7f:58:1a:d4:87:b2:4b:
42:19:8c:76:d5:46:26:35:84:84:3c:2c:dc:1f:0c:81:23:02:
9e:e8:6c:38:1b:22:5c:9d:98:de:a3:ab:e4:39:d9:ab:1a:1c:
0d:78:bd:e5:4b:a3:0f:5f:95:e8:73:e9:a5:c1:94:47:b8:e5:
bd:6f:91:b1:85:70:8c:3f:23:26:73:cc:fe:87:a0:45:32:79:
6e:3a:7c:a5:07:d7:5f:bf:c6:6b:4a:e4:d2:89:88:ea:c9:6a:
e2:5e:62:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:16:59 2025 by rpki-client