Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1209c6fd-6f44-4a7e-bf5c-ae20e09aae59.roa
File: 1209c6fd-6f44-4a7e-bf5c-ae20e09aae59.roa (raw, json)
Hash identifier: YL2Sy6+5YALUwnZCA8/a+kOJ3ipvQiKZm4ZkiI4E/Uo=
Subject key identifier: 6A:89:45:64:96:48:41:30:22:B6:09:A7:6D:D3:1C:35:FB:9E:53:9B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 55122DF7D00C117A3F6ACC6E6049DC6F1D5DB19A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1209c6fd-6f44-4a7e-bf5c-ae20e09aae59.roa
Signing time: Mon 20 Oct 2025 02:30:17 +0000
ROA not before: Mon 20 Oct 2025 02:30:17 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:12:2d:f7:d0:0c:11:7a:3f:6a:cc:6e:60:49:dc:6f:1d:5d:b1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:30:17 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=fd99b1fe27e9716b20332f7a9dff1ba3e8d0c5b0946a1958aa550b174bb4a80a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:75:f4:a1:41:91:39:10:fb:03:8b:9d:06:73:
76:62:8d:2b:1e:82:8b:80:9e:41:d1:03:69:e1:67:
d7:83:bb:13:8f:f4:dc:b4:06:e4:8f:e4:36:59:89:
96:de:2f:42:c7:a8:c3:ad:7b:da:f3:65:5d:34:ff:
b7:89:48:68:4b:78:af:00:b7:85:a5:73:49:63:16:
61:1a:ed:57:a0:d4:3f:82:ff:6d:2f:5f:1d:b5:8e:
9e:ff:48:88:4e:be:2c:f0:d7:fa:00:4c:35:5b:8e:
33:7a:03:5e:1d:ab:3d:c8:db:05:75:9c:fb:12:49:
a2:b4:30:84:de:79:db:a4:44:11:7d:f8:d4:35:db:
35:71:a0:35:e2:c8:2b:ce:02:7a:6d:ba:23:fb:fc:
28:cc:5f:51:37:9e:e5:61:b3:d7:c9:de:fa:03:cd:
91:b0:e7:e0:d3:c7:80:5d:ea:f3:9e:4c:cf:13:b4:
f8:b4:dc:55:43:03:89:6d:2e:4a:06:ca:23:f5:89:
e7:5c:04:e6:fe:05:ec:38:a1:f7:4a:f4:d2:d9:c8:
bc:62:b7:4f:84:43:5d:e1:64:47:28:0f:d0:3d:ef:
7f:33:70:5f:2f:1f:84:83:58:d1:75:2b:17:ba:be:
0d:05:54:99:c5:2a:14:40:b9:30:51:19:5d:8e:00:
2a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:89:45:64:96:48:41:30:22:B6:09:A7:6D:D3:1C:35:FB:9E:53:9B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1209c6fd-6f44-4a7e-bf5c-ae20e09aae59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.186.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:d1:69:a9:15:93:36:bd:06:40:93:4d:43:5e:81:d8:04:df:
9f:b8:f8:ee:95:93:a4:51:d9:64:6b:7f:c4:30:ee:b8:4c:90:
0b:e3:77:a3:af:38:46:12:79:f8:af:2f:2e:e4:6f:e0:c7:52:
b5:ed:51:ac:89:a0:4e:e5:e5:11:b3:2e:ea:14:c4:f9:e1:86:
83:44:b8:22:34:2b:d8:c8:ce:fe:b8:b9:5a:b7:f1:7f:2e:77:
11:37:43:29:d5:e5:55:69:bc:6e:95:66:ad:c3:5c:69:04:44:
d4:40:f2:5d:95:fc:c7:e7:0c:c7:f3:06:10:d7:44:77:cb:c7:
88:b1:35:ab:c5:96:99:23:8d:1f:20:be:78:e5:3b:14:91:67:
5b:cb:18:f7:6c:73:d0:ae:9a:72:bd:cd:7b:1b:fa:2f:0a:df:
05:a2:c3:de:e5:f1:f6:e7:c9:ed:f6:1f:17:9e:17:8b:3f:4b:
f1:17:3f:9d:fa:5f:74:23:21:ac:36:ff:af:57:12:b8:63:61:
6b:23:46:86:d5:43:fe:6e:43:2c:9b:b3:58:18:bd:08:9c:e7:
53:de:4b:9b:62:21:cc:ab:c1:e6:1d:37:cc:c1:c8:73:37:4e:
13:0f:79:31:61:ec:8f:6c:75:91:4c:0b:ed:bf:2e:77:3b:23:
a2:a8:b9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:16:51 2025 by rpki-client