Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f16905b-d204-4b62-953e-41f32bea6240.roa
File: 2f16905b-d204-4b62-953e-41f32bea6240.roa (raw, json)
Hash identifier: GC7aQspaUX29LhYjLve8MqUQPkJq4HKFJ0At4SuFMUE=
Subject key identifier: F7:53:55:24:7B:5D:F4:9C:57:49:97:DF:32:95:A2:2D:2C:F1:7E:DD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 62DF2DAFC478B8B64AA503DC2883551F87A5242F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f16905b-d204-4b62-953e-41f32bea6240.roa
Signing time: Mon 20 Oct 2025 03:31:16 +0000
ROA not before: Mon 20 Oct 2025 03:31:16 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:df:2d:af:c4:78:b8:b6:4a:a5:03:dc:28:83:55:1f:87:a5:24:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 03:31:16 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=eeb5868cae76e63bfe99816409636511aa46b1a4e71fab130ea9da6ed60035de, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b1:05:c8:c8:82:b5:dd:80:6e:04:c1:10:be:
d6:31:17:45:05:d8:cf:19:4a:a9:66:29:43:7c:62:
43:58:66:f9:71:70:d2:2b:c8:17:e1:f5:a6:66:f9:
d9:d6:96:07:5e:fd:a9:88:d9:68:a5:be:e9:62:1f:
f6:fc:bc:34:84:fa:98:7b:e7:21:26:66:b9:8c:47:
af:5d:87:d0:77:ee:7f:c4:11:76:64:4f:f4:15:b7:
1c:00:99:f5:ee:1c:42:11:38:28:37:ee:46:60:1b:
61:c7:5c:7f:bb:13:a4:84:88:02:df:71:98:c3:07:
b7:e8:69:c1:16:3e:2c:bc:11:64:65:20:3c:d0:fd:
dd:d6:d2:b8:c6:ad:dc:ed:06:56:fa:a6:a1:f1:b0:
fb:19:fa:a9:eb:46:ae:d5:dd:12:23:56:6a:3b:77:
db:d2:7d:ea:51:7c:37:1d:b0:cb:fd:4b:98:0c:5a:
0c:a0:88:7b:19:61:4a:63:16:62:9d:ea:63:33:e8:
b5:6d:eb:e2:1d:8e:b5:9a:4a:ea:4a:96:ab:a4:ac:
0c:bd:2d:f6:c2:95:ef:9d:93:66:e4:40:02:24:07:
40:2a:66:d6:da:92:5b:71:e4:94:31:09:eb:0c:6d:
77:7c:6a:3d:23:85:f5:93:d6:94:21:f2:73:fc:aa:
b1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:53:55:24:7B:5D:F4:9C:57:49:97:DF:32:95:A2:2D:2C:F1:7E:DD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f16905b-d204-4b62-953e-41f32bea6240.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.26.0/24
Signature Algorithm: sha256WithRSAEncryption
16:49:d7:9c:10:8d:6d:9f:fd:cd:3a:d5:97:12:f0:2d:44:ce:
ec:08:39:c8:9c:98:a8:15:75:17:dc:7d:c1:cb:cc:f7:12:b2:
99:26:e0:89:54:fc:8e:62:b2:d4:6a:e6:e3:d2:23:99:42:80:
70:4f:7f:f0:47:2d:37:02:fc:11:06:93:14:bb:37:ab:37:93:
16:24:03:41:33:1f:06:0a:75:5a:45:87:62:7b:99:d8:e5:fa:
7d:fc:2c:b5:40:8c:b5:32:18:0f:ce:7b:f4:5e:49:dd:1d:61:
0e:cf:99:e2:6a:a9:0a:e5:c0:9c:ea:71:7e:b2:f4:78:71:16:
a0:06:1c:f9:87:11:e7:33:32:00:12:34:fc:01:4c:53:84:08:
1c:36:17:8a:96:25:97:33:d0:3f:9a:7e:93:17:2f:cd:80:f4:
26:d9:61:4d:67:c0:26:18:3a:45:37:f8:51:51:80:9e:36:77:
48:c2:df:e1:12:34:c6:4d:1c:a8:b6:65:8c:96:32:1f:2f:ed:
c0:a6:68:ac:e3:51:f9:af:f4:2e:1e:5b:ea:9a:06:92:73:10:
10:f0:7f:76:1e:c7:dc:25:05:33:7f:2d:72:7f:a2:9b:5f:ab:
b8:6b:6a:1d:ad:16:90:96:11:95:70:cd:8a:2a:58:1c:56:22:
60:2a:a0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:02 2025 by rpki-client