Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/316d3f16-d245-44ac-8dde-37b4b497c917.roa
File: 316d3f16-d245-44ac-8dde-37b4b497c917.roa (raw, json)
Hash identifier: XeJmggNOPAtbeWyA8rgmKB5+bB1bRNdp8O8GqgddbNY=
Subject key identifier: AB:81:95:40:7B:B8:A4:F7:C3:84:3F:AA:C0:6B:88:90:19:80:02:14
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 139478F332F8F98FC7F03B46C278F97AA74B90D6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/316d3f16-d245-44ac-8dde-37b4b497c917.roa
Signing time: Sun 19 Oct 2025 01:31:47 +0000
ROA not before: Sun 19 Oct 2025 01:31:47 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:94:78:f3:32:f8:f9:8f:c7:f0:3b:46:c2:78:f9:7a:a7:4b:90:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 01:31:47 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=3e34f8ea9f381a313b0473aeff10bd79e1d0351cc5ee95a35cbab4d53649f3b5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:ba:70:5f:15:5d:7e:cd:71:be:3d:53:eb:
20:3f:86:8c:f8:17:16:c7:55:64:d7:a5:f5:3d:dc:
64:36:37:24:3c:8f:dc:92:32:57:23:28:c0:58:db:
a9:66:99:01:41:d6:10:90:0c:85:26:22:a5:0c:ef:
ba:8b:50:b5:97:d3:70:c4:4d:d3:f9:f5:ed:9c:c7:
35:f6:0f:26:bc:e4:8c:fa:f1:c7:34:a5:f2:34:6b:
0e:17:74:3d:ce:c9:1f:e7:b5:da:c6:36:f8:58:60:
3e:d5:6f:e7:7d:74:8d:2e:ff:77:b2:1b:28:52:ce:
c7:85:df:70:e7:ac:3b:59:f9:bf:d1:97:0a:44:8e:
77:5b:80:26:6d:f0:d4:67:bf:fc:f2:8b:06:e7:94:
9b:50:8b:dc:8f:e0:db:ad:27:66:84:1f:aa:29:c6:
5a:b1:fb:cf:53:87:6a:e3:4a:9e:c9:24:d4:03:64:
2f:08:b2:de:20:e4:9e:90:f8:0d:5a:77:df:ab:57:
aa:67:81:a2:66:80:c4:1e:de:f4:e5:79:54:ab:f6:
9e:cb:4b:51:80:55:5b:9c:6c:c7:65:a1:94:90:4a:
96:dd:b5:c0:3a:c1:b1:68:ec:b3:20:ef:77:fa:da:
3c:7e:9a:86:17:52:38:fb:3e:fd:30:9c:32:8f:a7:
a9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:81:95:40:7B:B8:A4:F7:C3:84:3F:AA:C0:6B:88:90:19:80:02:14
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/316d3f16-d245-44ac-8dde-37b4b497c917.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.67.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:12:cf:20:8f:5f:68:36:51:df:63:b9:01:94:0c:66:28:13:
05:3d:3f:7e:d9:71:48:54:b4:75:58:0c:9d:30:a6:96:fb:00:
7d:c2:c5:d3:eb:37:b3:99:43:81:06:a9:39:6e:39:14:be:c0:
11:0c:79:a0:0e:71:26:d5:78:cc:b9:34:82:fd:fa:6b:79:77:
b3:58:e5:87:6d:f2:4c:23:5e:7b:46:d9:ee:50:8d:e0:56:98:
59:f7:9d:f4:7b:5a:41:92:95:61:6c:d0:0e:24:9e:b9:a3:f3:
a0:f2:99:3f:26:44:48:7b:98:5d:6e:05:f9:7f:f1:01:75:cb:
c0:e8:4a:90:4a:6b:2b:a8:39:bd:d2:90:fc:94:ea:f0:a3:78:
5f:39:d5:b5:4d:00:97:4a:90:bc:cd:5e:3c:ff:fa:df:fb:53:
65:bb:03:2b:04:05:eb:ce:2d:83:f8:6b:32:3d:82:99:30:f7:
d4:7a:4d:81:9d:bc:05:5e:c4:6c:e3:e9:02:60:9e:e5:c4:0a:
ba:ef:a7:7d:02:66:17:e2:88:3a:ab:0c:67:90:90:f8:b0:d1:
ae:f2:9d:70:73:cd:b7:8c:df:ed:2a:bd:3f:c2:59:05:3f:6b:
09:77:f7:3c:80:77:c2:2b:c2:b3:34:b4:7d:b2:0b:af:0c:88:
fc:41:83:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:02 2025 by rpki-client