Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37dfb5f0-8c03-4883-be7a-febfe93bd224.roa
File: 37dfb5f0-8c03-4883-be7a-febfe93bd224.roa (raw, json)
Hash identifier: Mrd0xvHoZmWV8c26DXxs+6CV5qxkG16moWW0EWATTqM=
Subject key identifier: FB:A0:21:5F:9C:B7:77:B1:3B:CF:B6:EA:03:F1:44:5F:B2:4A:D2:1F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 71ED38B67A0448C64E1F98ED7D616CC17C23F5C9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37dfb5f0-8c03-4883-be7a-febfe93bd224.roa
Signing time: Sun 19 Oct 2025 01:31:45 +0000
ROA not before: Sun 19 Oct 2025 01:31:45 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:ed:38:b6:7a:04:48:c6:4e:1f:98:ed:7d:61:6c:c1:7c:23:f5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 01:31:45 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=482b4b2b6ce66af190c7b9a7d6f74cf65b1102af46b239a9db5d9f8616f81873, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0f:0c:97:43:14:ac:5f:19:ef:7a:42:15:7b:
63:31:1f:77:8c:55:64:94:5e:56:ff:82:d4:ad:5b:
09:06:16:6a:2c:49:73:27:e4:fd:13:cc:cd:e3:f7:
01:6d:5e:fe:8e:2c:72:5e:43:ca:e1:7a:81:25:89:
9c:ae:d4:7f:94:43:98:1c:c4:d6:67:5b:70:f8:8b:
82:8e:12:3f:a4:c9:12:12:64:43:4a:11:a7:12:fa:
31:64:eb:f5:77:04:30:98:2c:dd:27:4f:6f:9e:d9:
2c:56:de:5e:61:70:fc:2c:2d:78:e8:7c:63:23:3f:
a3:11:9d:ca:e9:65:d4:a2:49:52:4d:a9:49:4c:94:
9f:c5:1d:77:37:73:97:d7:9a:28:8f:c2:5d:3a:e9:
84:30:98:f7:e5:ed:86:d2:85:87:a1:54:c2:93:12:
c3:d3:f4:28:b6:4f:6f:3d:7c:13:d8:84:92:f2:28:
65:a7:c0:f3:f8:91:0b:94:5f:8f:7d:45:e5:ac:ab:
a5:fa:81:62:3f:c9:a0:b3:36:96:e8:d9:47:2f:84:
bb:1b:55:83:fd:43:76:f0:3b:de:6a:6c:2f:8c:23:
fd:6f:44:72:a6:05:aa:cd:d8:c2:83:d8:d1:28:66:
51:1b:50:0e:59:5f:50:db:6d:5b:63:37:3a:79:24:
b1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A0:21:5F:9C:B7:77:B1:3B:CF:B6:EA:03:F1:44:5F:B2:4A:D2:1F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37dfb5f0-8c03-4883-be7a-febfe93bd224.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.111.0/24
Signature Algorithm: sha256WithRSAEncryption
31:35:e5:71:24:34:b3:42:eb:17:4f:5b:51:c6:6f:50:38:78:
2d:2b:a1:73:ff:ce:8e:a1:24:1d:f1:7f:f3:97:a5:a7:76:65:
53:60:6d:93:37:dc:98:0b:e0:a4:3c:7e:31:94:43:35:e3:fa:
a9:aa:83:0c:19:23:c8:42:4a:a1:e1:2a:1b:29:82:74:9c:bf:
a7:e9:6b:d5:52:b9:b8:1f:68:1a:a5:00:8f:3f:0d:a0:55:84:
c4:53:81:46:fe:4d:8a:2b:10:f5:41:82:6d:91:c5:81:41:29:
32:a0:a9:47:cf:2a:38:c6:d8:cc:e3:32:81:00:98:fb:1c:80:
c0:35:28:46:3f:fb:ee:7f:6f:50:df:1d:45:9f:02:ba:ed:fa:
db:3b:a0:12:58:b5:1c:ba:e2:b7:25:99:be:04:5c:04:78:b3:
be:69:9a:97:5a:49:0f:d3:76:ca:2e:b9:7b:3f:9e:67:12:9c:
9b:23:76:02:6c:ff:a5:19:2e:36:4a:37:34:6b:25:e3:ed:08:
ec:f7:1a:e3:f7:69:a3:a1:1e:31:cb:cc:d8:2e:a3:7f:5f:45:
f1:f6:62:04:ff:e1:08:c1:62:22:f0:42:9b:60:74:d4:d4:25:
52:1e:fc:bb:0d:c5:7f:dc:25:47:7c:6d:3a:e1:18:fb:3f:e9:
cf:53:d1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:06:11 2025 by rpki-client