Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8126c782-6e19-456f-bc00-a38772a57022.roa
File: 8126c782-6e19-456f-bc00-a38772a57022.roa (raw, json)
Hash identifier: Bv6/D7OL6sJ5HQs2GFbYQ4406wRfVOBtWeJk8fySb/s=
Subject key identifier: 7E:FE:96:27:E5:3D:C0:95:9E:3B:4F:04:8C:CD:18:01:8A:99:46:D4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0D05CB421D0949F869BE2DF9AD1DC427F99BB328
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8126c782-6e19-456f-bc00-a38772a57022.roa
Signing time: Sun 19 Oct 2025 03:10:55 +0000
ROA not before: Sun 19 Oct 2025 03:10:55 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:05:cb:42:1d:09:49:f8:69:be:2d:f9:ad:1d:c4:27:f9:9b:b3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 03:10:55 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=07553baf9a32687c96e83f52cfafc6f543e39279b8bbbbd564c4ec795521ab52, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:be:7f:56:45:1d:cb:a9:fb:02:23:38:2e:
9c:2c:2d:95:ef:18:51:a0:cf:0a:2d:50:1f:1c:c8:
f1:7c:0f:86:ef:81:9f:c6:84:f5:ac:a0:08:1f:58:
19:73:95:34:63:78:a5:a7:0c:25:82:c7:c4:93:8b:
db:95:3c:b7:a6:23:4c:67:56:18:15:95:aa:44:8c:
dd:cc:18:ba:aa:2a:87:92:f3:8b:59:85:30:a3:94:
6e:53:18:b8:70:80:c9:d2:11:0a:f1:a4:4d:56:ae:
dd:e2:04:60:43:2b:67:e7:28:89:60:67:a7:61:bb:
5b:fe:b9:51:a9:2f:1e:7e:c3:69:58:ef:4c:c9:55:
7b:13:26:3d:9c:f1:53:11:a4:ab:7b:ec:69:c9:06:
17:5a:e4:e6:91:f7:0d:07:a8:4e:29:07:e9:60:4e:
d1:1c:fe:fb:e2:42:b6:da:7d:40:89:ab:38:4d:8a:
60:64:dc:23:b2:92:7e:cc:c6:dd:d5:27:09:27:93:
17:6b:be:bb:2f:69:12:21:b5:d5:2c:60:54:91:23:
28:0b:0c:8d:e1:81:be:5d:48:d7:36:07:a4:05:23:
e4:43:ca:1e:3d:f5:16:30:b4:6a:f4:31:80:42:3f:
e7:5b:40:e8:10:18:47:88:c5:7f:b7:72:d6:56:66:
0e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FE:96:27:E5:3D:C0:95:9E:3B:4F:04:8C:CD:18:01:8A:99:46:D4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8126c782-6e19-456f-bc00-a38772a57022.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.131.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:c5:f3:50:86:b5:e1:32:00:fd:e5:23:2d:8b:b8:aa:aa:ea:
36:26:ed:ee:5c:93:ed:18:e5:7b:2b:13:d5:ce:f4:ce:d7:3c:
26:89:9f:45:37:be:71:a6:95:75:d4:8a:7f:54:34:b3:4d:81:
e7:32:12:3d:6f:bc:c1:42:f2:62:01:6f:d7:b2:ba:4e:f0:e6:
62:85:61:09:33:35:b5:05:d1:44:91:e8:98:87:f8:45:65:2c:
2f:e5:55:68:2e:29:05:22:f6:4e:03:91:7f:fe:59:c2:be:22:
2b:55:30:f9:18:2d:9b:c5:bc:36:b4:fa:e0:fb:91:aa:f5:5a:
12:a9:4f:61:77:4e:98:4d:bc:06:9e:9d:96:bf:eb:f0:c3:31:
91:6a:ef:db:7e:ef:72:31:a1:6e:eb:85:14:46:db:6a:47:26:
60:00:c1:64:76:a1:7d:6a:30:70:b0:e3:1d:22:68:57:74:2e:
d3:54:70:51:87:f7:88:e8:b2:8b:17:6a:85:d1:28:aa:7b:e7:
f1:dd:68:98:71:04:b0:a9:13:d9:d9:4d:1a:3e:3c:c4:9f:9b:
26:16:f5:fa:74:d2:86:6e:f0:c0:0e:84:70:b7:5a:e2:6b:21:
f9:8e:de:41:d7:6c:09:33:e2:f1:fc:92:80:d0:7e:0b:d0:64:
34:24:15:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:10:52 2025 by rpki-client