Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91308709-a030-427d-8927-47846c23311d.roa
File: 91308709-a030-427d-8927-47846c23311d.roa (raw, json)
Hash identifier: KKgzAZzfiANs8mAyVXrOmL2ZrJX0WRJq/E6QLwd5x/I=
Subject key identifier: DE:9E:24:40:1E:5D:E4:BE:22:C0:2A:CD:5D:AB:32:A6:50:A5:3B:52
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2900D82D8EFDECB7EFDADF540C2FDF173A7B8720
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91308709-a030-427d-8927-47846c23311d.roa
Signing time: Sun 19 Oct 2025 03:12:11 +0000
ROA not before: Sun 19 Oct 2025 03:12:11 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:00:d8:2d:8e:fd:ec:b7:ef:da:df:54:0c:2f:df:17:3a:7b:87:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 03:12:11 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=fc861c17e98e6ea1fee371298213c0870f873bab1ac026af6df53db5169c4f98, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b1:c2:85:f8:b8:87:23:03:17:4f:6b:cc:4d:
ee:c0:d1:76:b7:a8:51:3e:fc:91:f1:ba:70:14:8a:
0e:94:e0:f9:91:1a:ac:86:0f:54:de:42:07:cd:49:
2f:21:f2:53:f3:e7:ea:50:59:e2:78:84:67:2c:28:
92:91:13:38:87:f4:5e:75:f5:21:58:2e:bb:05:b1:
d7:aa:f4:c8:41:a4:5f:46:7c:4e:41:66:2d:68:52:
55:85:34:86:99:c7:ac:33:42:59:4a:99:40:b8:a3:
15:30:cf:2e:c9:d1:90:1f:32:95:f3:35:09:62:0a:
ac:0a:c2:9c:ca:25:f3:c3:07:ea:b2:8b:05:e0:e8:
a7:57:a9:47:cc:66:d0:5b:a6:a1:83:1c:87:08:5a:
81:1d:30:a2:13:4f:fb:7a:11:78:df:2b:94:aa:ea:
dc:25:86:95:cc:17:f9:7e:d6:d3:e7:78:0b:e8:2b:
f4:2b:9c:33:da:7e:b5:c4:31:1c:33:fc:be:2e:21:
a8:f1:56:89:45:22:5e:42:87:31:ab:6d:f3:3c:fc:
8a:9a:bd:cb:60:50:03:3a:71:03:36:df:7a:0e:c8:
e6:b7:7a:d9:1f:0b:b3:f8:43:e1:f6:4a:df:71:89:
1a:66:56:42:b5:cd:49:26:5e:d1:e0:f7:6a:1a:61:
8f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9E:24:40:1E:5D:E4:BE:22:C0:2A:CD:5D:AB:32:A6:50:A5:3B:52
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91308709-a030-427d-8927-47846c23311d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.103.0/24
Signature Algorithm: sha256WithRSAEncryption
40:76:4b:bc:37:95:ce:03:60:45:a4:ed:8b:d1:be:3f:35:11:
8d:c2:71:94:2c:c7:52:14:83:be:79:f9:f0:75:62:84:80:d1:
25:79:58:ac:0c:23:b1:e1:c8:4e:d8:16:73:33:59:de:9f:fc:
7c:5c:38:1e:8e:9a:d6:fe:f5:2b:a1:8c:b0:dd:dd:5e:31:89:
af:d9:55:a9:bc:fd:81:de:5b:c1:22:7f:ce:bf:cb:4e:c7:af:
ff:d5:13:2e:bc:c6:ee:e2:54:9a:df:74:39:a6:67:ff:0c:3f:
cf:52:f7:2c:55:9b:7b:6d:90:b9:52:c1:f6:14:5b:57:89:6d:
6f:70:0c:11:43:68:cd:8a:b6:28:ee:12:43:a0:de:26:69:78:
c3:63:63:ad:59:a9:99:c1:77:02:82:1b:55:cc:c8:db:ee:33:
bc:9f:60:9c:b6:4e:7f:3d:b4:11:ac:49:7b:48:83:7f:04:32:
c6:ec:2f:02:19:c8:48:ea:e4:ba:09:7c:b1:c3:92:30:73:93:
0c:02:a6:d2:69:6a:c8:e0:34:a8:f6:ff:47:df:e1:8d:c4:97:
ad:9d:78:d2:a0:13:40:a6:60:17:24:78:ca:5f:85:f0:4d:15:
09:98:31:b1:b9:e0:7a:66:74:8d:99:82:b1:af:4f:71:ae:ea:
18:6c:a3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:10:58 2025 by rpki-client