Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ebfceff-62e1-4087-b15d-f12c02a8d35d.roa
File: 9ebfceff-62e1-4087-b15d-f12c02a8d35d.roa (raw, json)
Hash identifier: k/m8J1YhXgKkwZlE29vr+R02GVSpNIgaNZnnYClYsrw=
Subject key identifier: 73:38:D7:AD:91:DE:E2:6A:CC:85:46:FD:D2:B8:BE:A4:38:92:AB:DE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1D26C3571535B0C4F6D159F0703BB7A5BDA5FF22
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ebfceff-62e1-4087-b15d-f12c02a8d35d.roa
Signing time: Sun 19 Oct 2025 03:10:54 +0000
ROA not before: Sun 19 Oct 2025 03:10:54 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:26:c3:57:15:35:b0:c4:f6:d1:59:f0:70:3b:b7:a5:bd:a5:ff:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 03:10:54 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=d7a3a6f22e8bebd7201fb5e120867f8a0b5a3f8bc979f26842da3a445a642098, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:12:a5:c0:6c:2f:20:4e:39:50:4a:c8:4b:19:
92:f6:e1:5b:dd:b9:4b:30:b7:4a:b6:00:1a:3a:37:
e4:33:99:e6:a2:ca:f9:a4:39:df:b2:9f:fa:7f:b8:
45:80:3b:5e:94:01:3c:af:22:92:de:65:9b:06:cb:
e4:d2:52:17:46:31:e3:a2:4c:2a:3c:6b:cc:55:de:
3d:5d:8b:94:59:95:26:de:d0:52:a0:40:de:0a:02:
43:54:59:a4:07:bc:d9:26:a8:30:3d:bb:cd:08:7d:
24:b3:39:d9:10:ec:1f:53:20:69:6a:62:16:91:71:
00:c3:d4:12:31:e0:cd:25:49:95:fe:c0:dd:66:b1:
92:ed:e1:f4:24:1f:2e:c8:69:0e:1d:41:e4:0e:f2:
9c:db:10:aa:1b:87:a8:05:99:d2:c5:ab:7f:58:48:
e5:5b:c6:f4:3b:a0:f7:29:0c:44:83:93:15:7a:1b:
a4:dc:79:b1:c0:97:24:cc:e1:73:e3:ff:26:91:ef:
d4:bc:33:46:25:09:9e:66:83:fa:a2:f9:7f:50:08:
9f:39:10:2d:20:67:dd:c8:67:29:29:41:78:68:8e:
92:ea:7e:0d:0f:9b:9d:3b:b3:f2:31:21:22:98:29:
20:d7:c4:3a:10:76:88:9c:2e:8a:a6:cc:4d:21:c4:
a4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:38:D7:AD:91:DE:E2:6A:CC:85:46:FD:D2:B8:BE:A4:38:92:AB:DE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ebfceff-62e1-4087-b15d-f12c02a8d35d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.116.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:d5:cc:73:77:98:e6:5f:57:91:d2:e3:02:70:65:22:0d:09:
58:84:39:13:d6:8f:1d:b7:1b:9e:0c:a5:87:b3:f4:56:80:d8:
0d:08:19:6f:0e:b2:6f:23:b0:80:5a:39:94:29:c6:56:4f:98:
9f:c9:68:3c:6d:ad:63:c3:6e:75:0b:89:4e:0b:c1:36:36:1c:
16:04:5d:60:2a:64:b6:1e:3e:96:51:3f:da:ec:46:65:e4:75:
b6:8e:83:11:cd:9a:fc:0b:02:d3:f6:f7:03:50:6b:a2:7e:47:
12:8b:ea:ee:0e:e1:cc:df:fb:2c:af:83:50:d3:e0:5d:b1:81:
83:12:ba:39:3b:77:5e:72:6c:cd:d1:64:16:97:e7:e6:e5:83:
59:32:f6:17:a8:81:4c:73:6c:f5:8f:3f:61:9c:a4:f9:37:c8:
6e:4a:12:ff:24:1c:6e:01:9d:3a:87:12:9b:ae:97:11:72:65:
1f:59:87:37:87:eb:f6:21:8a:20:60:d1:78:4f:f0:42:34:9f:
0f:39:0d:a3:a2:f3:08:0b:82:51:b1:f7:d0:ea:ad:38:af:29:
71:b4:50:43:8c:98:62:0c:ed:08:92:08:d7:67:1c:89:d2:27:
ca:b3:1a:c1:96:a6:df:8d:9d:b7:c4:15:1d:ce:09:fa:53:a5:
00:61:77:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:44:22 2025 by rpki-client