Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cafd5793-7a6c-47f6-9932-cd87688dec77.roa
File: cafd5793-7a6c-47f6-9932-cd87688dec77.roa (raw, json)
Hash identifier: fn6OJwgJuYp93Cf8wtXrn/6gpnzPf6xN120wUKCADiA=
Subject key identifier: 85:22:C7:A0:34:62:BE:B3:C6:6D:48:95:03:6A:11:42:9D:D7:71:E5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 43BB26FC810E74681EE7DCD7D59387F233936CE3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cafd5793-7a6c-47f6-9932-cd87688dec77.roa
Signing time: Mon 20 Oct 2025 00:31:48 +0000
ROA not before: Mon 20 Oct 2025 00:31:48 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:bb:26:fc:81:0e:74:68:1e:e7:dc:d7:d5:93:87:f2:33:93:6c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 00:31:48 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=e44de38ca364eab405c4ecbe8443add08819605e7c3ef8fbfafa94ab90e9f8fa, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8b:90:97:80:09:6d:27:22:59:73:17:0d:24:
11:be:37:88:6a:1b:d5:ef:43:e5:5e:4a:2d:d9:de:
da:97:37:b2:a0:a9:93:4c:2d:bb:b2:d5:8f:27:95:
00:a2:73:b2:46:3d:76:e5:35:8e:e3:85:59:98:77:
59:d9:8c:11:15:91:89:18:1c:35:ac:83:d1:81:b2:
54:6d:7c:b3:f3:d0:d8:b2:73:dd:7d:9e:94:e3:cb:
27:ff:ad:a2:12:88:f3:db:47:cd:6e:c8:44:d2:0a:
0f:f4:6d:fd:31:fa:22:a4:6e:09:b0:2f:c1:5e:bf:
00:d8:37:7a:68:ed:b8:33:d7:40:01:f1:48:0e:22:
1b:e7:8a:cb:60:26:98:0d:26:fa:54:30:74:15:09:
f8:99:28:50:0b:9d:90:ed:97:43:15:28:f4:65:ef:
49:4a:b3:f2:ec:f8:73:ad:14:62:d6:bc:d5:72:bd:
c1:ff:a0:0f:b8:53:03:c3:b2:c5:90:c7:e9:83:8d:
9c:07:33:bc:15:cd:a3:6d:51:fd:ab:7f:19:16:5c:
bd:d2:3e:9d:64:ca:32:82:38:ed:cc:a2:f7:09:08:
47:d7:e9:f2:2a:99:79:09:04:80:67:97:13:48:37:
ca:d0:bc:af:93:c4:ba:83:1c:c0:af:60:09:3c:32:
07:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:22:C7:A0:34:62:BE:B3:C6:6D:48:95:03:6A:11:42:9D:D7:71:E5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cafd5793-7a6c-47f6-9932-cd87688dec77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.47.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:82:0c:3a:15:01:4a:20:75:53:e8:55:36:c2:93:1a:6f:6f:
72:6a:59:8e:1b:05:95:67:14:b8:56:f3:e0:75:9b:e1:fe:36:
39:c5:1c:b3:16:06:a4:ff:2d:c9:24:bc:99:2f:05:fe:dd:4a:
a7:ae:9b:60:2b:af:db:28:ee:8f:67:1f:69:ad:d3:52:57:16:
c3:97:86:ae:7a:33:42:a2:41:a3:01:35:f0:ae:ed:4b:22:20:
50:7f:28:df:b4:e9:21:df:dc:9f:a1:a5:97:88:7f:34:4f:f0:
01:91:95:5c:d0:e8:e7:a2:4c:71:8b:90:55:83:d6:77:12:90:
e0:86:ff:bf:cb:c3:fc:36:07:7e:db:24:43:7d:64:a6:0b:a8:
a0:86:44:c4:32:45:ec:4b:de:49:1e:a9:51:2b:d8:ed:74:e0:
58:c4:99:39:8b:9b:b4:30:8d:79:65:50:10:fb:1c:b1:48:15:
62:b2:1d:4a:05:24:f2:a5:39:72:aa:bc:fb:db:f4:30:01:7f:
82:36:b2:32:66:21:eb:9c:72:c8:56:95:9e:ea:7c:73:ff:d7:
1d:0b:f8:52:d1:3d:a3:13:41:63:1d:92:aa:e9:57:a7:46:e0:
e0:6b:45:86:76:92:05:90:98:68:8b:c2:bd:d6:19:ac:04:f4:
b4:70:22:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:05:25 2025 by rpki-client