Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f250919d-e11c-496c-a77e-13532ab2125e.roa
File: f250919d-e11c-496c-a77e-13532ab2125e.roa (raw, json)
Hash identifier: yV0hrElvCfF2L24bf6/awqwP88q//eR5sH9nZYfTgsg=
Subject key identifier: 8F:5F:94:A7:05:96:E1:EE:54:A7:15:5F:BF:3C:E0:07:7D:0D:46:08
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5B9AE4D3C0AC2FAC2B1B50225781BBA1C255269C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f250919d-e11c-496c-a77e-13532ab2125e.roa
Signing time: Mon 20 Oct 2025 03:01:39 +0000
ROA not before: Mon 20 Oct 2025 03:01:39 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:9a:e4:d3:c0:ac:2f:ac:2b:1b:50:22:57:81:bb:a1:c2:55:26:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 03:01:39 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=9eb15d95669540dcf6fe6aebe91da46f034e285944a463d167ad5d06f9164ef4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:36:13:38:1f:4c:1d:82:7c:0e:5f:b3:54:32:
5a:ce:a5:09:9a:da:5a:5e:7b:3c:07:a5:12:69:a3:
3e:57:fd:9e:68:55:b8:51:74:3b:bc:b1:27:69:db:
04:c0:14:bc:c5:89:93:75:47:5a:10:0f:a2:d5:a8:
ec:a2:62:0d:d8:e9:e9:c7:55:24:71:b4:8d:c2:5c:
da:20:3d:aa:3c:19:57:ca:0d:b3:c6:2e:ac:d4:eb:
86:b2:0b:9c:9c:d3:cb:cf:43:96:d9:e9:43:e3:ce:
1f:c1:e3:63:49:c2:39:7c:5a:35:87:62:1e:cc:ea:
b7:b2:6a:97:52:ae:8d:c6:fb:13:41:95:cb:48:24:
b6:65:64:23:51:4a:6e:b5:99:4c:91:77:21:c9:ee:
da:27:9b:66:ac:ae:51:10:61:10:4d:77:34:7b:ef:
11:53:53:61:96:7f:fd:6c:4e:a6:8f:40:42:91:8a:
28:d1:3e:55:0e:55:73:f3:ee:71:f6:41:6b:45:96:
7f:85:53:d0:88:01:40:a2:24:21:d6:4c:6b:61:24:
26:bd:85:bf:5b:04:ac:86:75:1d:ca:b5:9d:bb:59:
89:3a:3e:e4:b0:1b:63:ab:02:fc:ee:a6:e3:fe:bd:
81:00:4a:5f:cd:ee:d2:78:e0:42:4d:32:ac:4b:71:
fa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5F:94:A7:05:96:E1:EE:54:A7:15:5F:BF:3C:E0:07:7D:0D:46:08
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f250919d-e11c-496c-a77e-13532ab2125e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.228.0/24
Signature Algorithm: sha256WithRSAEncryption
61:68:53:1d:f4:7e:60:80:42:84:e6:bc:b3:fa:b2:b0:49:c7:
f4:9e:71:9e:47:10:10:2c:16:d8:d5:89:55:bd:2b:2e:c2:2d:
22:36:6a:85:d8:88:1d:2f:79:bc:51:58:f8:2f:ae:e5:c6:a9:
8c:f6:47:ef:c4:93:a3:10:94:76:45:c8:0b:ed:3a:16:5b:a8:
9d:79:76:fd:6f:05:10:b6:4f:92:dc:c6:93:a5:27:9c:5e:6f:
0e:68:5a:82:02:15:0a:01:3d:21:e5:87:db:90:69:1d:5b:6d:
14:48:31:cd:38:af:dd:78:aa:16:c5:4d:28:64:bc:f4:df:bb:
ee:62:80:b0:bc:5b:22:de:6d:70:92:21:e2:ca:4b:ef:0a:86:
88:ee:fc:ce:f1:05:a1:e6:10:b7:b9:d8:0e:99:d7:18:74:bd:
05:90:33:5d:d1:a7:1f:7b:96:83:18:75:ef:1a:ed:ec:c8:f1:
e9:7f:97:e1:5b:48:f3:05:6d:4d:b3:6c:ee:b9:ae:17:f3:53:
dc:16:99:e8:3f:44:a8:eb:8a:a2:53:8c:20:7f:62:dc:c8:c9:
1c:68:88:8e:03:44:85:1b:c1:8a:f2:f7:a5:4a:22:b1:69:74:
95:89:1c:a7:24:a6:e9:12:14:ac:66:a1:ec:d8:1f:b6:d2:1d:
28:1b:b7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:17:01 2025 by rpki-client