Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/039c3470-171f-479a-9cfa-8b1a3e16e3e3.roa
File: 039c3470-171f-479a-9cfa-8b1a3e16e3e3.roa (raw, json)
Hash identifier: R7h/VprxPWBFGtrcDzopSj9iUHCAlKj4np97NSqQISk=
Subject key identifier: 1E:EC:C5:67:03:82:D9:45:FF:C8:D8:30:7D:5F:64:98:D0:B1:B2:31
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7FF735550628CD23941E73959D902210F4145606
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/039c3470-171f-479a-9cfa-8b1a3e16e3e3.roa
Signing time: Sun 19 Oct 2025 00:30:16 +0000
ROA not before: Sun 19 Oct 2025 00:30:16 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:f7:35:55:06:28:cd:23:94:1e:73:95:9d:90:22:10:f4:14:56:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 00:30:16 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=e8eb2a0f2a2a039bd4cc9232d5be10af34483bc1779bece1ee6612d2bd7dcb17, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3f:5c:49:21:b5:14:83:0a:24:01:ff:f6:91:
5a:cc:e8:08:1e:63:9b:52:23:c3:0f:59:45:a3:e0:
9d:7b:cb:63:08:b2:5b:bc:ee:56:bd:84:83:fc:64:
06:28:c8:73:4c:ca:f2:2f:83:aa:a6:b1:7e:7e:8a:
36:96:c5:5e:d8:95:93:bc:ba:14:25:8b:86:2d:72:
39:8f:80:5f:df:94:0a:c6:bf:55:3d:f9:c7:73:d6:
c7:4e:7f:88:f4:c0:b0:b0:a0:7d:7d:a8:1b:40:69:
9e:85:c7:14:85:83:02:89:ea:be:a4:0e:72:a6:d4:
9f:4a:11:b8:03:3b:6a:2b:8c:19:fb:af:62:59:5e:
1f:ec:46:51:0b:21:be:71:23:6b:5a:1d:4a:cd:41:
3a:d6:ee:9e:f4:5a:0e:07:7d:b5:ad:5a:02:52:f9:
fd:82:78:11:e3:d0:db:37:e4:89:72:6a:57:7d:f7:
12:6b:ec:1a:01:8f:51:8c:01:2f:f1:64:d4:cb:ee:
e6:d5:12:f9:71:b4:a9:ba:32:65:87:2b:1d:55:6e:
49:a9:db:f3:4b:80:e3:26:20:e5:de:01:66:87:07:
67:4c:b4:98:04:e6:3c:e7:63:04:6b:ec:2f:49:db:
df:64:26:5c:f3:bf:90:e2:23:5f:b7:78:14:74:3a:
1c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EC:C5:67:03:82:D9:45:FF:C8:D8:30:7D:5F:64:98:D0:B1:B2:31
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/039c3470-171f-479a-9cfa-8b1a3e16e3e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.40.0/24
Signature Algorithm: sha256WithRSAEncryption
81:61:23:da:49:fb:3c:33:86:3a:1d:7c:43:f3:e4:02:ad:34:
16:63:62:d0:38:24:0a:c1:6a:63:1d:b4:49:53:35:e4:17:aa:
02:47:32:e7:a0:ac:95:49:d8:ba:43:b7:2c:a3:df:c4:9e:dd:
05:97:92:af:e9:99:b2:9e:ae:f6:e9:b0:cc:08:2c:7f:13:f2:
72:cc:fe:4e:27:20:09:96:72:ce:12:73:bc:bc:b2:27:82:c6:
15:77:de:b3:ac:15:07:8f:0e:e3:af:0f:1d:7c:4c:b0:1e:d2:
aa:07:85:83:66:eb:40:cd:f4:89:05:1e:f3:5c:8f:0f:8a:55:
fc:c0:52:37:b0:2b:65:79:d1:74:e4:7a:c2:40:18:a1:ef:0a:
de:8c:c1:d4:78:51:bc:a0:ed:94:c1:c6:74:53:ac:88:41:17:
b5:f6:64:35:cd:4a:cb:85:31:b9:cd:fb:86:92:ff:50:14:f8:
83:e9:b5:95:0d:22:6e:ea:fa:8a:43:a6:90:a4:ab:9d:55:13:
e1:09:20:35:00:f6:2a:49:4e:99:10:4c:ab:41:99:64:1b:eb:
45:1b:2c:5c:be:ac:11:70:73:91:c8:f4:3c:f0:0d:c3:0f:7a:
89:71:80:71:c5:c5:f0:10:3c:e3:a9:fd:85:bb:d5:d1:9d:11:
c1:be:57:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:15 2025 by rpki-client