Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/093edf55-5a70-4ed5-8dbf-484665704cd5.roa
File: 093edf55-5a70-4ed5-8dbf-484665704cd5.roa (raw, json)
Hash identifier: k0kGnT90ojPPgXF/1YahFKHiUrD0KJJ7ebCuACRGAho=
Subject key identifier: F4:AF:B8:82:F7:1A:2C:88:59:9A:71:2C:0D:13:36:EF:BD:62:0C:89
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3352EC9CE03A99FACAAE1C4AB9A9190E0E26DB7B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/093edf55-5a70-4ed5-8dbf-484665704cd5.roa
Signing time: Sun 19 Oct 2025 02:00:06 +0000
ROA not before: Sun 19 Oct 2025 02:00:06 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:52:ec:9c:e0:3a:99:fa:ca:ae:1c:4a:b9:a9:19:0e:0e:26:db:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 02:00:06 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=af271f72a6a9d2b7aa11319e5f9df2165e75368d00db091d344ad7edf41695c8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ca:81:eb:da:37:63:15:0a:a9:78:80:6f:eb:
b8:e9:f7:06:6e:c7:e7:44:e8:db:26:c7:12:1d:42:
93:76:a9:f5:15:43:5d:10:26:d5:98:f4:b6:62:46:
47:a1:95:6c:62:93:26:f5:f1:14:02:ee:cd:19:34:
24:00:84:12:26:21:e9:f7:f5:33:0e:93:75:18:c8:
07:b8:3d:fb:5e:d9:c4:54:77:29:f7:55:5d:72:a9:
ee:4a:7f:2f:06:4e:6b:db:64:51:b4:e5:3b:7f:43:
56:f8:8b:b6:64:0a:86:50:9b:1d:ba:5c:c1:ba:21:
1a:3d:de:7d:03:65:9b:72:16:85:7e:13:77:35:25:
5c:2e:48:67:c1:cd:45:dc:29:2f:a0:e7:cb:45:92:
5c:a0:af:9c:0b:36:b2:3f:3a:d2:cf:ba:e7:00:90:
d9:dd:d7:3b:e2:34:eb:11:f3:31:3d:7b:d7:13:ce:
03:03:df:50:b9:61:cb:2a:52:40:5b:e0:39:6b:64:
82:ae:98:95:87:d0:8b:9e:29:88:78:07:59:d9:e0:
bc:8a:71:2c:fc:b4:8f:8e:6a:ea:97:21:af:5e:b1:
b3:ff:ec:db:b9:94:fa:29:39:9d:62:2f:a5:f0:44:
37:24:9f:d0:b4:e3:f9:83:5a:61:72:0f:b1:58:ad:
fb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AF:B8:82:F7:1A:2C:88:59:9A:71:2C:0D:13:36:EF:BD:62:0C:89
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/093edf55-5a70-4ed5-8dbf-484665704cd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.151.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:d5:69:f0:35:d6:5f:e1:23:b5:f7:85:c0:3c:e2:08:1a:44:
81:d6:5d:b2:a5:3e:48:8b:4e:cc:30:67:82:97:08:b4:61:3e:
fe:f9:70:a3:19:7a:32:94:73:20:5d:5b:1d:0a:04:23:12:d8:
12:66:a3:65:af:52:c5:f8:e6:8d:14:cc:8c:aa:4f:a5:c6:13:
2a:2d:5a:ce:0b:77:c6:aa:38:0d:43:14:05:9a:84:51:e1:67:
94:84:62:40:09:6b:aa:6d:db:ea:5c:dd:97:53:d8:c8:f9:45:
91:51:88:56:44:3e:a9:a0:8c:61:c8:13:ae:fb:61:7d:1e:bf:
c6:10:6c:47:74:bc:86:3c:c2:eb:d1:83:08:96:ad:b1:59:7c:
71:2f:37:3e:08:23:47:63:62:76:b0:68:cb:b6:25:44:3e:24:
d8:6d:92:b5:9a:2a:c5:b8:ba:f2:d4:41:60:e7:40:5f:77:2c:
6d:94:41:00:4a:87:6d:90:18:78:0a:8a:7e:d5:d9:a8:76:27:
d9:78:d6:10:a3:16:da:0b:4e:62:74:2a:e9:cb:44:61:ad:56:
ae:3b:d6:4b:0d:eb:e7:16:07:58:b3:34:d4:ea:00:4a:1c:ce:
09:70:f4:01:3f:2d:9e:e9:15:ce:f0:60:b8:d7:0c:1f:b5:0b:
00:4e:55:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:49:36 2025 by rpki-client