Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b424601-f383-4c25-aba0-a7e8d0c4b99a.roa
File: 0b424601-f383-4c25-aba0-a7e8d0c4b99a.roa (raw, json)
Hash identifier: Nl5iu3x/ydQa85r2k5caRebwuU6mELTnr9hUcNxc2Tg=
Subject key identifier: FE:CF:47:72:B2:3B:CF:1F:D4:3E:C7:55:AB:85:9C:21:BC:5B:99:50
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 40EDEE064FE915737CFEA60E5DE990015A545C40
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b424601-f383-4c25-aba0-a7e8d0c4b99a.roa
Signing time: Sun 19 Oct 2025 00:41:28 +0000
ROA not before: Sun 19 Oct 2025 00:41:28 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:ed:ee:06:4f:e9:15:73:7c:fe:a6:0e:5d:e9:90:01:5a:54:5c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 00:41:28 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=5b472a2839a9d4f4f3b795be1e73736fdaaa29b10c7fd693f935329c8ccf7db0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:10:14:01:dd:4a:80:ad:70:b9:49:26:8a:78:
17:38:e7:22:ee:7f:24:43:2d:81:af:23:4e:0d:9d:
85:87:ce:78:5d:72:3f:f9:af:35:c8:30:db:f6:03:
62:8d:bf:fb:4a:3e:88:2c:28:8d:e2:c6:9a:a5:b8:
f3:8e:fd:e9:3f:73:7d:4c:d6:55:d0:a6:ad:09:09:
ea:32:e2:33:e2:94:b4:b5:14:4d:63:74:c8:54:df:
4f:fc:fd:78:b3:fc:13:2c:42:ed:3d:c5:41:c5:e0:
61:0f:b3:a0:b9:c3:ae:be:44:8c:a1:95:dd:32:ad:
a1:04:88:0f:b0:a0:83:c5:03:fb:e9:38:cf:45:0d:
d1:8d:a2:33:8c:47:c6:ac:fd:a5:47:64:c8:c2:ca:
48:6f:64:d6:49:24:62:be:d5:21:c6:6e:04:85:11:
f7:f6:9d:2c:ea:42:75:50:38:65:74:1f:b7:23:23:
69:d4:9e:25:bb:d5:88:7b:6c:68:90:37:10:a0:ce:
3a:34:8a:c4:30:e3:f2:0a:59:d7:f7:cf:55:fc:b6:
ab:93:3a:49:dd:35:98:a0:a6:20:4a:61:42:a7:89:
b1:55:b9:50:f6:16:13:8d:53:c4:d8:0e:b1:8c:a1:
51:07:47:b9:a7:53:a0:56:3d:e6:78:e7:40:47:a7:
91:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CF:47:72:B2:3B:CF:1F:D4:3E:C7:55:AB:85:9C:21:BC:5B:99:50
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b424601-f383-4c25-aba0-a7e8d0c4b99a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.89.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:ac:9d:7b:8a:b7:4e:e1:bd:38:2d:c7:c7:71:e3:ea:e3:09:
52:52:fe:fa:c6:cd:10:d4:3d:7f:b7:36:80:eb:6c:a9:c8:59:
cb:4f:35:21:4a:bb:3f:c3:e5:de:50:67:c0:9e:ce:88:80:90:
67:4c:3a:60:2b:27:18:27:ac:f6:6c:ba:e7:7d:b1:6b:d0:61:
76:66:07:7d:cf:c2:c3:c3:61:15:98:d2:69:03:94:0a:db:78:
c5:d1:32:23:d2:60:01:61:f1:46:97:da:c4:2e:d4:62:f5:65:
93:1a:3b:ae:ed:f7:1b:33:02:d6:06:5f:62:68:75:7f:a8:3d:
44:f8:2b:ea:95:df:70:50:b2:c6:4d:ac:8c:05:3b:cd:78:2f:
06:99:9b:40:45:b5:64:63:1a:1b:a4:11:c2:d3:44:3e:fa:c2:
a9:4a:a1:81:a7:1f:87:46:01:41:d3:35:a0:1c:5e:55:a0:ae:
5b:7f:da:f2:bd:d0:6b:1d:db:a2:f1:cb:11:b2:f3:b6:e3:41:
5c:f9:fb:08:74:30:ff:51:82:4e:88:8c:a4:96:ac:95:3b:ac:
c9:f8:f1:7e:78:6d:cb:aa:b7:a9:46:40:13:6a:70:7b:c9:0c:
50:46:4a:ee:77:de:9d:47:c6:b1:fa:68:46:c8:89:5b:08:d2:
d3:1d:7c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:48:38 2025 by rpki-client