Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ce3da48-1512-4e18-85fa-0d67b55396da.roa
File: 0ce3da48-1512-4e18-85fa-0d67b55396da.roa (raw, json)
Hash identifier: lhXbNE3+gb9qwT6D5zkXxObleSvstJMEqnWzHHpXQJc=
Subject key identifier: E0:C2:F3:13:45:BC:7D:1E:1D:74:A3:F8:60:D1:80:C5:46:6B:A2:95
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 36E72B6653D1ECDEB63EF3637D679BEDF0A450EE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ce3da48-1512-4e18-85fa-0d67b55396da.roa
Signing time: Sun 19 Oct 2025 00:40:11 +0000
ROA not before: Sun 19 Oct 2025 00:40:11 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:e7:2b:66:53:d1:ec:de:b6:3e:f3:63:7d:67:9b:ed:f0:a4:50:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 00:40:11 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=786c0b1a5184814e8d14c58bbeff70e166ac8f090a614aa312db79ca22120ccb, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1a:38:49:f7:85:d0:ab:3e:f0:2b:8e:25:17:
24:8a:03:cf:c1:6b:8f:fc:a6:9d:59:86:cc:d4:70:
7b:fb:aa:6a:6f:c6:06:04:a1:f5:cc:24:b6:05:b5:
65:9a:62:08:37:44:09:13:11:5c:84:61:1b:4a:10:
19:7b:22:8c:a4:88:ab:f7:dc:fc:6a:74:f3:8a:2f:
af:d9:9a:2c:a8:14:3d:cf:1a:2b:fc:35:6f:24:a9:
ee:86:42:5b:80:52:4f:db:32:9e:bc:96:0e:4f:c9:
06:9a:64:f3:f1:20:88:95:da:4c:bc:66:d3:3a:57:
9a:76:9a:7a:0f:36:d0:20:f7:e9:94:d0:7c:7e:87:
fa:eb:47:41:82:c7:65:ac:5d:06:6f:7d:d2:da:d5:
0c:8e:82:4b:3b:b0:64:bb:32:8a:5d:84:a9:d6:88:
b1:74:d0:24:2a:ae:7c:06:fd:38:10:f4:bd:39:61:
17:dd:55:4d:53:cf:46:9f:08:93:0b:be:ef:45:41:
aa:78:01:f9:9b:da:12:85:b9:01:cb:5d:a6:a6:38:
94:0f:63:52:7f:59:82:41:31:88:e2:1c:5d:4d:97:
c9:8f:d3:da:59:cc:f4:a3:ca:bf:da:ba:76:59:39:
7d:c8:0e:ff:6a:34:11:89:b5:1c:cb:9a:0d:95:7e:
c0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C2:F3:13:45:BC:7D:1E:1D:74:A3:F8:60:D1:80:C5:46:6B:A2:95
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ce3da48-1512-4e18-85fa-0d67b55396da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.155.0/24
Signature Algorithm: sha256WithRSAEncryption
46:a4:42:45:96:d4:e8:1b:d2:72:3b:7d:b6:d8:e6:3f:ef:e4:
aa:83:3b:bb:fb:5a:9c:1a:b5:2d:35:9a:19:42:83:20:86:c7:
f8:d4:a1:c3:54:c2:9b:93:6a:51:6c:15:9c:c7:5d:f8:68:09:
3c:33:11:f3:39:7c:74:12:cc:a0:f5:62:66:55:7d:da:69:30:
a0:32:f4:15:99:ba:63:04:e7:74:fc:ac:bf:0b:90:17:8c:f4:
96:54:84:f2:50:94:fb:e9:f8:81:16:b0:0f:0c:c3:4d:95:73:
a5:7c:07:b0:45:f1:fb:3d:00:e8:9e:39:c3:d8:66:7b:92:5c:
cd:f3:8d:69:66:14:ef:ed:83:51:f3:2f:2d:ca:81:9a:b1:c9:
4e:9c:c3:20:ea:71:5f:cc:10:f3:9f:52:2e:40:20:14:29:4d:
d2:6a:6b:9c:b4:72:ff:7a:92:8f:ca:66:2d:b8:b4:f5:3c:b1:
05:c3:8c:01:95:c4:41:40:71:a7:9c:c6:f3:4b:c4:1c:c4:a9:
d2:60:a7:af:bc:73:b6:e7:1f:c3:bf:7d:c7:cc:6e:9f:ef:cb:
f8:3a:b1:c6:1d:92:05:c7:2c:39:dd:bf:87:ce:05:0b:f8:c5:
60:57:e3:8a:c5:2c:61:03:23:78:c1:9c:4b:ff:e5:a4:33:a6:
04:5d:a4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:03:25 2025 by rpki-client