Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1397974f-5124-4dcc-a398-e91ca118f898.roa
File: 1397974f-5124-4dcc-a398-e91ca118f898.roa (raw, json)
Hash identifier: BqcgmnAlQmp1YPsordEEwyJ+x4S3SaKzWwqjjhCAEKI=
Subject key identifier: B1:87:C4:C9:38:1F:AA:2F:06:4F:AA:2B:E5:3B:23:10:0C:E6:5F:96
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2FF72B7C516BE1FD6416534936435B0F026AE032
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1397974f-5124-4dcc-a398-e91ca118f898.roa
Signing time: Sun 19 Oct 2025 01:30:12 +0000
ROA not before: Sun 19 Oct 2025 01:30:12 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:f7:2b:7c:51:6b:e1:fd:64:16:53:49:36:43:5b:0f:02:6a:e0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 01:30:12 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=8aaeea20b4d14d62a6de6e7ef0c9a024ea5b09d07333dda9be9c12b6af2562f8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4e:3c:35:9a:af:b1:39:27:d6:28:31:2d:8b:
cf:05:fa:31:31:a9:20:c7:1d:a3:28:2e:78:c8:3d:
59:96:72:27:05:37:17:04:56:3b:9c:08:af:ff:8e:
b2:9a:87:86:0f:3d:b9:6f:0f:c7:63:41:bc:ed:8d:
4d:aa:4d:17:11:f0:8a:2a:d0:0c:3e:3e:0d:ce:41:
a6:d8:e6:6c:e9:cc:84:da:2d:29:88:c5:8f:9d:3b:
b7:d7:06:1f:f5:0c:5c:d6:77:47:02:da:80:ad:85:
35:51:c8:55:69:f6:61:14:cf:cb:e4:b2:41:c9:09:
6e:52:83:c8:4b:bc:ca:f4:cd:fa:45:c3:3f:c5:bb:
e6:77:aa:3b:0b:dd:f3:ca:e0:65:b3:e8:34:f1:58:
f3:13:4b:2d:81:76:20:76:7d:40:c1:e0:20:77:9e:
9d:b8:2d:06:a0:db:88:51:07:b3:45:c9:d3:f1:dd:
25:38:31:37:c0:43:16:37:d6:4f:59:18:2b:9c:78:
3b:27:ee:29:f0:b7:99:d0:2c:b8:54:33:5d:38:b6:
d0:7e:53:be:cf:80:63:e4:b5:fe:10:25:83:98:df:
d7:8e:51:05:ba:95:06:77:24:4f:85:dd:da:a6:5d:
c8:1d:9b:e9:f4:50:ad:c3:80:17:dc:49:6a:45:db:
15:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:87:C4:C9:38:1F:AA:2F:06:4F:AA:2B:E5:3B:23:10:0C:E6:5F:96
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1397974f-5124-4dcc-a398-e91ca118f898.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.214.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:c4:2e:15:2f:f8:74:03:fa:22:35:7b:5e:4e:eb:23:d3:46:
28:f9:57:fb:87:b3:fd:ef:c3:a4:75:ba:e6:88:1b:a1:9f:54:
76:21:f5:3a:82:65:88:a7:72:d8:19:38:5c:57:26:5a:ac:c0:
33:d0:56:a0:33:e7:6e:9b:c9:c3:e6:50:62:4d:17:79:a4:d6:
dc:a3:c3:49:72:f8:ec:cc:0c:91:53:c1:81:6e:7f:fc:44:4f:
0d:d7:11:ea:2e:03:99:1b:b4:a7:75:21:73:54:3a:d1:7a:7d:
91:e6:db:19:8b:20:74:05:30:4a:97:bf:0f:b9:81:75:bc:f9:
e3:a9:43:ea:98:a7:f5:63:bc:8a:7c:1c:5f:b8:9d:cd:cc:86:
aa:63:eb:10:92:ee:37:9b:3d:08:f6:8f:b6:ef:05:c0:1b:8a:
71:67:cc:8b:f8:bb:f4:04:7a:4a:f5:ec:cf:31:3d:bd:3b:31:
a2:4f:5b:98:26:f1:fe:12:05:f1:ee:83:19:d0:89:f2:80:0e:
5d:87:6d:2b:09:ec:7e:5e:41:67:d1:ce:61:11:9d:8f:c0:ef:
e8:9f:12:69:9d:0c:c3:65:08:96:d0:60:54:5a:39:1f:58:e2:
6b:b8:06:01:6b:1d:13:43:50:4b:ae:4f:4a:2f:ad:9a:ed:28:
1d:2a:9a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:19:09 2025 by rpki-client