Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1905ee46-37e7-4442-ba71-85dfbe24dfcf.roa
File: 1905ee46-37e7-4442-ba71-85dfbe24dfcf.roa (raw, json)
Hash identifier: uvyZpBaIiD6gMw6dyXRYCxViSexlJV2zXXjVyfQK7Vc=
Subject key identifier: AF:0F:87:91:A5:CF:5F:7C:78:9D:04:AC:7A:64:C8:8B:41:CA:33:B9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0E0F0DA2A84CAF3AD3DA19E27CA8B9B1434D6D43
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1905ee46-37e7-4442-ba71-85dfbe24dfcf.roa
Signing time: Sun 19 Oct 2025 01:40:58 +0000
ROA not before: Sun 19 Oct 2025 01:40:58 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:0f:0d:a2:a8:4c:af:3a:d3:da:19:e2:7c:a8:b9:b1:43:4d:6d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 01:40:58 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=010a0233f7ba1fede7ca4f865bc8fea37d0a25fc14b1348258f3eb207f741491, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:22:d4:5d:d3:22:46:91:6e:f7:b8:92:40:5d:
04:b3:ee:56:e3:d9:18:25:f0:ed:a1:fd:bb:cb:e5:
c1:6d:0e:a7:f2:9c:96:04:cf:b7:0a:52:25:9d:5c:
f0:fc:7e:d8:62:f8:6a:27:bb:08:5a:ff:bd:3a:72:
09:a9:3a:bf:4f:a1:b2:47:a8:b6:55:bc:e8:29:7d:
41:a8:40:72:c2:1e:7e:34:e6:2d:ab:0f:fd:ec:a3:
75:ec:16:4e:14:cc:cd:8c:ed:ff:1a:4d:2b:45:69:
94:2e:96:33:d7:16:e8:dc:ef:84:b2:49:c4:34:ca:
6e:8f:ba:bc:1c:68:d2:d6:f9:55:9a:fe:fc:9b:c3:
d0:65:11:45:69:24:5e:d9:0e:ef:9e:db:e7:87:5e:
e7:46:37:9f:6c:51:83:7a:30:6e:bb:3a:62:18:c6:
a7:f1:21:ad:42:f9:f7:25:dc:1c:7e:a7:6e:fa:1c:
6d:50:79:c5:0e:8d:77:88:aa:cc:8d:a9:6d:d6:e5:
45:a4:fe:e3:f1:37:6d:fd:b0:27:2d:2b:67:98:f3:
f1:9c:b0:82:51:80:57:35:0f:73:27:8d:37:a9:74:
71:16:31:55:62:f1:64:9a:ff:f1:91:8f:09:96:31:
70:45:a5:2e:2d:1b:bb:d2:ef:d8:1f:36:25:ec:fe:
52:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0F:87:91:A5:CF:5F:7C:78:9D:04:AC:7A:64:C8:8B:41:CA:33:B9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1905ee46-37e7-4442-ba71-85dfbe24dfcf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.109.0/24
Signature Algorithm: sha256WithRSAEncryption
90:82:b8:1f:4b:64:6a:c7:7b:43:10:ca:b2:a6:40:4f:e1:e8:
22:c6:e4:8d:2f:45:12:74:e0:eb:9c:33:4b:e9:56:b7:23:9a:
d4:99:05:91:6d:72:2a:29:ee:75:d4:89:db:ca:fa:b1:be:75:
74:31:92:7f:a8:8c:57:c6:8a:cc:e5:81:e1:b9:8b:c0:8b:93:
1d:d8:d3:fa:b8:22:f2:1b:f5:d5:7d:20:d4:5e:7c:01:fd:21:
c7:7f:72:69:4d:b3:64:4a:d4:cd:76:ba:3d:a6:b4:4c:64:99:
75:3d:44:50:ef:67:aa:a7:17:30:d5:98:4c:ab:a1:ed:9f:9c:
c9:9a:ef:a1:7c:e8:8f:59:35:49:19:e8:f8:f4:e8:18:8a:6e:
78:fb:05:b5:a7:fa:b6:a2:37:44:f0:fd:34:bf:19:d8:7c:d1:
dd:8a:1e:61:b5:a9:79:80:ea:28:1e:b0:6a:fa:1f:82:bb:87:
13:ec:d5:88:0f:f3:b2:15:71:88:ce:0a:43:3c:95:c0:11:2a:
9c:fb:1f:82:a4:91:e1:ed:05:c2:6d:15:49:c1:ae:d3:6a:8a:
8a:2c:6d:55:4f:d1:44:01:bd:b7:2b:da:02:bb:3a:d0:ec:e3:
bc:1c:d8:50:d0:99:b5:ea:c0:12:52:1b:17:9b:1d:83:24:fb:
c1:db:43:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:51:17 2025 by rpki-client