Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1caa8bee-0062-4cad-aeda-f23477f7fea6.roa
File: 1caa8bee-0062-4cad-aeda-f23477f7fea6.roa (raw, json)
Hash identifier: j019Bl7dIrHO2oR9f4YVVnkdHWxbRm9eBDirKROIhNs=
Subject key identifier: 6B:06:8B:2A:2F:05:F0:C9:A0:BA:93:1F:93:E6:E6:10:5B:75:6F:16
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6CF4583A028237106FA4206C213239DF585006C8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1caa8bee-0062-4cad-aeda-f23477f7fea6.roa
Signing time: Sun 19 Oct 2025 02:01:35 +0000
ROA not before: Sun 19 Oct 2025 02:01:35 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:f4:58:3a:02:82:37:10:6f:a4:20:6c:21:32:39:df:58:50:06:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 02:01:35 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=22ff92da462d89d63c2d15ad37f34d7e28069d25a9d4f3c8cbbd1242068b127d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b1:ae:78:6b:7d:61:79:60:1e:35:8c:11:52:
af:60:84:14:ea:41:c5:c0:d1:36:e9:d7:bf:09:e9:
c0:8a:fa:da:32:d1:0e:77:8f:ab:83:9b:02:68:70:
ec:d9:ec:44:b8:fe:a0:21:23:71:2e:25:37:5a:fc:
a6:3d:b5:17:4b:2f:9d:d0:24:f2:2b:54:4c:cb:54:
ce:1c:5a:72:23:00:9b:1a:56:39:bf:af:f2:6d:38:
58:56:e3:ea:2d:c4:55:e0:f1:dc:cd:eb:9a:b5:98:
a4:66:60:0a:33:2f:30:3d:72:f0:f6:da:c8:68:2f:
4d:8e:02:56:83:cd:fc:15:a0:a9:2d:23:76:9b:8f:
3e:03:7b:c8:01:a5:b1:58:7a:2c:78:c1:e9:54:73:
33:19:a4:da:21:dc:74:02:8a:21:bd:88:bb:48:c2:
ec:e0:e7:18:81:61:b7:fc:de:4d:b8:5d:ee:16:5a:
13:99:f2:9e:7d:2e:32:09:7d:89:24:84:d2:52:0c:
07:2d:c2:c0:48:d2:b0:ec:a1:c7:30:31:5b:f6:16:
33:ee:2f:a9:69:c8:df:a2:5d:ca:c8:de:39:b7:08:
90:b5:8e:56:34:be:15:f7:d6:03:4e:08:5d:18:cf:
0f:c5:08:fe:7d:e9:19:75:f2:76:74:8d:f5:4f:f8:
68:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:06:8B:2A:2F:05:F0:C9:A0:BA:93:1F:93:E6:E6:10:5B:75:6F:16
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1caa8bee-0062-4cad-aeda-f23477f7fea6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.226.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:49:23:7a:c2:5a:94:46:a3:95:35:9c:4a:b6:a8:a9:be:84:
9b:89:c0:1c:07:a1:3b:03:e3:db:88:a8:02:8a:ad:cd:76:67:
73:5d:51:4a:b9:d2:d3:ea:60:21:07:31:1c:05:00:66:36:51:
7a:b7:83:1d:c2:1a:96:e7:11:f2:33:4d:cd:df:05:67:d1:70:
4f:57:1f:6c:47:72:cc:8f:34:7a:6f:e1:11:39:33:7f:2b:19:
d0:f3:e5:b1:44:d1:ce:e0:b7:eb:1a:97:bf:76:4f:cd:04:f5:
66:9c:65:e0:77:94:4b:0a:60:87:4d:3f:ce:2e:dc:c4:0e:41:
5b:47:f0:26:76:ce:e6:77:20:7b:93:1e:77:94:43:63:06:d9:
11:04:ba:b1:f8:5c:d0:3a:0a:88:28:82:f8:33:1c:32:82:a5:
a1:a7:6b:b6:11:07:82:8b:bb:94:4d:46:98:87:6c:ea:68:e0:
6b:e8:6d:5e:21:5a:50:59:f6:33:18:89:0f:39:8b:70:ae:86:
66:8b:e7:aa:ca:d7:b2:4d:80:50:27:59:88:60:f4:13:39:ab:
0d:c9:4d:d4:28:29:5a:48:a5:b9:60:4b:51:d2:90:c1:d9:21:
8d:a5:a6:b4:12:5f:bf:77:a0:67:7d:00:f4:16:37:e5:3e:97:
9b:26:3d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:12 2025 by rpki-client