Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/296292bc-bfe2-47a9-bba5-4557028d2118.roa
File: 296292bc-bfe2-47a9-bba5-4557028d2118.roa (raw, json)
Hash identifier: Rr/u1Ejnx+HN9esc0KJzixzqpRgE7BQc9eXGxNNM/wQ=
Subject key identifier: 14:43:28:8E:4A:0C:ED:93:90:61:DE:AB:FF:5E:54:01:36:3A:33:FE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1CBC02B3EACE1885E131D328D09C4F88CDC1C6A0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/296292bc-bfe2-47a9-bba5-4557028d2118.roa
Signing time: Sun 19 Oct 2025 01:50:47 +0000
ROA not before: Sun 19 Oct 2025 01:50:47 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:bc:02:b3:ea:ce:18:85:e1:31:d3:28:d0:9c:4f:88:cd:c1:c6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 01:50:47 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=0336392575ce4756fdae4ba331a7364f65349bffd98f4b0d6fc732e82ca8260f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3c:06:ac:b2:43:a7:7c:02:8b:71:ef:b0:de:
04:08:bd:fe:6c:27:fa:4e:4d:c6:b8:8e:83:13:c9:
e8:f9:3c:ed:9b:ed:93:78:06:92:15:22:c5:b6:64:
48:00:c4:96:d5:47:b0:d8:aa:46:1d:56:f1:a8:6b:
70:66:a8:b5:fc:58:4a:ad:fb:54:17:be:28:21:b3:
14:2f:8f:13:e0:10:ae:78:dc:81:03:df:b9:10:9e:
57:39:56:95:b3:d6:a7:f7:f9:0b:a4:3a:ac:31:93:
a9:e8:b0:ae:61:f1:e9:02:cc:82:b9:89:d0:9f:1c:
ce:39:79:19:e4:81:bc:f1:72:22:9b:a6:0d:54:ac:
f1:83:12:c7:0d:93:3d:bc:81:ee:fa:9f:a9:53:2b:
d9:7c:2b:72:44:8a:f1:bd:fd:e5:13:ef:e4:72:1b:
77:ce:f3:59:9c:ce:6b:7e:8c:88:9e:9a:61:5b:b1:
84:40:1d:14:55:16:c6:b9:6e:31:90:e6:a7:8a:a3:
71:c1:99:ab:0b:30:5d:cd:9e:33:5e:0d:3e:f6:4c:
80:5a:14:8e:76:8e:09:68:36:a6:45:14:63:83:90:
7a:74:62:88:95:50:ef:d1:d5:ea:5c:a5:2d:66:bd:
82:1b:8f:54:45:26:1b:a0:b0:62:d0:47:cc:df:d2:
d3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:43:28:8E:4A:0C:ED:93:90:61:DE:AB:FF:5E:54:01:36:3A:33:FE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/296292bc-bfe2-47a9-bba5-4557028d2118.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.186.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:fa:86:06:2b:0d:56:82:6e:8f:5a:97:2f:28:03:dc:c4:1b:
32:41:de:62:35:b4:b5:3f:e8:65:de:b7:d8:67:28:ca:c6:b4:
e7:9c:80:e9:3d:d8:60:ce:70:47:59:34:09:d7:1a:d3:ba:7e:
be:84:df:c1:7d:31:2c:83:34:ff:e7:db:9b:e4:32:c5:71:08:
c0:51:78:a3:ca:a3:0d:01:8c:9d:bf:a5:00:b8:15:0f:fa:c4:
d5:22:e3:e5:89:2c:53:73:3e:bb:4f:53:f7:7d:9b:10:89:2e:
ef:5c:ba:a5:60:35:33:b8:63:ef:bf:c8:14:fe:73:3c:f6:79:
02:43:3a:d4:9e:8a:d4:0c:f5:6a:a3:fb:d3:73:95:5b:cd:4d:
7c:37:d5:fd:1b:57:45:f0:a8:d9:c5:e2:ae:c1:1a:de:ef:31:
cc:0c:52:a2:10:61:63:0f:e2:08:76:1c:45:26:3a:22:e9:ee:
ed:db:7e:49:46:ab:81:b9:1f:1b:4b:e4:27:1a:60:46:9c:75:
50:ec:ce:4b:55:db:62:2f:c6:b4:9e:a8:04:57:50:8a:7c:21:
96:d7:70:36:bd:e2:0b:6d:e8:84:ee:87:54:9f:8a:9c:dc:83:
f6:2f:8d:f6:73:5b:10:9f:23:ef:9e:c0:30:23:27:ab:59:99:
ba:b9:54:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:50:52 2025 by rpki-client