Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bded4df-b371-4fc0-ac34-1637fb812155.roa
File: 2bded4df-b371-4fc0-ac34-1637fb812155.roa (raw, json)
Hash identifier: J+Kqwk+OrYmdovJbAERDBXCU9CjF3WklJGbYiagvcbI=
Subject key identifier: 59:DA:33:C1:3C:E9:5B:E2:5C:DA:C0:AF:EE:E2:D4:C2:5D:85:B8:57
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5CE2C66CB08439869CBA27D5FE5CD33B31C09611
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bded4df-b371-4fc0-ac34-1637fb812155.roa
Signing time: Sun 19 Oct 2025 01:50:06 +0000
ROA not before: Sun 19 Oct 2025 01:50:06 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:e2:c6:6c:b0:84:39:86:9c:ba:27:d5:fe:5c:d3:3b:31:c0:96:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 01:50:06 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=bb04bfc706d929ed5d8b2c75fb69e3f21c1e987d73f8c6557aeef8aca9bc9dff, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:33:ad:c7:98:a9:80:08:d5:67:cc:96:5e:5e:
73:0b:f4:26:73:cd:1d:7b:45:7d:88:85:ee:a5:e2:
02:81:e8:30:07:4c:e5:85:ae:41:33:b6:6f:aa:f6:
45:f3:e0:37:3f:47:7e:01:cd:a7:6f:51:2f:44:90:
79:f3:71:dc:2e:1b:d4:09:38:ad:1e:58:20:e9:07:
c4:0b:1b:30:4f:6c:3c:d8:e6:21:04:85:a7:00:71:
92:72:d8:cc:db:94:1a:02:3e:d8:dd:4d:d3:b0:90:
bc:96:65:3c:41:79:63:c0:16:9c:f9:bd:e7:97:e3:
0d:96:d6:de:8e:cb:8a:36:f5:37:c9:7b:ad:ea:ca:
a4:ac:8d:ba:51:c2:cf:e3:00:30:7c:d7:f1:ce:29:
82:d0:fc:33:c3:36:0c:82:99:0c:20:97:55:61:51:
ae:87:0e:12:81:1f:99:b8:a7:5d:8d:07:4c:f0:bf:
3f:97:58:4a:ce:94:e8:b4:9a:2b:0b:7f:d1:ed:55:
aa:24:fa:4e:c9:64:33:b5:ef:5d:a8:26:fd:db:20:
38:cf:92:2f:87:0f:e2:ae:da:31:02:48:a9:51:29:
f3:1a:ce:e3:28:e3:13:64:ed:08:3a:25:12:e2:75:
b9:cc:53:59:f1:52:f6:e7:84:22:73:ea:a6:a8:6f:
c8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DA:33:C1:3C:E9:5B:E2:5C:DA:C0:AF:EE:E2:D4:C2:5D:85:B8:57
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bded4df-b371-4fc0-ac34-1637fb812155.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.46.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:c4:a5:d6:ed:5c:c0:91:5e:d8:de:23:82:ce:0c:c8:ef:70:
93:7c:2c:c7:dc:21:fa:e0:33:9a:fb:df:21:b8:02:32:8e:02:
33:28:cc:6c:ad:30:a9:ca:97:28:71:46:fd:99:07:63:db:3e:
48:66:0a:bf:e0:11:67:b2:c6:b7:d8:2d:a9:5b:4e:e6:f2:13:
c6:47:a5:ef:53:ee:1b:9d:6d:fa:f8:d3:bc:ba:63:8b:79:59:
65:60:0c:43:15:3c:10:18:d7:3f:11:42:f6:28:d3:38:9b:e1:
22:ca:86:9e:b5:78:97:d0:84:57:86:50:d4:e3:c2:ed:d8:ba:
47:68:b1:29:e0:d5:17:ad:69:da:62:4a:eb:67:ee:dc:b4:cc:
15:a8:8e:72:d3:6b:11:d1:9b:6c:bd:01:31:ff:37:cb:9a:ca:
30:25:99:e2:c8:e8:e1:98:f7:b7:b9:b2:ad:81:c9:9a:2d:7c:
41:3c:b8:6b:93:52:95:31:a8:c8:06:b8:59:88:a6:7a:76:3d:
5e:e4:32:7b:a4:17:bb:2a:0c:ac:25:91:a3:7b:08:df:c7:4c:
a1:03:63:f9:21:96:74:fa:6f:2a:dc:27:fb:bc:4d:14:24:3f:
ec:b8:3f:49:bf:4f:3d:31:15:60:22:f1:44:79:fc:6a:89:93:
eb:43:62:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:17 2025 by rpki-client