Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41101ebb-db2c-43aa-b675-a6aa1dfbb520.roa
File: 41101ebb-db2c-43aa-b675-a6aa1dfbb520.roa (raw, json)
Hash identifier: q+bfoKhO4SdVjW8qMZcz39GHHPO3+XVWqTmF0kWPH9Q=
Subject key identifier: B2:A2:6C:25:75:32:B3:91:A5:DE:29:57:C1:69:6C:A6:C5:69:B8:C0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 420D385904D04558758CE6974AE04437145D3D71
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41101ebb-db2c-43aa-b675-a6aa1dfbb520.roa
Signing time: Sun 19 Oct 2025 02:11:43 +0000
ROA not before: Sun 19 Oct 2025 02:11:43 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:0d:38:59:04:d0:45:58:75:8c:e6:97:4a:e0:44:37:14:5d:3d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 02:11:43 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=38534d0a84d93ccdf61b5cc75e79b0f4ddf68feaee8f30363ab9ac982d19ca84, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:07:c1:9f:ca:61:f7:0a:48:dc:8f:62:d2:b3:
7f:6f:03:88:9e:f9:c4:48:9b:e1:d8:e4:9b:7a:7e:
e3:c8:41:65:d6:f3:e8:1d:ef:af:96:71:64:0a:fc:
6b:b7:c4:80:cd:61:07:dd:a4:fc:56:e0:94:8f:0f:
ba:52:59:65:43:65:5a:20:2f:fd:3b:be:c8:bd:9a:
b4:83:21:1e:98:40:2e:41:69:e7:49:f0:c2:e2:4c:
0a:b5:65:d3:93:5e:d7:6c:56:19:8b:54:1e:a9:ca:
83:80:08:ee:e7:83:c0:44:2a:cf:a5:f4:64:04:1a:
dc:63:0b:23:4c:7f:64:c9:9a:d5:0a:79:51:a2:e8:
98:f6:5a:72:86:ba:bf:40:d3:d3:a7:4a:56:4f:ba:
75:41:5e:0b:0d:20:a1:2f:45:80:a8:6b:ab:84:2e:
4f:69:a0:7f:8f:ca:f0:20:78:29:7c:a3:d7:40:9e:
9a:00:d3:92:e1:7e:7c:1f:34:be:6f:39:77:ff:6b:
1f:71:8a:e9:61:c0:4c:35:9c:ae:0d:30:18:f2:c5:
15:57:88:5e:44:16:78:19:26:59:ff:2c:72:e7:81:
be:22:7c:7c:cd:d1:e3:1a:5d:67:3a:8e:8c:b2:b5:
40:81:5d:a0:d1:59:d5:17:10:0d:50:b2:75:19:ec:
94:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A2:6C:25:75:32:B3:91:A5:DE:29:57:C1:69:6C:A6:C5:69:B8:C0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41101ebb-db2c-43aa-b675-a6aa1dfbb520.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.141.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:1a:79:31:d3:74:1a:92:7d:34:db:9f:2a:b4:b9:1f:30:91:
a8:27:4d:ec:bb:83:b2:ec:50:92:c7:e9:a8:46:24:84:4d:2e:
b5:55:d2:0d:8d:f7:a7:c3:02:f7:65:09:10:f3:f4:c1:27:3d:
e5:e7:83:8f:58:8f:0b:33:5c:a8:0c:b1:c3:7a:05:68:e8:46:
19:ac:03:d7:b6:f7:e3:7e:6d:f8:e9:8e:d4:15:b2:dc:18:50:
29:b5:41:c8:81:d1:5a:6a:ea:c2:1c:a7:50:2d:7d:bf:df:41:
50:fd:50:63:82:ed:b1:3b:44:9e:3b:ea:0c:5a:db:42:ea:e8:
b0:88:f3:43:a4:a4:93:78:fc:df:2e:ca:3c:34:1e:c5:d5:cf:
cf:0f:16:5e:5b:2d:43:29:db:8e:33:40:7a:7f:7b:6c:a9:4c:
56:75:a0:5e:94:22:1c:66:f5:8c:4d:a9:af:b8:6a:1b:87:79:
9d:31:8b:67:62:57:38:e7:96:ef:dd:83:a8:dc:2b:8b:da:6e:
dc:83:6b:c8:6b:d5:6e:77:33:d0:83:9b:f8:3c:48:cc:94:e6:
1a:d1:25:8d:74:55:9e:27:de:e7:b3:c6:23:b8:21:73:b6:fd:
1f:e6:8a:2b:95:66:56:bf:a0:9a:b2:02:bb:65:b7:61:ec:6d:
3e:a7:89:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:50:12 2025 by rpki-client