Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46860230-673d-4aae-9353-69d58086e72c.roa
File: 46860230-673d-4aae-9353-69d58086e72c.roa (raw, json)
Hash identifier: z9o3sOpXK3nMDFD9KQftsgXfYJVcuL88JbUcVEkDukw=
Subject key identifier: 8C:04:0F:B7:6A:29:F5:53:FF:47:FA:F1:B7:A3:93:FE:A5:FA:02:59
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 35BF242E34CEFED95E0E68EB73CD71E64C685373
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46860230-673d-4aae-9353-69d58086e72c.roa
Signing time: Sun 19 Oct 2025 01:00:59 +0000
ROA not before: Sun 19 Oct 2025 01:00:59 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:bf:24:2e:34:ce:fe:d9:5e:0e:68:eb:73:cd:71:e6:4c:68:53:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 01:00:59 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=5d5d252af07833c4bef2b6d43aede2f0d349159d2c632bebc80d6d6cc9d9b1ac, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2d:05:07:68:9d:d9:7c:b1:09:ca:83:d0:11:
d3:66:0e:ef:63:fd:6a:eb:74:79:98:d4:9a:44:64:
4e:6e:a4:21:d4:5d:42:e4:9e:8d:27:44:c2:4e:4d:
4d:d3:e1:f2:52:09:72:07:c5:91:7b:10:a5:3c:f2:
37:3e:47:cd:b2:39:a6:b2:26:fc:25:73:ed:8e:72:
c2:92:3a:7a:cc:31:47:77:fb:f5:9d:21:0e:1e:8f:
6e:74:cb:01:4e:eb:8c:80:13:83:c0:55:7c:7b:67:
d4:04:b3:b0:ed:6a:29:5a:3f:c0:af:ac:ad:0d:7f:
67:ca:24:b9:fc:73:44:d2:7e:b2:48:33:77:d1:b3:
97:f3:ed:37:63:c5:e8:21:e7:da:49:30:63:c7:e8:
4a:2b:6e:a3:fc:07:91:e5:e3:33:6f:1e:60:f8:61:
fc:bb:8c:16:4f:df:b4:7f:9b:67:ab:cd:f6:08:20:
db:b7:ef:74:e2:fc:f4:20:ba:b6:dc:ae:88:29:6e:
da:9b:8e:75:b5:0d:f0:f2:ea:af:45:19:b1:82:59:
17:ae:1a:5a:30:d1:1e:f0:be:24:97:7d:4a:eb:8f:
97:08:1d:f7:fa:cf:e1:65:c7:0e:b9:8a:32:74:88:
a5:03:fa:49:f7:bc:19:8b:00:52:82:59:c6:e9:87:
f7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:04:0F:B7:6A:29:F5:53:FF:47:FA:F1:B7:A3:93:FE:A5:FA:02:59
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46860230-673d-4aae-9353-69d58086e72c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.230.0/24
Signature Algorithm: sha256WithRSAEncryption
40:91:0e:b6:1e:a4:98:0b:3f:5f:e0:07:3b:4e:58:2e:76:84:
61:60:69:0e:4d:20:f8:e1:bf:9c:bb:e9:f7:3f:31:3e:47:f5:
32:1f:11:b1:80:6b:72:2a:16:65:c9:23:5b:1f:82:8b:cf:b8:
e1:9b:1d:18:68:fd:df:cb:cc:1d:f1:02:83:47:4e:20:68:d3:
96:c7:a6:4e:06:cb:1d:b6:54:40:27:6f:d8:8e:36:e7:2d:64:
39:ba:05:e5:0c:f1:53:d3:8c:69:4f:6b:2d:72:0b:4b:f5:77:
b9:37:f4:1a:5d:50:a0:81:e8:ae:67:9e:6c:85:6b:26:2b:65:
0d:b5:f8:8d:37:67:14:19:00:9a:d8:4f:95:20:a0:b6:18:90:
f9:89:e3:20:bd:c1:e3:14:66:6b:f6:59:70:9f:a3:35:12:e9:
b9:1b:8e:1b:2a:98:7b:52:c8:50:21:11:d3:b0:af:4e:52:ce:
15:b9:e3:98:c1:19:9d:c7:e3:51:bc:6c:28:6d:8f:d1:e3:99:
e4:32:04:87:99:7d:93:1e:3b:9e:c7:d6:44:46:a4:10:9d:f8:
9b:32:a3:ce:25:e0:60:76:22:2f:35:42:ca:2d:d3:dd:06:ec:
f7:b0:d5:1e:a1:2a:a1:17:cc:c1:c7:e5:85:c7:91:75:78:fb:
fd:33:71:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:13:48 2025 by rpki-client