Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ae44f05-713d-46e1-a215-5bb61e12b3bc.roa
File: 4ae44f05-713d-46e1-a215-5bb61e12b3bc.roa (raw, json)
Hash identifier: yB0jkSXp9mwLbXM1z3Xhkr7aZ5OfuAhf5JmI0R7/6F4=
Subject key identifier: B2:D0:DF:11:68:6D:71:48:E3:F1:A3:BE:74:BD:77:E9:AD:18:C8:88
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 46AC3DB8AF090EDDA8D5AF7288C4E88FB0CEEF3C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ae44f05-713d-46e1-a215-5bb61e12b3bc.roa
Signing time: Sun 19 Oct 2025 02:31:57 +0000
ROA not before: Sun 19 Oct 2025 02:31:57 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:ac:3d:b8:af:09:0e:dd:a8:d5:af:72:88:c4:e8:8f:b0:ce:ef:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 02:31:57 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=d6d4f9d175d952126713080090e7e45d63d703ebfa8d69ffde47f457e51f7bc1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:a7:e8:87:3a:3c:82:83:59:87:82:ef:d3:54:
45:82:95:b9:c4:d7:31:3f:47:95:0f:b1:6a:11:36:
d7:a9:bd:fb:40:90:76:c0:49:9d:de:21:c1:b2:4d:
eb:3e:ea:d1:11:fd:a0:c8:e0:7e:da:58:6b:e0:e9:
37:87:ab:79:ee:57:68:1b:b3:06:53:b3:a7:f4:05:
de:c8:90:73:bc:dd:52:b4:43:03:f4:23:e5:03:b4:
fa:75:67:bf:6d:61:4d:49:0a:88:39:6c:79:77:50:
c9:70:9e:69:8c:2a:fc:73:4e:e5:b4:6b:1e:c9:83:
6f:85:68:7e:f8:37:ea:35:e4:bb:89:56:91:b3:9d:
5b:d4:23:e5:85:a6:c1:cc:a9:1d:92:89:64:6a:63:
39:a3:5e:17:23:11:4f:31:ab:21:6b:77:ba:88:59:
d6:31:d8:93:dd:55:cb:14:65:37:54:ab:e4:72:06:
cd:f1:c7:80:89:68:df:65:8b:8b:fb:10:a8:a8:b8:
8f:d0:f1:3f:90:80:fb:ad:5b:cc:d9:b8:69:75:70:
e7:20:60:65:d4:bc:54:9e:e7:f4:51:bf:01:42:4d:
d5:67:64:a4:d4:44:34:03:9d:8f:59:d2:05:92:f6:
1e:f2:89:38:9e:39:37:8a:57:bb:39:62:89:7e:f5:
43:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D0:DF:11:68:6D:71:48:E3:F1:A3:BE:74:BD:77:E9:AD:18:C8:88
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ae44f05-713d-46e1-a215-5bb61e12b3bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.48.0/24
Signature Algorithm: sha256WithRSAEncryption
06:18:35:ae:5a:8c:cf:77:e9:f6:1f:77:6c:e9:6b:6f:7c:94:
9a:62:a1:59:e5:4d:c9:07:e6:83:d2:5a:de:1e:da:6a:b2:49:
14:74:9d:99:a6:e5:c6:65:90:0c:9d:fb:c0:89:1b:de:76:98:
30:ad:0f:76:9b:c8:c9:7b:df:83:6f:38:59:b0:a6:1e:3e:8b:
5b:41:41:8c:ab:86:ba:ed:96:d3:59:58:a8:d5:4c:14:b1:01:
56:5e:70:ed:78:e0:16:40:4b:b6:49:e0:55:f8:97:e6:14:9b:
b3:f6:d9:37:3c:d5:1d:db:d5:58:a7:f5:33:a2:12:8b:fa:5e:
bf:1d:62:27:35:1b:f9:c4:2f:7b:46:a8:ff:67:23:8c:d8:6b:
6b:d4:49:c9:52:78:1c:71:e5:61:10:d6:35:27:d8:08:56:c6:
22:81:cd:57:ad:a5:ed:0f:80:77:2a:4e:a6:73:c4:6b:12:05:
8b:ad:ee:4e:89:bf:b7:3f:be:88:4e:d0:b5:1e:83:af:22:4d:
1f:ef:36:e6:9c:33:ab:c5:cc:4a:55:c6:7b:b4:ef:4f:70:ce:
f4:d2:18:7b:a3:35:bc:82:cf:7e:85:20:ab:89:a5:ec:a7:e8:
b2:63:fe:a2:61:cb:81:25:c1:b0:f4:54:6a:ca:af:a5:4c:4f:
06:81:2a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:37 2025 by rpki-client