Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d3d0bac-3d1a-4a82-aca8-f5cd4dcf1976.roa
File: 4d3d0bac-3d1a-4a82-aca8-f5cd4dcf1976.roa (raw, json)
Hash identifier: KH8EZ9Zbnok0uyM+bZb7RtKk9LaK3STQqZGRopJXui8=
Subject key identifier: 24:AE:56:3F:66:0D:EC:D5:A7:55:74:DE:10:A7:EE:AB:31:AE:17:66
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 20A63ED1B0D0C751B513F46D8D5DB9BBCB84E4D3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d3d0bac-3d1a-4a82-aca8-f5cd4dcf1976.roa
Signing time: Sun 19 Oct 2025 02:42:09 +0000
ROA not before: Sun 19 Oct 2025 02:42:09 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:a6:3e:d1:b0:d0:c7:51:b5:13:f4:6d:8d:5d:b9:bb:cb:84:e4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 02:42:09 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=53721729b0c3833d860328a8524254a4c20fd0345b19d92a1976da288c605488, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:46:d4:f2:3f:03:65:0d:df:ba:54:1b:bc:90:
4e:b4:04:cd:33:55:79:10:f1:ee:30:69:30:6a:ca:
95:fc:60:81:5d:09:2d:41:91:dc:73:f0:f1:4d:18:
60:85:b8:e6:18:c5:58:12:0d:5a:75:2a:29:57:83:
8e:e0:6a:af:f0:cc:76:e4:fe:52:96:74:7c:b4:a0:
02:32:a1:22:00:15:46:23:93:71:d7:8f:13:75:d6:
18:eb:1f:b6:03:d4:a8:fd:75:27:8b:05:bf:8f:ae:
cc:60:d3:85:c1:f9:90:3a:f2:73:0f:a2:64:b3:20:
9e:bf:5a:57:0a:d6:3a:7b:d7:8b:10:f9:da:86:57:
b0:c3:6c:9d:d6:ae:0f:00:b7:07:82:27:5d:79:bc:
0e:be:eb:4e:a4:9e:ba:d3:a4:e6:73:e7:8f:2e:ae:
88:0d:5f:6e:7e:b3:97:e6:17:13:46:6a:e5:a0:24:
aa:07:5f:66:40:74:82:c9:dc:d7:1d:0f:3e:73:66:
77:99:9d:dd:1d:dc:b3:9e:29:99:70:12:a7:20:ef:
7b:fb:39:98:fd:e3:eb:9a:7e:fa:e8:f4:14:cd:a8:
fb:56:0d:4e:80:86:02:20:7d:cb:ac:a8:c6:38:e3:
4e:0b:f1:1f:6c:d3:68:65:e5:bc:0d:51:4f:73:47:
11:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AE:56:3F:66:0D:EC:D5:A7:55:74:DE:10:A7:EE:AB:31:AE:17:66
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d3d0bac-3d1a-4a82-aca8-f5cd4dcf1976.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.154.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:01:0f:05:bf:97:1a:19:5e:06:8a:20:71:7a:89:d2:86:12:
10:9d:5b:3f:6a:43:af:16:00:ee:56:83:97:78:06:68:65:4c:
1a:f4:b7:82:66:fd:be:72:77:4f:bd:07:85:9f:2a:aa:98:c3:
f8:5f:a9:a7:dc:bf:cc:76:1f:84:fb:00:2a:b8:9c:53:10:3a:
2a:2a:c4:33:96:2c:e4:ab:70:cc:fb:e7:b8:e8:95:8c:97:ea:
18:ae:33:00:8a:db:d8:80:33:7a:f0:b5:d7:b1:52:d5:59:cc:
03:c3:af:4a:f4:5a:56:a5:df:32:d2:a9:2b:8b:0b:ab:5b:7c:
ff:09:22:84:95:d8:dc:90:7f:0f:5d:bf:b9:dc:ac:b9:cb:8e:
f5:63:b5:49:dd:32:fd:07:24:07:89:10:6d:c8:94:60:35:10:
10:45:59:49:cb:85:64:c4:ac:a8:44:bd:ae:62:6a:1f:c7:cc:
1c:a4:27:a4:f6:7a:ae:c4:fb:97:60:4b:01:c2:19:35:4e:ca:
16:a1:9a:f5:b3:45:8e:6a:2c:c6:e9:73:34:49:27:9b:26:41:
da:55:96:d0:18:52:f9:c2:06:14:35:05:03:91:fe:04:9a:7c:
f1:70:0f:0e:54:16:50:59:35:e2:65:68:27:19:0c:b1:27:52:
e9:99:a3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:46:46 2025 by rpki-client