Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/553fd460-0d53-4397-bec0-fcf61b41ca82.roa
File: 553fd460-0d53-4397-bec0-fcf61b41ca82.roa (raw, json)
Hash identifier: VtjrFaoY6FlOe7l0cvNfQ7jLtLwu1pGko0Yr33YzkSo=
Subject key identifier: E6:6D:F2:C1:95:18:A0:FE:39:03:98:70:43:BC:74:2E:97:C7:30:86
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2FFFF97101FEA3395AD433F214701D55EF4D46FA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/553fd460-0d53-4397-bec0-fcf61b41ca82.roa
Signing time: Sun 19 Oct 2025 00:20:05 +0000
ROA not before: Sun 19 Oct 2025 00:20:05 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:ff:f9:71:01:fe:a3:39:5a:d4:33:f2:14:70:1d:55:ef:4d:46:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 00:20:05 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=7602b0208a381b16ef5a710ac88193a9d210fe9757cf86427ea8ed4867bfb2c4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:60:3b:87:3b:c0:28:59:ed:23:5d:1f:ed:35:
44:9c:3b:02:de:08:8c:c0:a2:b5:b0:98:6d:35:ec:
85:b2:16:28:76:83:eb:88:6f:8d:af:4a:7e:6f:f0:
21:a5:c1:40:fa:1c:11:07:53:0a:d9:1d:f9:01:f6:
fa:92:d3:4b:51:eb:8a:8d:0c:fc:14:09:2b:3f:06:
08:6f:27:ed:ca:61:c6:de:38:e9:c9:07:40:f8:e4:
08:be:f4:96:75:1c:c1:57:f5:c3:94:75:96:7f:20:
d6:fa:d4:6c:90:f8:57:ae:86:44:79:2e:3a:6f:a7:
45:a0:6a:35:f4:e2:20:94:cb:54:09:67:41:4e:b8:
7f:93:bc:70:64:12:aa:32:c3:85:26:23:eb:ec:8b:
41:bc:92:39:40:9e:7b:12:38:8b:30:08:60:a8:d8:
cd:bb:95:2a:85:bc:c8:88:83:bb:71:8a:03:59:70:
4a:68:9e:72:98:74:34:2a:4f:a8:a8:38:1d:1e:4d:
ab:e8:64:e0:ff:90:78:8a:c2:b8:5e:44:48:49:fe:
e7:c4:98:71:d4:04:58:10:09:9c:43:3c:87:1b:3e:
f9:34:14:a5:f2:e1:ba:5f:38:f8:dd:3e:05:1a:71:
94:3e:10:d5:53:65:79:88:88:01:37:fa:14:33:c4:
1e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6D:F2:C1:95:18:A0:FE:39:03:98:70:43:BC:74:2E:97:C7:30:86
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/553fd460-0d53-4397-bec0-fcf61b41ca82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.67.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:11:14:7c:fa:da:6d:6c:6a:d2:d0:a8:16:bf:5b:8f:1e:d4:
c0:11:9a:9a:7c:9d:fd:e4:ab:52:a8:45:08:63:89:8d:02:65:
4c:fc:6d:4d:fe:0c:5b:7a:ae:f8:ad:5a:a0:ae:5b:d9:ec:ac:
bb:a5:fe:1d:33:e2:15:6b:13:87:0e:16:7e:46:53:b2:d4:f1:
cb:a8:22:f6:6e:35:89:36:cf:9b:c1:c7:ba:8b:92:49:dc:ef:
fe:22:54:b1:74:df:19:4d:b3:de:80:d7:95:6a:06:0f:1d:38:
f3:1b:75:bc:99:34:9f:ad:1f:a7:89:9c:ce:79:b4:20:fa:ee:
6e:18:64:b9:72:e2:7a:45:bd:95:d4:5f:ab:cf:36:30:64:c8:
82:97:4c:ba:18:ae:b1:cd:44:2a:29:cc:18:e1:af:ed:29:1d:
31:41:15:1d:95:38:b3:08:4d:99:43:c0:e6:c8:eb:05:12:2b:
16:b6:82:71:c7:93:8f:99:d5:3e:fd:ea:92:a4:5a:0b:99:78:
d3:d4:d5:71:4d:19:2e:02:65:d9:0b:5f:0b:46:7a:6a:ec:a0:
c5:bd:4b:86:de:bc:8a:8f:af:73:8f:41:2a:d1:bd:31:97:a0:
a9:3e:6e:af:04:a8:c2:78:c5:63:3a:72:59:d6:00:3e:f3:7b:
0b:39:9f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:01:07 2025 by rpki-client