Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/557f7672-b6e8-4a68-b64e-aa2f65ac354b.roa
File: 557f7672-b6e8-4a68-b64e-aa2f65ac354b.roa (raw, json)
Hash identifier: bQQq67xknF60ath/LkUj99Ecj8mG7aBLK9KuziGXAv0=
Subject key identifier: BE:CF:78:7A:1C:18:4C:06:A7:4A:59:A0:05:AE:D9:14:77:AB:05:49
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5EE749030556EE5728FCE58022468D63352B31F8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/557f7672-b6e8-4a68-b64e-aa2f65ac354b.roa
Signing time: Sun 19 Oct 2025 00:40:54 +0000
ROA not before: Sun 19 Oct 2025 00:40:54 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:e7:49:03:05:56:ee:57:28:fc:e5:80:22:46:8d:63:35:2b:31:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 00:40:54 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=edc953ae17b6e6a7e9a510e91ba02534bb8574d382a2247151bb552d5e5c3f7c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f0:2d:b8:1a:fe:93:3a:29:bf:09:ac:82:e2:
95:fd:93:ba:0c:f8:5a:b8:ef:65:00:11:74:01:5b:
54:95:ea:0b:b8:a4:a3:94:fc:13:91:1f:d7:26:78:
08:2d:8c:a0:ab:c7:ec:cd:6e:31:63:ed:58:85:d6:
64:7c:7c:18:6f:3e:f4:83:d2:9b:67:50:71:6c:7c:
1d:46:8c:f6:17:42:e7:6e:fb:4a:a0:b2:66:33:09:
df:72:22:76:e0:a3:96:2d:b2:29:42:0d:af:58:07:
4a:fe:29:82:67:3a:27:3c:54:b3:30:cc:e1:54:89:
00:aa:61:33:03:19:75:0a:33:9d:6a:85:fc:84:b1:
34:05:27:71:08:4c:c9:ef:de:60:02:df:1c:81:5c:
8f:1d:69:70:2a:5b:9c:d0:4e:80:32:9d:8f:83:03:
5f:28:2e:dc:f2:e8:df:ac:ec:76:d0:bd:cd:dd:83:
f8:8f:a4:7b:51:14:16:f1:a5:0c:ad:6f:9c:8a:18:
83:12:97:74:3d:97:a9:0f:76:0b:93:28:a2:45:66:
54:6f:0a:61:3a:cf:25:8c:77:71:70:74:c0:06:a9:
73:83:8d:51:9e:6a:90:0f:e2:0c:d6:1f:a8:05:22:
ff:e3:4b:9b:30:fd:93:4a:d5:a6:d5:b4:b9:47:f8:
0f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CF:78:7A:1C:18:4C:06:A7:4A:59:A0:05:AE:D9:14:77:AB:05:49
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/557f7672-b6e8-4a68-b64e-aa2f65ac354b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.4.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:69:6c:26:52:b3:17:22:a5:01:9b:56:71:1c:cf:1f:48:9b:
4e:e5:66:58:38:0e:44:24:8a:2a:2a:4f:e5:87:e0:9a:13:93:
d8:b4:a1:9c:b0:6f:10:3b:37:20:4b:7a:35:77:c4:60:42:89:
df:40:2d:26:2f:2d:17:cb:c4:ea:72:e6:fc:67:92:5a:3c:47:
97:8b:15:72:e0:82:8e:f4:13:b9:34:8a:59:a4:75:3c:cf:e5:
84:ba:34:2a:24:26:c7:6f:fa:d8:56:39:13:e4:a5:53:02:70:
88:6b:30:46:89:0d:19:4e:56:e0:6d:9d:11:42:4d:0b:c7:5d:
ab:62:82:aa:53:07:4f:52:d7:fc:ea:f2:0e:4c:b9:a2:e6:a9:
39:a6:28:69:91:17:a8:b9:32:25:47:68:8e:c1:be:70:23:c6:
a1:40:3a:a2:17:60:dc:34:5b:e2:b2:1f:65:c9:60:07:b6:86:
37:87:df:8d:e5:8e:89:bd:4a:11:b6:3d:85:ce:11:5d:e1:78:
58:0b:0f:df:d8:ab:e5:36:e2:ce:f5:bd:a6:55:7b:58:4e:16:
f6:68:40:1c:99:40:4a:0a:d8:09:ed:e5:df:55:b7:54:f7:96:
08:38:ab:86:53:2b:ed:1b:75:94:d7:62:37:7c:d2:b6:e8:65:
54:49:07:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:22 2025 by rpki-client