Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e55f58a-0dd7-4e2a-a440-5dcf600eb3ff.roa
File: 6e55f58a-0dd7-4e2a-a440-5dcf600eb3ff.roa (raw, json)
Hash identifier: W7a+QFtsxsQnZ1e3n3SUatqqkrbKyYrs9gO8vqT7W8c=
Subject key identifier: 82:B1:42:8D:04:1D:91:53:0A:1B:24:A3:79:AF:76:F6:D7:11:F7:6A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5A4B42F6E7B86C9F1A9B43A1E3A93A1EB17C6B29
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e55f58a-0dd7-4e2a-a440-5dcf600eb3ff.roa
Signing time: Mon 20 Oct 2025 01:20:46 +0000
ROA not before: Mon 20 Oct 2025 01:20:46 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.54.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:4b:42:f6:e7:b8:6c:9f:1a:9b:43:a1:e3:a9:3a:1e:b1:7c:6b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 01:20:46 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=a604c7845c6d2dedea818d4cc2886b9d6e663c8490f9f87956a2a03c04fbf437, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9b:bf:be:33:c1:01:61:8e:fd:55:2d:7b:d7:
a7:3d:c7:d1:dd:c6:e7:69:06:96:c3:1a:4b:9e:ea:
54:ba:3d:35:f0:c6:fd:05:10:44:da:5a:29:0e:c8:
2b:59:ce:71:5c:cd:9c:6e:f7:a0:54:80:98:ba:69:
94:c2:88:0e:d2:36:f7:96:63:a6:e1:77:85:8b:68:
99:53:ac:13:0d:82:ed:ff:b9:ef:6e:d5:a3:2d:64:
c8:7f:a7:d1:00:63:da:a9:df:d7:96:80:86:53:48:
a2:d8:24:cd:76:ad:15:15:af:54:80:a4:19:86:fe:
f6:8a:1f:e2:14:cf:14:15:6c:98:d5:25:30:35:d1:
04:05:93:1a:03:cf:41:e4:bd:09:04:9a:6b:e7:7b:
2c:fb:55:9d:97:2f:0e:37:0f:8f:89:a8:97:4e:43:
40:ec:6d:55:55:b8:3b:a6:e2:88:05:7a:4c:c3:e0:
00:42:4f:18:e3:43:2f:6d:d5:43:2f:d9:d2:02:cd:
04:64:de:2d:e0:57:1c:f0:b2:40:17:4c:5c:c4:e3:
c5:20:c6:ce:ac:77:12:66:4c:af:5d:56:38:2e:1d:
cd:62:18:de:8f:17:55:5a:6a:ef:46:db:47:10:d2:
ca:b8:cb:c8:15:af:b9:27:e6:eb:12:c0:95:e3:c1:
40:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B1:42:8D:04:1D:91:53:0A:1B:24:A3:79:AF:76:F6:D7:11:F7:6A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e55f58a-0dd7-4e2a-a440-5dcf600eb3ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.54.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:f1:4d:f8:e7:f1:2d:43:48:56:19:6b:fa:e7:58:34:06:06:
8c:2f:0f:41:44:45:9b:69:78:e3:05:f0:ae:8c:09:90:c7:a1:
71:51:80:7c:d5:38:c8:2c:a2:ab:96:b6:a9:72:d7:b5:51:d3:
32:43:24:dd:b3:aa:e7:b5:0c:00:da:79:dc:77:78:44:52:9c:
4a:e9:0e:74:4e:b2:0a:0f:72:cc:3b:3e:d0:d9:20:5e:38:d5:
d1:4e:2f:a1:8e:a1:57:9f:80:3b:39:84:ce:cf:08:18:d9:8a:
dc:79:72:3c:7f:3e:7b:90:9e:21:c4:24:7c:8d:80:a0:31:55:
30:8e:9b:75:67:a3:64:37:26:3e:dd:c4:f6:49:da:bb:d7:b8:
5c:2c:18:fb:c9:7e:db:45:14:9e:ee:5a:c2:06:9f:af:0b:ff:
c4:af:65:a9:7d:66:5b:f3:56:e6:d8:05:b8:69:b3:6b:19:80:
de:65:47:bc:46:4e:70:22:40:bd:99:45:38:50:34:4c:7d:ec:
48:ee:1a:de:fd:2a:52:59:d0:62:9d:77:ec:f8:02:46:25:6d:
08:c6:12:4e:e8:9c:e4:1c:bc:39:89:0d:ae:ca:49:2d:54:6c:
ba:ca:16:94:52:a3:17:e2:69:e0:0a:57:6f:01:99:33:c2:52:
47:cd:88:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:48:21 2025 by rpki-client