Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97bdaa67-31f8-49b7-9173-abfc6af007e3.roa
File: 97bdaa67-31f8-49b7-9173-abfc6af007e3.roa (raw, json)
Hash identifier: dy+yBFH+5TZGOpGjX4+ovogq5ZSOn6IKPz518+hgjW0=
Subject key identifier: 39:1A:AC:D8:55:0C:DA:B3:F8:C1:A5:01:86:DF:BB:7E:EB:1B:11:D3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3448DE060CA42391DA747978EC637044FA189F7B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97bdaa67-31f8-49b7-9173-abfc6af007e3.roa
Signing time: Sun 19 Oct 2025 00:40:50 +0000
ROA not before: Sun 19 Oct 2025 00:40:50 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:48:de:06:0c:a4:23:91:da:74:79:78:ec:63:70:44:fa:18:9f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 00:40:50 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=4d0e1fba57eb73bf471bc224918317f6200e267c13442d06f9d5efcde6b4ac37, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d6:34:dc:13:e8:b5:5b:f1:c4:24:1c:a2:73:
1e:cb:34:59:0c:94:0f:5b:3c:15:23:30:74:13:91:
13:a8:82:6a:5d:3a:df:49:2b:e9:8f:3a:dd:2c:ad:
d4:4d:33:d7:07:e8:05:f6:7a:f9:c2:3f:47:ea:ec:
e0:41:91:7a:7e:66:74:46:7f:81:83:09:3d:91:bf:
3c:51:b6:22:da:04:95:e0:19:b3:19:d7:04:be:36:
24:22:8d:8b:bc:25:50:d0:51:b5:a6:f2:de:ab:dc:
69:12:e7:19:47:8a:77:0b:26:df:38:d3:aa:d1:95:
c8:6e:6d:59:7c:93:6d:fd:85:b3:50:e6:64:16:7a:
4f:a6:6f:1a:28:00:85:0e:39:4e:82:4b:b4:5c:55:
b5:87:4b:72:8c:8a:70:b6:42:86:f5:23:1e:a2:72:
b0:bb:19:0a:98:5d:09:f7:68:f7:82:23:a9:9a:23:
c7:22:5c:5e:89:70:2f:a2:4b:ae:81:de:a2:92:34:
9b:b1:b5:54:67:ae:2d:1c:16:5b:52:a5:b8:92:7a:
40:2f:69:e9:ff:f5:81:6a:94:46:6a:81:a6:65:69:
7c:36:50:4a:a8:99:5e:e4:24:02:e4:3c:b7:24:a7:
33:6f:ae:1a:25:7b:de:07:3d:46:91:c2:86:fb:3f:
6a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1A:AC:D8:55:0C:DA:B3:F8:C1:A5:01:86:DF:BB:7E:EB:1B:11:D3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97bdaa67-31f8-49b7-9173-abfc6af007e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.145.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:50:c1:1b:a5:81:ba:1f:5a:81:a2:dc:5f:6d:a3:68:94:98:
16:f0:4e:4c:86:43:07:99:32:f1:a5:1c:db:89:90:e4:ad:a9:
6d:76:f1:61:46:5d:9d:0d:c1:71:6c:0b:5c:26:23:49:f1:89:
3e:72:1b:5e:1c:42:23:c7:b8:91:20:2a:64:35:a0:07:a6:9b:
0d:d4:c3:c3:77:31:3a:70:df:39:c7:49:9d:2c:5b:87:b9:6e:
6c:76:8d:66:89:de:a5:ad:ef:6a:f8:3c:f0:22:9f:5e:4b:63:
9a:c2:b4:51:b9:df:8d:d0:89:c9:51:ed:aa:ec:d0:c3:f9:4e:
0d:7d:7b:67:0d:a1:55:93:60:a8:a9:1d:30:a6:fe:ed:89:37:
33:97:7e:f1:f6:42:53:2c:ae:72:c6:69:e7:ad:8c:21:69:66:
73:8e:9f:d9:d4:62:ee:8d:03:c6:c4:41:9b:99:00:4b:da:57:
5a:68:09:7f:8f:21:81:5a:dd:d0:23:53:61:6a:bf:f4:6a:d4:
84:9e:cb:c1:28:15:29:bc:26:2c:98:68:39:d3:c7:05:21:e3:
d5:e6:01:80:d5:8b:59:3c:5c:d2:72:2b:8b:ea:35:1d:ee:9c:
6e:a8:c8:70:2a:e9:7a:5b:3b:87:d6:24:6f:c5:34:11:90:a3:
bb:2c:df:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:25 2025 by rpki-client