Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a7e32b9e-d1c7-4ba9-a2bf-196916b670c1.roa
File: a7e32b9e-d1c7-4ba9-a2bf-196916b670c1.roa (raw, json)
Hash identifier: vlAwMfv5oTWxWuHdpntK316j8OxOBo+Ydg7VBz09pXc=
Subject key identifier: 4B:6B:F5:29:85:B6:06:B6:67:D2:F8:52:07:A9:A5:46:AB:57:2E:ED
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 024AEBA3B565D6FF1C65FAB88701F25AE633AE9B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a7e32b9e-d1c7-4ba9-a2bf-196916b670c1.roa
Signing time: Sun 19 Oct 2025 01:51:29 +0000
ROA not before: Sun 19 Oct 2025 01:51:29 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:4a:eb:a3:b5:65:d6:ff:1c:65:fa:b8:87:01:f2:5a:e6:33:ae:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 01:51:29 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=42b55590166bb29738838d86030a6c09964dce829751a692aa3bba89f7d4545c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ef:bd:93:6d:52:2c:e2:f9:d6:7e:30:b8:20:
58:a6:64:76:86:75:0a:a4:e7:d4:77:8e:12:bc:52:
50:b2:e5:07:99:49:19:b5:8e:d8:9f:a4:36:30:c9:
5e:5f:f9:e4:fd:7d:61:57:e4:e5:e3:82:41:d2:0e:
f3:70:fc:9f:71:b0:bc:51:ee:6e:3b:c2:02:c5:8d:
97:63:79:3a:20:ed:0f:ef:2f:0f:f7:df:4d:d7:fb:
70:56:a6:2d:d8:12:93:f5:cf:3c:0e:77:f6:42:07:
46:14:fc:96:20:35:a4:d5:8e:0f:97:d8:68:4b:18:
51:39:36:38:21:f4:2f:3a:36:69:f6:bc:d2:78:1b:
55:0a:bb:b0:d4:d3:22:db:40:d4:0e:e6:26:f3:4f:
73:c9:fc:3d:85:ae:b8:5a:fd:64:b3:0c:db:03:08:
65:8f:76:b3:00:18:d9:24:1b:d4:d2:e5:1c:b9:7c:
37:8f:af:55:a7:10:49:7f:83:63:8f:c4:88:bf:05:
2e:6d:a1:d5:f2:11:72:de:f1:1f:d1:2e:0f:82:68:
47:ad:8d:5e:4e:83:08:76:e1:d0:6f:d3:de:8a:ec:
bb:d0:bc:7a:11:1e:8c:1c:e9:b7:3f:32:db:cf:41:
61:1d:69:46:6e:c2:b2:6c:05:ff:4d:5b:e8:53:6a:
11:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6B:F5:29:85:B6:06:B6:67:D2:F8:52:07:A9:A5:46:AB:57:2E:ED
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a7e32b9e-d1c7-4ba9-a2bf-196916b670c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.18.0/24
Signature Algorithm: sha256WithRSAEncryption
15:1a:fe:82:86:5b:bb:2d:bd:e5:05:23:0e:b7:0d:a8:e0:d9:
74:c0:ac:8e:a0:7a:0c:dd:58:02:22:f6:27:e1:53:f6:9a:e7:
5d:2a:83:4e:5f:ce:b6:26:ec:b9:b3:41:f4:b8:a4:40:86:8c:
fb:9e:c2:8d:45:7e:0a:ab:e4:5f:3d:41:6e:be:75:e2:4e:bf:
89:8b:2f:23:e3:44:22:0f:f4:e1:84:f5:41:e1:a5:62:00:fc:
49:41:c1:88:3a:af:2a:9a:f0:40:66:61:39:90:6b:d6:1f:a1:
fc:26:65:f4:a5:27:5f:5b:80:e6:f4:cc:1f:84:16:0e:94:10:
f2:64:dc:aa:24:2e:26:42:e1:e4:6b:c2:07:98:a2:92:f3:fc:
93:5c:7d:04:1a:c9:fe:8c:b9:bd:55:b6:89:9a:43:cf:a9:3e:
0c:c0:8d:a6:45:d4:8f:62:16:55:29:23:1c:ba:56:81:90:0f:
cc:7f:44:a1:ca:05:b5:e5:39:5f:66:8c:e1:32:49:bc:72:f6:
62:ec:3f:6b:75:ab:2d:95:de:31:f0:98:a9:cc:68:a7:ab:d8:
e5:38:32:b4:88:4c:3a:2a:6a:b0:3e:8e:6f:01:0b:6a:a9:61:
c1:54:62:3f:21:ff:d5:07:92:13:fc:5d:aa:6a:79:2a:c4:1d:
18:36:7b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:20 2025 by rpki-client