Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a86a873c-668f-42a3-aba3-98fe91774122.roa
File: a86a873c-668f-42a3-aba3-98fe91774122.roa (raw, json)
Hash identifier: vstYgsvwhMEURE4L4Bddv9ubS0WzqGXESl5yifVKuIg=
Subject key identifier: 37:6A:38:3F:DE:A1:A8:43:74:19:F9:CE:09:B2:9B:E4:D0:5B:EE:69
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 01562B91BA5E9F41F1609246F9E0356B602CCA7A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a86a873c-668f-42a3-aba3-98fe91774122.roa
Signing time: Sun 19 Oct 2025 00:20:06 +0000
ROA not before: Sun 19 Oct 2025 00:20:06 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:56:2b:91:ba:5e:9f:41:f1:60:92:46:f9:e0:35:6b:60:2c:ca:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 00:20:06 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=e5b4313ca4e0a94915988eff4037dc01b333d48d96d936a39be4481e4ca57aeb, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a2:3e:3a:c5:52:cb:23:76:1e:d3:f2:82:db:
0d:cf:ca:f0:ac:b4:3b:b6:c2:e2:3e:fa:21:6a:9f:
75:3e:ab:6a:b9:14:e9:8e:52:ea:4c:45:78:c4:09:
c5:06:b3:07:44:03:d9:fe:9d:24:c6:f1:4f:3a:63:
22:83:2c:74:5f:10:af:77:ee:a1:55:19:f4:50:01:
92:55:68:16:2e:98:2b:1d:4a:d0:fd:64:7b:bf:8b:
8d:77:55:41:bb:a1:59:7c:03:23:6f:21:6c:65:ee:
e7:c9:38:b9:33:c2:3f:1d:e5:4d:d4:87:1b:b3:7f:
73:66:8c:db:d9:f7:85:c1:b1:3b:3e:70:76:3a:32:
20:19:fc:1c:31:b0:45:6f:0c:69:27:a5:75:cc:eb:
e5:e6:7e:2e:f0:7e:24:e7:48:b7:2e:3e:78:a1:29:
e7:75:c3:1a:81:85:22:06:9c:2b:d5:8c:42:78:71:
4f:e4:b9:bc:a9:df:9a:ac:f8:ca:b0:33:d2:4e:ed:
01:9e:df:98:95:de:12:f1:44:78:1a:9f:31:39:77:
59:f0:53:3a:25:f7:9a:8b:a5:96:e9:79:70:49:6e:
d0:3b:eb:c1:5c:6d:8f:82:c1:3b:1e:2f:c1:e4:e3:
e7:8b:ad:93:f5:51:09:ac:08:b3:36:a5:02:cc:7c:
3e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6A:38:3F:DE:A1:A8:43:74:19:F9:CE:09:B2:9B:E4:D0:5B:EE:69
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a86a873c-668f-42a3-aba3-98fe91774122.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.95.0/24
Signature Algorithm: sha256WithRSAEncryption
56:e6:a4:a5:35:62:76:48:24:a2:e7:b1:a3:1f:c1:22:4e:a5:
13:2d:9e:e0:7f:55:30:42:d7:6f:ee:75:d2:f2:6b:e4:d4:cc:
5c:6e:ca:86:ff:9a:4d:f4:ba:bd:f9:5e:09:c6:ce:ec:16:53:
7f:71:89:e2:7c:a1:f5:b3:34:39:f6:df:cb:da:47:a1:05:2c:
d9:af:f4:2b:3d:0e:4f:a4:97:39:e8:01:3a:38:e0:e5:be:b5:
69:1c:04:08:36:27:4f:bf:56:02:10:8c:53:78:0e:49:9d:18:
95:65:95:36:0c:81:0f:6f:f5:f1:ac:c0:ba:7c:bc:90:25:03:
92:14:f5:67:3a:4d:0c:9e:0e:68:b6:86:2c:38:cf:de:23:dd:
64:08:c8:26:72:93:73:34:ec:c5:35:45:c3:15:1a:f5:21:6c:
bf:1c:be:67:6c:e6:4b:35:1d:47:43:de:9c:c2:fd:7d:93:73:
1c:c9:0e:fa:b8:c4:8c:80:2c:c2:17:25:3c:36:35:3a:ba:4c:
c0:13:8e:5d:0d:ab:f9:c5:26:10:59:de:86:ad:97:aa:b3:b0:
b9:2c:a3:db:16:d4:74:0e:f6:b7:7b:f4:81:1a:2f:8e:d5:31:
95:c1:48:94:bb:78:42:3a:3d:e4:aa:4d:ba:a2:9b:37:fd:9c:
71:94:6a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:49:35 2025 by rpki-client