Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0bc07b5-2c7f-4a38-a48f-6332d148856b.roa
File: b0bc07b5-2c7f-4a38-a48f-6332d148856b.roa (raw, json)
Hash identifier: Jg3TQdsoYr9LHOJ+jmyyBbPhR/XEaNhiqoubPaSF+nc=
Subject key identifier: 5C:27:B3:17:B5:D7:56:83:54:A0:D5:C7:BE:9D:41:C9:D9:7F:91:C2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 110E114E240136BD4034C12A55070642F8EC9B14
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0bc07b5-2c7f-4a38-a48f-6332d148856b.roa
Signing time: Sun 19 Oct 2025 02:40:11 +0000
ROA not before: Sun 19 Oct 2025 02:40:11 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:0e:11:4e:24:01:36:bd:40:34:c1:2a:55:07:06:42:f8:ec:9b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 02:40:11 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=c75a11e519715c98ca2c9a577429b19aaa08a0e5cb6df132425f7d52e3990d0b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:cc:e4:2e:4d:2f:fb:ba:46:1a:e5:43:40:
de:a0:a0:53:03:ec:28:d3:c3:d8:87:ea:9c:88:f3:
a3:32:a4:36:13:d5:38:64:75:7e:77:34:88:7a:dd:
39:9d:72:e3:79:c3:4c:e1:03:aa:b3:d7:6a:82:e2:
b2:88:c8:3f:b7:67:3a:3a:cc:d8:4e:00:62:e3:78:
2b:fd:da:70:76:c1:13:ba:45:20:db:e4:ef:47:ac:
84:97:24:43:d5:38:ce:90:1f:f5:43:27:b2:90:5e:
e0:0d:95:90:93:7a:45:a2:1b:f7:bd:63:3f:eb:1b:
a2:9e:6e:d6:b5:67:e7:38:83:36:e0:d0:0d:3a:5b:
3d:0e:55:1d:b6:5e:a9:f3:8e:53:23:2b:52:92:c4:
a8:75:35:f9:96:96:df:22:82:61:b3:9f:db:2f:e3:
84:8d:84:44:98:96:38:27:e2:c6:d9:cc:fa:6a:f0:
84:a6:4e:49:98:03:37:98:f0:c4:6d:44:48:0b:c2:
cd:48:62:f6:ce:33:f3:99:b7:38:ec:3b:58:cb:7b:
7e:35:b7:64:62:76:0b:fa:32:16:57:7f:00:88:df:
1d:49:48:9f:77:66:66:44:dd:fb:5c:c4:df:84:31:
23:6f:a8:2b:3f:50:54:d1:06:42:d4:e8:4e:6e:61:
de:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:27:B3:17:B5:D7:56:83:54:A0:D5:C7:BE:9D:41:C9:D9:7F:91:C2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0bc07b5-2c7f-4a38-a48f-6332d148856b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.78.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:32:62:46:c2:2f:d7:d5:21:d7:d1:64:85:52:05:09:86:0c:
b5:16:55:85:62:d7:46:c2:e6:25:b3:4b:23:9d:ec:cb:17:b3:
f9:a5:c3:c4:e6:00:75:27:3f:9b:9a:9a:6b:9e:62:4f:bd:59:
46:01:2c:76:9f:80:95:16:69:cf:d5:42:e1:16:d7:0f:ff:b1:
86:b7:c9:1e:12:84:a1:52:53:3a:76:c0:db:61:b2:16:bc:86:
63:1e:5b:0b:c4:47:14:e6:c7:92:f7:ee:66:92:ef:6a:76:8d:
00:9b:38:10:5c:f5:a3:5e:f9:d9:37:78:19:12:26:37:e8:b7:
0c:e6:4e:9c:2d:1a:17:de:eb:41:8e:80:d3:c2:1d:10:9f:6a:
ca:d8:f4:de:4b:b2:05:50:c6:af:f0:e8:53:72:58:6c:43:97:
b0:71:d2:34:99:81:7f:63:e2:ae:99:3e:b0:af:aa:0b:b0:29:
84:c7:f1:3b:d3:9a:eb:13:6f:9f:f5:eb:5e:ce:2c:3e:c4:46:
ce:08:c8:d6:5f:0f:96:04:6e:f0:56:3e:93:ee:71:67:74:7d:
d8:04:3c:de:75:d5:6a:7e:14:4a:8a:b2:f1:c8:5c:a5:05:0a:
aa:50:95:e4:f0:d5:42:da:85:4f:f5:07:e1:7f:a5:a3:c2:1d:
cd:56:32:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:52 2025 by rpki-client