Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b26ecd74-65de-40b8-93c9-92c3be72ebc7.roa
File: b26ecd74-65de-40b8-93c9-92c3be72ebc7.roa (raw, json)
Hash identifier: /rAPy8ZnsL8up2RaiRTM++tv+u2AfbLdW9tzN87H/6M=
Subject key identifier: 4F:FF:76:C8:58:53:3E:7C:57:26:69:18:EB:DB:96:AA:9A:8B:C8:FE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 739FDAD5417B95DA7A5653AC612E18CC877CD0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b26ecd74-65de-40b8-93c9-92c3be72ebc7.roa
Signing time: Sun 19 Oct 2025 02:01:37 +0000
ROA not before: Sun 19 Oct 2025 02:01:37 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:9f:da:d5:41:7b:95:da:7a:56:53:ac:61:2e:18:cc:87:7c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 02:01:37 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=42f18460166b38fb1c8c345e51fe87d0afb1a8c8fae61aeb3bbb38715517100a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4f:96:45:f4:7d:1c:b0:27:d3:6d:8a:1a:26:
87:56:b3:f3:e6:98:2a:5e:15:8a:f6:a2:d0:58:4e:
fe:eb:c7:6f:a7:83:a8:8e:25:d5:07:28:26:08:1f:
2f:ae:83:e0:9e:2b:03:4b:1e:fb:f4:22:eb:f2:a6:
f0:10:48:dd:f9:48:67:3e:47:70:e4:54:3b:a5:2c:
a1:76:15:f6:e2:fe:dd:1e:73:9c:af:cf:7f:fc:cd:
1f:f2:81:1d:e4:3f:1b:92:b0:eb:fa:74:ed:77:2a:
d1:dd:0c:23:4b:57:8f:95:a6:33:c3:74:0a:14:1e:
26:93:89:04:25:c7:09:55:1d:41:c4:74:42:f4:e8:
51:38:4e:c9:38:3c:32:67:61:e1:2c:5d:a3:3e:8c:
a9:0b:e2:46:72:e1:7b:84:c4:d0:aa:77:79:ce:ec:
bb:b6:8b:0f:a4:3a:ab:e9:28:4b:1b:16:e0:1d:52:
c7:04:c8:db:48:04:01:45:87:11:60:ac:70:11:34:
75:4e:3e:5c:76:d4:2f:fe:8d:70:53:75:93:b3:0e:
03:d7:c2:93:a9:a8:b0:2e:2e:c4:c3:45:a1:1d:1a:
94:06:39:bc:a9:80:b5:71:18:da:c8:22:61:5f:89:
9a:bb:41:79:88:86:5a:ab:e4:bf:aa:73:09:a1:ff:
f6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FF:76:C8:58:53:3E:7C:57:26:69:18:EB:DB:96:AA:9A:8B:C8:FE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b26ecd74-65de-40b8-93c9-92c3be72ebc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.52.0/24
Signature Algorithm: sha256WithRSAEncryption
80:23:86:6a:7c:d3:b8:cc:ba:e6:42:e4:a3:48:a2:b4:7a:c4:
b0:61:d7:d7:5d:ef:f5:88:77:cb:4f:d9:f3:e8:21:3c:05:30:
90:75:0c:a6:37:b7:38:91:e5:18:fd:d3:ed:8e:45:08:42:84:
96:f0:5d:68:c4:b9:a5:7e:bb:43:35:f8:b4:5a:86:64:67:ca:
88:38:cd:9b:82:ff:53:de:3d:1c:99:79:e1:17:10:e5:86:93:
dc:d8:09:59:be:88:ba:71:99:b8:22:94:80:1a:a5:d5:06:a3:
54:6d:83:cc:14:9f:9c:d7:3d:6b:f8:74:ad:3d:de:90:03:78:
e7:92:f8:d0:19:71:92:f0:fc:c4:3d:68:f9:a7:24:a1:21:2e:
98:99:bf:e3:1a:61:a3:7c:48:04:a5:e6:8b:47:66:ab:5c:fb:
6e:7c:49:fc:10:e2:18:cb:8d:0a:44:b9:e1:d9:80:3a:2f:8e:
57:52:f5:ef:ba:55:59:3a:0e:6a:de:fd:aa:3c:e4:8e:39:12:
35:94:10:ef:7d:52:dd:28:c6:12:7f:e1:24:12:dc:4c:d8:8c:
f2:0a:20:2c:c2:97:d6:88:05:45:18:33:5a:02:1d:2e:ad:94:
26:eb:82:05:ac:a5:7d:01:b2:b5:ad:de:fc:9c:b8:7d:e7:c0:
f9:f1:f6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:13 2025 by rpki-client