Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b584e091-43be-455d-b6bc-36fdb70dc84a.roa
File: b584e091-43be-455d-b6bc-36fdb70dc84a.roa (raw, json)
Hash identifier: xe17bGkPnVjsZ98uAMYIU6c3Ixnxh1wcixKWgagdnYo=
Subject key identifier: 2F:07:8C:65:BD:C5:D5:86:6F:FA:EA:7F:DA:D2:47:90:C6:09:B3:F1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1FF74CB6A6A4552A1F7D92AF4BF4C727A0554EE4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b584e091-43be-455d-b6bc-36fdb70dc84a.roa
Signing time: Sun 19 Oct 2025 00:30:16 +0000
ROA not before: Sun 19 Oct 2025 00:30:16 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:f7:4c:b6:a6:a4:55:2a:1f:7d:92:af:4b:f4:c7:27:a0:55:4e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 00:30:16 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=1a47e0887bfa1779326d7917270fcd5c6ff55c07448a398904cc17395e234305, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1b:3c:37:fa:81:81:01:ab:63:0a:e6:ec:e4:
a2:42:6f:7a:17:90:67:7b:75:a0:b0:05:be:b1:89:
7f:bd:e9:0c:21:6f:55:01:65:db:98:6c:cf:3f:9b:
69:37:ac:0e:28:53:80:20:ed:fb:97:e2:68:f8:f6:
c9:11:f9:24:d3:12:29:40:c2:39:7f:ac:34:bd:e7:
fa:2f:6a:6b:1c:ed:0a:c2:48:2d:83:98:e8:20:fa:
e8:70:da:88:ee:79:73:fd:9c:dd:96:cc:d2:f0:66:
40:f2:c7:24:55:45:10:67:46:21:2d:ef:d7:35:1f:
f3:66:30:2b:f8:74:6d:ef:9d:5f:a6:ca:86:17:d5:
d5:07:f8:7d:7a:31:f4:ed:4e:a6:83:fd:46:78:ba:
77:6b:ff:6f:42:71:b9:eb:49:8c:8a:73:33:f9:5a:
1f:c6:9e:cf:3b:6d:35:1f:fc:23:2c:90:d2:d3:6e:
e9:70:a0:f0:0c:ce:9d:15:ac:5a:55:1d:04:9e:d0:
44:fb:93:3c:41:5b:70:21:33:9a:17:c9:35:d6:2f:
90:1c:d6:0a:38:c4:d4:ef:71:5d:52:4a:2f:b8:80:
ab:c2:72:75:a2:36:d2:11:2b:c2:f9:e5:98:a3:5b:
bd:1a:81:83:a3:36:ae:98:9e:08:74:68:e5:aa:02:
f8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:07:8C:65:BD:C5:D5:86:6F:FA:EA:7F:DA:D2:47:90:C6:09:B3:F1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b584e091-43be-455d-b6bc-36fdb70dc84a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.63.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:c1:ad:dd:fd:70:02:99:89:23:fe:66:6a:f2:02:7d:3b:b5:
21:6c:d1:ac:f0:c5:e2:46:53:7a:0e:9f:cc:de:5c:fb:05:7a:
74:12:f2:3f:e1:ac:38:09:d7:72:7d:aa:ed:ab:cf:08:5a:5d:
5f:d0:38:b7:40:14:c2:f8:06:6d:cb:ee:99:ef:6a:8d:ca:7f:
8a:7a:16:25:1c:9c:a6:9c:04:7f:3c:3a:6d:b1:15:04:cf:23:
ef:42:0b:37:20:e7:64:5a:7e:21:d5:27:ac:e3:ae:a2:f1:54:
41:69:8a:81:0c:69:93:5f:67:fa:21:5c:0a:75:bb:6b:ee:e5:
13:21:e7:dd:ae:5a:42:f7:3d:ca:06:bb:ca:2e:40:d5:cb:9b:
ce:78:ce:27:78:98:68:9b:61:48:c5:9e:ac:80:08:5d:df:cc:
3c:12:05:29:9e:61:09:dc:c7:c6:d5:67:df:8e:de:af:01:3f:
cc:27:dd:71:53:a7:0d:8d:2c:97:28:7f:61:b0:27:77:5b:7d:
39:a9:7e:e9:f4:08:c6:91:87:e3:15:9b:e8:73:7e:25:34:8b:
fd:7c:5a:5d:14:2c:73:76:1d:b6:4b:24:13:8b:c0:9f:6d:a7:
50:65:03:ed:84:f3:1a:80:b3:2d:3e:08:97:c8:52:31:1a:48:
9f:79:97:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:17:44 2025 by rpki-client