Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d741c33c-0527-4f19-b604-429c5940cacb.roa
File: d741c33c-0527-4f19-b604-429c5940cacb.roa (raw, json)
Hash identifier: w44SXhDsDk/g0TEr3gTFGprHcKZgMEalR8tIbJyQJIw=
Subject key identifier: 40:1F:67:BF:00:34:51:05:D0:63:A2:44:05:B8:93:41:09:B7:D5:DF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6B30A07A8D945007530B8A81E36756069B288032
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d741c33c-0527-4f19-b604-429c5940cacb.roa
Signing time: Sun 19 Oct 2025 01:40:58 +0000
ROA not before: Sun 19 Oct 2025 01:40:58 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:30:a0:7a:8d:94:50:07:53:0b:8a:81:e3:67:56:06:9b:28:80:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 01:40:58 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=eccaac7ea3887184960d548828b3753d002507f8b93d2d1550cdb253ffb50486, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:7d:e8:5f:e9:f5:d4:ee:2d:35:20:17:74:a0:
b3:0f:4b:14:25:24:b9:52:98:a4:0d:4b:19:67:fe:
de:3c:32:23:e2:a3:98:07:16:13:12:c5:0e:6a:57:
4a:da:18:99:70:03:5f:c2:ca:d2:fc:f7:a1:13:b6:
6c:35:1a:bf:32:44:30:03:22:b1:88:61:0d:10:41:
5a:5e:c8:c3:e7:6e:8e:99:6e:69:48:31:3d:59:2f:
d3:cb:53:f5:f6:57:e4:0c:32:42:2f:e1:ae:ef:e9:
7e:fa:2c:70:87:f2:1f:a3:e8:f9:94:eb:c6:1b:84:
02:33:04:07:4e:5f:4d:05:f8:01:b6:4c:92:95:8e:
ec:59:33:ed:f8:5c:89:0e:5a:c0:be:ce:6c:2e:99:
b0:3b:f3:22:3c:d5:c3:0b:64:67:f8:ab:53:fb:7b:
e3:b8:58:19:dc:84:67:5f:93:3a:6f:b1:aa:ac:1a:
53:2d:26:65:c1:a0:84:dc:af:b8:90:f4:44:cb:5f:
90:8d:cf:2c:a1:b5:1e:fb:41:5f:40:e3:72:27:99:
44:be:f6:2e:1d:f1:69:57:65:0e:c6:01:ee:65:b4:
7e:d9:c1:b9:b4:0a:e2:b0:81:e2:de:b8:2b:f2:ff:
9d:0b:d9:97:96:55:98:3a:08:47:51:8e:2b:f1:2c:
dd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1F:67:BF:00:34:51:05:D0:63:A2:44:05:B8:93:41:09:B7:D5:DF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d741c33c-0527-4f19-b604-429c5940cacb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.126.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ae:85:72:2f:2e:28:23:bb:1c:4d:c9:15:91:e0:f4:da:41:
00:cc:89:bc:f0:dd:c0:56:ca:38:33:bb:6d:86:98:cc:d7:8b:
04:c7:a7:3a:5b:f2:9e:78:73:f7:3b:24:c2:8d:60:b3:39:34:
bb:c6:cb:69:a8:c2:51:09:c6:8a:1b:19:81:e7:f0:c1:4b:c5:
67:05:38:6d:02:d6:08:d5:d4:a5:11:27:21:d3:9c:c1:ee:8f:
7e:c3:99:83:af:83:34:66:11:5b:3d:b3:be:6a:71:bd:2f:04:
bf:f6:a2:a6:9f:13:9f:e5:d6:10:b6:27:87:35:04:36:f6:6f:
d7:aa:88:28:77:9a:13:73:a4:60:e5:64:95:05:b0:3b:d9:d6:
d9:aa:53:2e:8b:6e:79:7c:9f:fe:01:0b:26:a9:be:13:95:f0:
81:06:77:cc:b3:93:b9:a5:89:0a:2a:a4:e4:7a:4e:34:49:cb:
b8:d0:9a:df:e1:c0:1d:8f:77:fb:54:c6:6d:11:fc:90:0b:27:
aa:80:e8:af:ac:c3:f8:7b:c7:56:99:f2:81:2b:6f:48:f1:64:
0a:97:58:c0:d5:d2:b1:54:28:77:cb:8a:42:7a:98:3c:30:89:
62:8d:f8:27:a6:5c:53:be:c4:82:52:2d:d9:5a:7b:23:ee:47:
31:2d:c3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:55 2025 by rpki-client