Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee6f181a-8d25-4550-b715-452999153054.roa
File: ee6f181a-8d25-4550-b715-452999153054.roa (raw, json)
Hash identifier: jN8GzOLvGzebtKPw5GXAN47x0ZcTGP+gAQRc9ir9cGo=
Subject key identifier: C7:16:81:B8:9A:5E:47:F7:50:14:71:6E:35:BF:84:8F:47:E4:E9:17
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3724A27D47339A7FF44C3D46BEA6F6D46EA977CA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee6f181a-8d25-4550-b715-452999153054.roa
Signing time: Sun 19 Oct 2025 01:41:39 +0000
ROA not before: Sun 19 Oct 2025 01:41:39 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:24:a2:7d:47:33:9a:7f:f4:4c:3d:46:be:a6:f6:d4:6e:a9:77:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 01:41:39 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=915a31b52f85e28dc2231ef339b276c0b4e7c152e41f2b93f0118f0416beade0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8a:14:ac:bc:3a:73:ef:de:3c:4a:f9:f6:f0:
09:f0:fc:47:c4:ed:27:9b:2e:a4:55:a3:2b:14:e6:
55:29:9d:69:51:64:1d:f5:f0:1a:20:dd:02:58:53:
5b:41:c7:cf:0c:8c:35:66:bd:31:82:d8:3a:14:0c:
9e:36:ab:57:8e:89:8e:6b:e6:07:12:fb:4a:78:b9:
92:6d:69:d2:86:04:20:a0:6b:8a:c4:88:82:5a:ee:
51:40:ee:68:e5:6a:cc:ef:fc:43:c4:ca:74:ba:f1:
e5:91:2a:7e:e5:74:4a:39:77:3a:8f:48:48:26:2c:
25:77:c6:00:fe:19:b7:92:84:58:ee:b2:b4:2f:91:
6e:d9:99:15:b2:fe:aa:a6:2b:67:ae:4d:8b:b7:98:
8c:48:c6:ed:12:d0:6b:31:1e:36:2d:00:51:ea:d6:
4b:b0:d2:ac:d1:4f:aa:f6:04:67:92:a7:5c:52:7a:
f9:ce:11:d4:2b:77:40:28:b0:2d:5c:ce:80:f0:49:
07:a9:d7:70:0c:2a:68:42:6c:ea:bd:b5:63:c6:ea:
3e:4a:3d:32:fd:a3:ee:1c:cf:40:60:e2:0b:f6:35:
aa:6e:75:c2:61:8a:47:b5:4a:ed:0b:f1:47:05:81:
62:4f:b1:00:60:b7:8d:e5:16:40:ff:92:4b:fd:f5:
fd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:16:81:B8:9A:5E:47:F7:50:14:71:6E:35:BF:84:8F:47:E4:E9:17
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee6f181a-8d25-4550-b715-452999153054.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.41.0/24
Signature Algorithm: sha256WithRSAEncryption
14:08:d0:29:79:22:82:b2:27:fa:56:7d:ab:8a:31:a4:14:c6:
d5:08:e4:0e:6d:2a:43:ba:8a:ec:92:05:68:0b:4f:b0:27:4f:
36:5e:15:9a:bd:2c:00:74:57:ae:10:e7:ca:b8:92:67:36:cf:
85:75:ed:a0:d3:b6:16:66:c1:25:7e:f4:fd:99:a2:22:c1:87:
0c:9e:c3:92:52:ec:46:f9:38:93:07:fe:94:e1:ab:5d:84:5e:
be:ac:e1:58:7b:60:c5:2e:8b:6c:35:aa:6b:97:6e:f1:02:8c:
fb:95:3b:68:6d:1e:49:32:5b:96:83:18:96:59:18:7a:5a:18:
d2:81:98:72:29:20:ee:f4:af:5a:bd:38:e2:45:25:2b:88:54:
a4:8b:fa:78:47:8a:11:93:53:65:6a:b2:b9:55:81:6a:57:35:
8c:fd:5f:d3:2b:e7:e3:6a:e7:49:b9:96:98:3c:5b:be:26:01:
78:91:aa:43:25:ed:fb:2a:f9:2d:de:0a:4e:80:aa:b9:e8:cd:
58:8f:9d:b8:c2:42:de:d8:2d:1e:0d:59:a7:2e:0c:f7:85:5d:
5e:5b:5b:a9:bb:2e:4a:35:8d:fc:7e:8c:12:ed:da:d6:41:9b:
f5:22:00:9a:63:6a:a0:56:80:a2:93:93:e3:89:70:c4:bd:37:
ed:56:d4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:50:54 2025 by rpki-client