Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27e7cf31-afff-41ab-9cfd-cb77a0508833.roa
File: 27e7cf31-afff-41ab-9cfd-cb77a0508833.roa (raw, json)
Hash identifier: UX0EzOPBL60vpTWAJ+sowazC9r2Zf7lTiIa7ojkYV+8=
Subject key identifier: F6:BF:9A:33:F5:C0:B2:DA:76:C9:1B:9D:E0:65:0B:50:BC:00:97:E3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 53CF4DBEC28EDE4BE19815FFC4C79086DF95F793
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27e7cf31-afff-41ab-9cfd-cb77a0508833.roa
Signing time: Sun 19 Oct 2025 02:31:09 +0000
ROA not before: Sun 19 Oct 2025 02:31:09 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:cf:4d:be:c2:8e:de:4b:e1:98:15:ff:c4:c7:90:86:df:95:f7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 02:31:09 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=b8430e3840674d8c47dd25845f008b63aa13cff5662daa874b7f4d0d2fddfb5d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d6:11:ef:55:65:7f:25:be:83:60:d7:9f:53:
4f:ca:51:e1:a2:a5:8e:15:22:c9:f4:1e:7b:5d:a2:
f0:67:1d:b8:6e:9d:41:61:89:c2:96:2c:e2:20:56:
fc:25:78:6d:79:0d:b8:49:b8:1b:f4:70:a9:89:0e:
7d:2e:1e:11:3a:74:58:04:ca:71:f4:5e:06:71:58:
6f:fc:b5:27:a9:97:2a:ac:aa:da:42:15:66:14:b9:
95:df:26:4b:15:3d:7c:97:f6:af:9b:4c:a9:cf:86:
00:4a:a1:6e:53:52:ca:96:0d:3c:45:bb:16:f4:31:
2f:95:31:d8:51:08:03:04:cf:67:e0:33:94:07:4c:
90:32:b6:fc:f8:23:2d:0e:7b:4f:ab:18:c2:46:93:
3a:5d:a8:ff:ff:42:1f:11:46:f7:e6:2d:5f:83:68:
78:8e:77:83:32:e2:cf:0a:ab:f6:84:e0:96:42:31:
48:3e:11:c4:34:de:61:3b:f7:3c:44:ac:75:a7:0f:
bd:d6:47:ae:00:2c:5a:33:86:f1:6b:12:f8:d6:dd:
b4:7a:d4:40:71:8a:bc:a7:64:f9:29:19:ce:d7:34:
8a:dd:c0:c9:70:b1:63:49:b2:a3:11:37:b1:2b:da:
aa:30:27:e5:68:95:1c:1e:d7:37:1d:5e:ca:af:b4:
52:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BF:9A:33:F5:C0:B2:DA:76:C9:1B:9D:E0:65:0B:50:BC:00:97:E3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27e7cf31-afff-41ab-9cfd-cb77a0508833.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.31.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:80:3e:34:03:c2:1d:7e:2e:43:d9:94:66:5d:fa:c6:70:8f:
83:67:17:ae:e1:8b:36:19:b5:f0:95:27:2e:df:9b:d6:f1:de:
9f:25:52:6b:39:2e:f0:84:29:89:e4:47:b4:20:16:97:c6:a7:
45:4e:bc:64:ab:0a:22:1a:74:22:39:00:16:d7:88:c2:47:ec:
2c:4a:fc:d6:38:2e:ea:c6:7a:ff:e0:38:43:41:e5:09:54:c4:
d0:27:de:a7:69:46:dc:ab:da:a8:d6:b2:fe:37:85:ba:8b:fa:
e0:1d:fa:a3:35:94:d5:22:0e:35:04:a8:fe:1d:66:65:e7:c2:
98:0a:26:52:f2:25:e7:d8:9d:d4:4b:95:d9:85:fb:c0:7e:0b:
aa:58:4a:15:dd:89:4f:f0:0a:af:ad:f3:55:f1:9c:b3:2f:f1:
75:fd:b8:b2:c3:5b:a0:c6:52:f3:22:c7:29:4a:f4:8c:dc:9e:
be:fd:69:7e:61:9c:8f:30:a0:c3:85:18:0a:d0:9b:1e:03:d5:
19:ab:93:3c:01:8a:24:e2:ac:03:be:e7:93:f7:7f:4e:0f:e2:
bd:b8:c0:ff:1e:51:95:e0:01:11:1e:82:b6:d7:a2:21:ed:ca:
51:1e:35:f5:72:c2:fb:c3:71:57:50:e4:c9:fe:10:72:3c:31:
ef:a3:c4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:39 2025 by rpki-client