Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/495dab36-3d9a-4568-bc6d-d7e85dd62aa4.roa
File: 495dab36-3d9a-4568-bc6d-d7e85dd62aa4.roa (raw, json)
Hash identifier: phkCNGZj9f2tfQ7tXqkiXxLEcZXp/8ueaLm7uPqc8ss=
Subject key identifier: CA:76:80:05:81:E7:82:2C:23:FF:12:15:3B:BE:6D:2C:A9:A9:5F:59
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6E2F1C335CCDE69C1BC3069B1609DBA06C755348
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/495dab36-3d9a-4568-bc6d-d7e85dd62aa4.roa
Signing time: Sun 19 Oct 2025 00:40:10 +0000
ROA not before: Sun 19 Oct 2025 00:40:10 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:2f:1c:33:5c:cd:e6:9c:1b:c3:06:9b:16:09:db:a0:6c:75:53:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 00:40:10 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=6f0d33a3a3ac572c1bb726e91e36192583fcede28cb95b1c489c335949d9c0d9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:57:cc:28:fc:9e:a9:07:a3:cd:06:f0:6c:25:
c9:5e:10:27:94:4b:27:7f:90:9c:ec:5d:e9:3a:14:
00:09:dd:c6:1c:97:78:15:5b:30:7a:48:d6:52:65:
a1:f3:83:f2:62:59:c5:60:a8:96:95:c0:a2:93:80:
c8:88:9a:0c:98:57:69:f1:fa:69:02:06:f5:2c:49:
49:4d:f9:dc:74:18:76:f0:94:a0:4d:ef:25:f9:80:
39:de:c5:36:46:ca:d3:c4:d2:70:55:e2:3a:7f:2e:
92:16:cb:1e:42:e5:ca:86:50:a3:dc:05:72:23:bf:
de:2c:82:1a:9c:d8:8b:5f:65:37:87:55:0a:10:32:
00:0a:d6:d6:b7:81:4d:9b:21:b4:d0:78:e9:d7:37:
4d:17:9f:0d:d0:13:21:b7:8e:b7:6d:78:cb:32:94:
0e:7f:1b:e4:0f:dd:af:3b:5e:c2:2a:70:b7:da:3f:
ee:c3:5d:ee:e0:70:a5:ff:5a:29:ff:d5:1f:71:17:
f6:86:28:c9:8f:dd:e8:6c:03:3b:73:87:a4:2d:a1:
06:f1:50:6e:12:af:d2:fe:ab:ca:25:2e:3c:bc:ba:
1e:f4:4e:fa:aa:bb:e8:e3:a8:1b:95:b3:e9:8c:05:
06:a9:93:1c:4d:17:80:5b:e7:95:94:aa:5d:00:7c:
05:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:76:80:05:81:E7:82:2C:23:FF:12:15:3B:BE:6D:2C:A9:A9:5F:59
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/495dab36-3d9a-4568-bc6d-d7e85dd62aa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.148.0/24
Signature Algorithm: sha256WithRSAEncryption
69:88:38:5c:4e:2a:05:9f:9f:e7:e7:12:77:c6:0d:48:7d:70:
ae:40:5b:7e:8b:06:e6:7f:a5:f4:33:d3:15:f6:65:8e:90:aa:
f5:a0:3a:e4:d1:48:8a:b7:98:b8:20:ee:6d:c2:8a:8d:94:e7:
0f:b3:c8:94:e2:05:f7:bc:9f:5a:a0:a9:38:54:97:d2:fc:85:
39:6b:f9:fb:6d:a4:84:04:d6:f4:18:3e:74:f0:e7:d2:8d:f5:
d9:7c:6d:ff:e6:e0:de:2c:47:74:a4:a3:dc:71:07:a8:12:6c:
b9:09:8d:3c:8d:70:65:3a:96:f1:04:db:67:fe:02:e6:9a:ab:
44:a3:84:2b:6a:0d:72:c9:6f:ae:16:1b:7a:8c:fc:7b:4e:9f:
82:68:08:4b:4f:09:b2:48:da:03:1e:98:54:88:04:db:e6:90:
0c:f7:1a:42:91:76:33:c0:80:eb:1b:ee:3a:32:fe:ef:5d:8a:
cf:5d:98:e8:a0:1e:18:7b:f3:1b:b3:6b:06:08:01:1e:0d:6c:
ea:22:9d:28:3c:90:02:ee:22:87:0f:cd:1a:54:8c:94:02:1f:
0c:0b:bc:8c:a6:91:9d:fc:8e:e5:cc:f0:1e:7c:e1:6e:f7:f5:
a3:84:d2:82:85:1f:a5:d5:86:a4:ad:e5:b9:9c:77:ef:2d:4d:
97:d8:57:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:43 2025 by rpki-client