Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98ca32e6-d088-4ba3-8440-22833756a4e4.roa
File: 98ca32e6-d088-4ba3-8440-22833756a4e4.roa (raw, json)
Hash identifier: 7RYVbCvph06GyzI/p2eJYQ3bldYdzVv9kqyLtJn5ICA=
Subject key identifier: E0:BA:E5:51:83:D9:BD:5A:01:EA:9C:E3:9C:3A:15:F0:8E:26:F4:12
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6B165DA9917B5A01FE2CA6D5B157986B5606CDBA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98ca32e6-d088-4ba3-8440-22833756a4e4.roa
Signing time: Sun 19 Oct 2025 03:10:07 +0000
ROA not before: Sun 19 Oct 2025 03:10:07 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:16:5d:a9:91:7b:5a:01:fe:2c:a6:d5:b1:57:98:6b:56:06:cd:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 03:10:07 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=c5c1b3feddfa8c99f3097007b59b222c9ecb8ccd2cb7e15ed5e94a0e7186d1f4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8b:27:6d:50:4a:0e:34:7b:3c:36:b1:61:f8:
36:8e:23:4d:90:ee:b4:eb:f1:8c:02:ad:7f:0d:f2:
42:69:f8:9c:75:c6:dd:b8:ec:c8:f2:05:3f:fb:07:
05:5b:ad:42:bf:74:58:eb:fc:79:1b:ff:95:57:70:
10:4b:b4:ff:ea:79:95:dd:35:fb:14:eb:ef:2c:a5:
1a:d4:3c:15:35:0c:5d:8f:d3:b1:62:0b:9a:73:0b:
fe:f1:c7:ca:ad:f3:76:ab:de:d7:82:ee:e7:25:d2:
9b:25:29:9c:e1:33:cf:83:6a:dd:7a:e4:2c:8f:3c:
21:e3:83:ce:91:80:81:65:62:63:d7:0f:88:1e:be:
9c:62:51:e3:41:60:20:6a:68:c9:1d:71:41:a6:a9:
b8:91:60:36:e3:47:70:32:76:94:b0:37:7d:d7:a5:
d6:db:3d:71:7c:b4:56:32:2f:7e:1c:fe:9c:9f:b9:
a6:c8:95:b0:c0:cb:8a:76:10:e7:f5:13:ca:fe:76:
73:42:1f:d0:9a:c3:b4:65:d7:14:24:21:b9:19:46:
14:73:48:1a:89:69:9b:18:41:34:2d:39:a0:0b:a2:
11:e3:55:c8:b2:e2:05:1e:d8:37:aa:7f:85:eb:99:
f9:9a:7d:7f:d9:e6:8b:4e:6b:17:2f:ad:19:e5:0e:
24:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BA:E5:51:83:D9:BD:5A:01:EA:9C:E3:9C:3A:15:F0:8E:26:F4:12
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98ca32e6-d088-4ba3-8440-22833756a4e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.0.0/24
Signature Algorithm: sha256WithRSAEncryption
70:cf:bf:e5:9e:e3:08:cb:6a:6b:c9:71:ad:48:cc:45:20:54:
aa:63:64:98:e5:5a:43:c8:ab:32:1d:12:a1:b8:10:a7:0f:bc:
0e:23:fa:c2:67:72:37:4c:37:b7:a4:92:cd:66:bb:49:83:1e:
76:1d:97:a5:3d:a5:1b:c5:55:d9:3c:38:ed:15:72:f8:b4:3a:
75:2b:51:fb:60:99:bb:ab:b7:8d:2d:f4:87:81:5a:f7:55:b7:
f9:00:e4:a7:04:9e:5d:35:9b:77:12:6e:28:37:43:d7:6f:66:
f1:10:50:e7:40:2c:08:cd:29:d4:7d:a6:10:11:a1:36:48:d8:
78:4f:92:18:31:89:25:74:5a:18:ff:fb:4b:ca:71:5d:f5:62:
4c:9c:c7:c1:ea:a5:e7:4a:2c:43:06:f8:5c:86:47:15:53:1d:
99:a3:85:ac:82:27:81:f1:09:c6:84:20:09:39:ed:50:60:10:
fc:49:38:b0:55:98:bc:88:57:df:90:bf:2e:8e:4b:65:ec:10:
56:f9:8d:5d:c1:f6:4d:25:c9:3c:fb:1e:cc:83:12:55:3c:10:
a2:45:5c:75:8f:52:0d:b9:8d:da:8f:42:4c:cb:27:49:55:bf:
20:1c:91:ee:31:86:3d:8c:b1:59:c9:f8:43:c4:6a:9c:d4:96:
df:53:16:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:04 2025 by rpki-client