Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4c3fbf1-e0d1-4a02-974d-170f10a48474.roa
File: d4c3fbf1-e0d1-4a02-974d-170f10a48474.roa (raw, json)
Hash identifier: 5x1cqxRRelk5B5BZ/OdLmOEbIas8/dUYwlCgc1JRnuU=
Subject key identifier: 19:1E:3C:8D:08:B0:04:A6:26:EA:E6:92:0D:26:A4:E7:45:AA:CC:1F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 609D7BC006C3AA1C15EDF6D8138FC66F43587081
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4c3fbf1-e0d1-4a02-974d-170f10a48474.roa
Signing time: Sun 19 Oct 2025 00:40:51 +0000
ROA not before: Sun 19 Oct 2025 00:40:51 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:9d:7b:c0:06:c3:aa:1c:15:ed:f6:d8:13:8f:c6:6f:43:58:70:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 00:40:51 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=114e0f282707d576b2a5cdbdf7aa3bcff8fe80cd5d0d2678547399378bb22e79, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:54:27:a9:cd:66:fd:86:2e:e4:11:b9:2a:bc:
fd:3c:2d:1d:b1:3d:64:46:1a:d4:a1:fc:a9:9e:a4:
08:79:8d:4d:6a:55:dc:54:6f:be:4f:df:b8:e7:0d:
90:8d:f0:ec:41:71:b2:f5:6a:3d:92:91:5f:a1:5f:
1b:0f:d7:bf:4a:7f:70:d8:df:62:e4:97:f7:05:ae:
91:21:f0:cc:04:f4:c3:5d:cc:3e:c2:73:5b:2a:ee:
89:ba:22:23:79:8b:e6:f3:1a:68:5d:40:fc:33:a6:
83:02:ed:39:31:bd:ff:45:37:2d:12:52:26:0e:e7:
cd:da:93:dc:71:68:43:54:d9:e8:8d:aa:d4:81:bb:
9c:47:50:3c:95:00:be:ae:fc:61:b3:59:36:2c:ce:
df:53:9c:44:45:50:bb:03:3f:18:26:c4:d0:f7:21:
e9:97:7e:b9:6f:4b:a6:bb:a4:ac:75:1a:87:4f:f5:
51:47:a5:57:42:9c:07:1c:80:26:6d:35:63:23:bc:
16:b2:8b:8d:cf:ac:c8:44:8f:6c:a1:24:fb:b0:cd:
1e:48:92:9f:b9:a8:0c:2e:3b:95:1b:95:bb:09:a3:
98:3a:e3:20:5a:88:b5:a2:c0:98:8e:ba:de:aa:10:
9f:5e:44:f0:f1:fd:30:14:d9:fd:eb:67:5c:ca:6d:
b7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1E:3C:8D:08:B0:04:A6:26:EA:E6:92:0D:26:A4:E7:45:AA:CC:1F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4c3fbf1-e0d1-4a02-974d-170f10a48474.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.178.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:71:1d:e8:10:16:21:55:33:32:ef:cc:ba:02:aa:b5:dd:ff:
2f:a4:78:ba:95:1b:37:7a:af:98:3b:2b:e8:6c:27:71:a8:9f:
b4:93:da:0e:00:3b:32:cf:e9:95:55:39:01:54:45:d7:54:89:
b5:58:a7:1b:cf:35:0d:68:3d:99:05:01:27:a5:e5:93:56:95:
e7:84:2d:83:10:ac:21:88:ee:61:7c:67:96:8e:10:84:4f:95:
a5:3b:c4:65:19:57:20:07:12:54:3c:f2:93:de:c1:b4:79:27:
0a:a0:6e:ba:ff:a2:fb:10:e8:e7:67:f6:8b:3c:4d:c9:7a:f6:
31:c3:47:80:cf:83:86:53:a1:02:1e:54:f0:28:43:61:4a:3d:
07:59:65:48:8a:26:fd:a8:75:1f:35:77:ee:c3:be:76:bf:ee:
01:05:05:f4:c2:82:ee:92:f7:be:7e:62:e5:de:75:fb:9c:8b:
d8:9b:4d:4a:f2:2b:2d:b8:4e:eb:f7:10:0e:1c:b3:70:06:cd:
95:0e:6b:d8:d8:2b:b5:db:0a:b0:07:12:cd:0b:c9:69:6e:07:
d0:bf:d7:54:37:54:3e:b8:0f:0a:f7:37:d7:ba:52:cf:c6:fa:
7c:1c:86:92:01:a4:c5:09:fe:0e:46:c6:1a:48:e4:f6:95:05:
cf:39:79:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:44:28 2025 by rpki-client