Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbb7b80d-e799-4809-9462-a2f7aee893e3.roa
File: dbb7b80d-e799-4809-9462-a2f7aee893e3.roa (raw, json)
Hash identifier: IzeMrOfp3S3Yd9PsRo4XMMp4w9+WL6gSV4o0WZYWtzc=
Subject key identifier: E3:E0:84:C1:A2:BA:12:AC:9D:31:10:F0:3A:C1:8B:C1:C0:03:CD:4A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0588F5C37D0B5AD610FFD745330E8DDDBD19AB98
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbb7b80d-e799-4809-9462-a2f7aee893e3.roa
Signing time: Sun 19 Oct 2025 02:01:36 +0000
ROA not before: Sun 19 Oct 2025 02:01:36 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:88:f5:c3:7d:0b:5a:d6:10:ff:d7:45:33:0e:8d:dd:bd:19:ab:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 02:01:36 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=2be1bf7a549f91876658c1b0b139aec6db37df2985b361b97b45b0d1d6601abe, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e4:05:89:29:d1:ef:66:3f:b8:03:74:ad:2f:
b7:03:b6:f7:52:13:af:16:94:26:32:d2:cd:f3:bf:
9e:b9:fa:97:69:2d:93:a3:b7:68:8a:4d:b5:57:5a:
b5:18:e1:1e:66:7a:21:77:9d:e0:76:ae:61:f2:7d:
21:f3:c2:39:fe:b0:c0:e0:ed:9f:d1:77:cc:7a:5b:
df:73:ae:0d:2c:57:1c:8f:09:2e:e8:cc:17:2d:25:
d1:ee:22:69:ab:48:e5:54:14:63:3f:15:b8:5f:59:
1d:22:8d:a6:4b:46:37:4f:ca:3a:e3:d8:6f:87:04:
3b:4d:16:ea:97:57:cb:8d:b7:c7:1f:7e:5a:cf:c3:
4c:d7:10:b0:d9:8e:94:31:03:a2:42:04:77:ce:86:
be:7d:0a:1d:85:da:26:a4:6d:05:cf:9e:ea:36:36:
c5:b7:ba:50:d0:59:3e:66:cc:19:76:1d:1f:08:25:
47:56:68:cb:f2:01:99:6e:75:86:70:f4:3b:64:72:
d3:4a:e9:34:a9:b2:e3:cb:62:f9:e2:74:a2:6e:b8:
7e:0a:0c:3e:3f:46:71:39:3b:a6:c1:ca:3c:6c:d0:
c2:2a:27:64:8f:a7:89:eb:b9:f3:27:1e:0a:b7:70:
51:cc:42:44:8a:de:ef:6e:57:d7:53:44:fa:7f:44:
6a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E0:84:C1:A2:BA:12:AC:9D:31:10:F0:3A:C1:8B:C1:C0:03:CD:4A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbb7b80d-e799-4809-9462-a2f7aee893e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.248.0/24
Signature Algorithm: sha256WithRSAEncryption
27:d7:72:2f:c9:0b:a3:b3:b7:c9:e1:ce:29:e1:92:64:59:d9:
ce:1a:5f:08:15:41:87:ed:ea:5c:d3:22:75:b6:5b:22:4f:6e:
6c:69:bc:31:8b:21:5f:47:4b:e0:ea:60:ed:27:47:fb:05:02:
2a:c8:c1:0b:a9:26:1e:81:1d:20:d0:57:d9:05:a2:a5:af:3b:
65:33:e1:f3:61:64:e2:75:b5:f2:6b:e9:e5:bf:90:fd:06:bf:
ef:99:6f:25:fd:6f:ad:e8:e7:3f:90:ba:c5:72:e6:88:8c:df:
d9:f6:95:2c:f3:62:72:29:bf:1f:06:18:0f:f9:a4:90:a1:e9:
ff:1f:08:2c:e6:5b:a5:5f:b3:f1:15:86:71:49:09:04:f8:e4:
00:2c:20:30:17:2a:83:78:58:64:8b:ef:13:79:a8:11:de:dc:
41:f8:d9:d1:6e:3d:63:53:66:0a:d9:65:61:bd:2b:66:12:0f:
62:1f:b9:f1:89:10:5d:7d:dd:9d:fb:e4:ce:eb:e5:87:61:50:
23:15:b0:5f:15:f4:12:95:53:7e:d5:85:f5:f4:a5:f7:87:ed:
4e:c5:a4:a0:0e:98:10:73:a4:ce:6d:dc:d3:f9:f9:df:6c:65:
b1:eb:b8:e9:ec:bc:85:7f:05:78:53:d4:40:56:a1:b4:bd:9b:
af:46:5d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:49:01 2025 by rpki-client