Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dfbe158b-310f-4d32-9e8f-64fe6e63ff5c.roa
File: dfbe158b-310f-4d32-9e8f-64fe6e63ff5c.roa (raw, json)
Hash identifier: ZuDYcmDq6qaYswcWdvsm6bslV6KvAWMWENLkgx0yqh0=
Subject key identifier: B4:8D:30:35:45:FA:4D:75:C2:E1:07:35:ED:EA:24:01:11:06:A9:81
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 22A0F7663BF5ADDF9F26E8ED232C62F2887BA790
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dfbe158b-310f-4d32-9e8f-64fe6e63ff5c.roa
Signing time: Sun 19 Oct 2025 00:50:08 +0000
ROA not before: Sun 19 Oct 2025 00:50:08 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:a0:f7:66:3b:f5:ad:df:9f:26:e8:ed:23:2c:62:f2:88:7b:a7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 00:50:08 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=b27addf1f0496bfe3abbb0e7d5f8acb2be509e3da42ef233028601112f599555, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ea:bc:0d:3a:2a:75:2c:4d:2a:f6:f2:c2:94:
a4:0e:0a:ce:fe:b3:dd:f4:9f:0b:54:82:ea:88:01:
5a:19:8b:1a:26:e3:7c:38:8f:fb:47:05:8d:56:bf:
2a:8a:46:f9:f2:a8:4c:52:42:a2:f2:f6:63:e2:94:
2c:6b:2a:f4:11:a3:5b:09:00:ae:ea:ca:5f:76:ed:
d4:8a:11:30:14:36:ec:3e:a5:de:15:6e:bf:99:49:
a4:c4:fe:e6:cf:b9:6e:1f:54:a1:33:31:30:b2:7d:
68:b1:0f:65:e2:1c:9a:de:79:c5:7b:be:3d:c9:a6:
fc:37:21:ea:aa:92:50:f2:36:d9:29:61:de:7f:b3:
00:57:b4:5b:d9:1e:74:3c:cf:76:99:a9:78:dc:e1:
b7:3c:d6:73:ff:7b:7f:8c:03:89:ae:3c:76:f9:54:
ec:91:cd:b9:1d:d4:f7:ea:86:d7:2d:61:1e:d4:c6:
2b:ea:2f:cd:e4:85:41:28:aa:37:ac:35:f2:fe:1b:
c0:78:9d:66:5a:fa:2a:2b:88:9d:e5:58:0b:af:34:
59:c8:9d:72:5d:56:1b:9e:e8:8f:e6:dc:4e:9a:57:
b5:ba:f9:04:8f:31:41:f9:8d:83:53:37:60:ba:82:
d5:b1:f1:b7:67:59:07:84:b9:ba:73:48:29:71:54:
05:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8D:30:35:45:FA:4D:75:C2:E1:07:35:ED:EA:24:01:11:06:A9:81
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dfbe158b-310f-4d32-9e8f-64fe6e63ff5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.25.0/24
Signature Algorithm: sha256WithRSAEncryption
40:96:b1:d4:90:db:dd:ed:33:73:e1:70:58:46:b3:63:f0:2f:
e7:33:33:67:88:a4:35:11:7a:f6:b5:1c:b1:96:cc:6a:da:b3:
c9:af:8f:4f:55:a8:74:ed:53:2c:00:10:2a:ad:e9:65:df:f9:
8a:07:40:c6:6b:d8:e3:16:02:3a:39:6c:80:e7:36:47:89:af:
45:88:05:2e:cc:e4:af:49:59:f7:b7:13:b3:7b:3c:9d:06:5f:
59:fc:07:00:51:48:bc:b9:81:4d:97:88:99:d6:49:a9:b3:00:
39:46:fd:7d:f4:29:75:49:eb:4e:12:b9:e7:6f:ac:f5:30:22:
33:e5:32:a9:66:fb:7b:6c:cd:45:03:53:83:29:ca:c4:f6:06:
d7:de:3f:f6:76:f2:09:1f:0a:7c:31:1a:bf:db:55:a3:5b:cd:
10:ab:47:5d:a8:d0:7a:ab:4b:27:48:94:ea:7a:6a:62:88:27:
d4:26:9e:47:65:b0:2d:5b:1c:df:7d:6d:c9:8b:8b:c7:f0:72:
27:36:55:40:36:94:17:69:95:2c:25:31:02:72:01:af:3d:ae:
4d:bd:f9:28:3f:46:da:52:4c:49:d8:48:64:e6:3d:fe:be:44:
c5:82:87:e5:bd:b4:ec:bc:7b:09:8a:ce:ef:24:73:f1:71:b3:
dc:94:ab:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:44:19 2025 by rpki-client