Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed427b07-905d-4a79-9c8f-76b931190382.roa
File: ed427b07-905d-4a79-9c8f-76b931190382.roa (raw, json)
Hash identifier: 2V7Gqpy5uEbPKDn8VrbHpBzT0HMjpkd1IHAgOvKdjVQ=
Subject key identifier: A7:BC:EF:DA:81:DB:66:41:8D:6B:EF:F8:5D:03:47:18:5F:2F:85:9B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 232DDB0F68BE51438EAA99CC16982D05AF35DCA1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed427b07-905d-4a79-9c8f-76b931190382.roa
Signing time: Sun 19 Oct 2025 00:41:26 +0000
ROA not before: Sun 19 Oct 2025 00:41:26 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:2d:db:0f:68:be:51:43:8e:aa:99:cc:16:98:2d:05:af:35:dc:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 00:41:26 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=c372f2f6ffbb54c25364471ce6c243cd81c1af31534f6472a7e5e0c4aa136e47, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4c:9c:c8:05:0a:3c:ba:d9:85:4d:1f:3b:f4:
c9:10:34:38:c2:9c:59:5e:62:48:48:00:80:e2:f6:
2d:c3:5d:73:82:37:0e:c3:dd:f5:b6:99:4c:07:12:
98:d4:61:ae:61:f2:9c:71:69:a3:9a:eb:1d:fc:a0:
2f:72:c1:cb:9f:c5:d9:74:5b:e9:2b:84:0f:04:b9:
ce:32:c3:43:45:28:9d:d4:ee:d1:c4:4f:4a:3d:1d:
da:61:31:cf:61:54:de:e2:d6:79:7a:98:9e:37:b3:
f6:6b:41:04:5b:d1:6b:56:ce:e4:dd:b9:16:df:25:
34:54:08:f5:c2:60:77:cb:98:82:e8:d8:00:3f:ce:
33:d2:18:f6:4b:08:40:6b:60:8c:88:3f:1b:6b:f2:
ff:ab:9e:d8:ab:a7:7d:83:3a:be:a3:1c:7b:4f:a3:
50:e0:70:44:ae:8a:35:cc:2d:42:e4:5d:c7:c6:7d:
58:b5:be:db:68:56:70:94:25:bf:e1:c3:5a:b0:30:
cd:91:15:7f:e5:3d:94:9d:d6:c5:6c:5c:0c:3b:06:
e9:7b:c8:90:7d:84:e3:af:22:cf:44:9a:88:0d:9b:
74:c0:8b:c0:99:33:a0:d8:38:e6:0c:15:57:2c:20:
67:19:9b:6b:0b:e6:34:d9:ee:55:1f:64:34:33:03:
ab:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BC:EF:DA:81:DB:66:41:8D:6B:EF:F8:5D:03:47:18:5F:2F:85:9B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed427b07-905d-4a79-9c8f-76b931190382.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.156.0/24
Signature Algorithm: sha256WithRSAEncryption
00:fd:bf:52:18:e6:12:8b:9b:9f:10:0a:e1:18:31:c9:96:dd:
eb:e7:33:dc:c1:02:78:b1:11:dc:b9:98:2f:97:b4:88:ee:89:
08:fa:40:bf:92:06:48:3a:d7:73:0a:65:d6:b1:56:b2:c6:c3:
4b:5d:76:69:62:3f:19:3e:66:8c:f0:b7:81:bb:d7:50:2b:61:
d9:7e:9b:b8:2b:24:06:80:61:ed:e2:95:16:d7:41:b5:44:5a:
08:b8:50:19:df:75:42:e5:35:5d:1e:f3:27:0d:2a:b5:e0:5d:
41:7f:4e:48:ef:4e:18:47:9f:9e:04:b1:0a:90:26:5a:38:4e:
71:1e:78:8b:ea:f7:47:77:f7:fa:6c:92:a4:36:08:c4:bc:1b:
fe:96:10:0c:19:e8:65:33:ae:2e:67:10:96:0c:37:5f:76:c5:
fa:ff:0d:10:4f:b6:41:a1:7a:35:f6:fe:6f:8a:65:03:be:21:
8c:69:b9:2a:1a:4f:4a:87:ff:82:5f:b7:03:2a:a1:87:69:41:
16:0a:4d:78:cf:c7:82:15:b4:06:11:8a:49:ba:08:d3:aa:28:
22:54:9c:c3:b5:f0:ab:6a:18:08:c0:04:8c:77:ec:76:55:f9:
26:f0:8b:15:98:66:39:b0:06:45:c2:db:ad:75:60:e9:82:1a:
f7:aa:bc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:04:54 2025 by rpki-client