Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03674f2a-cb5d-4b67-8d3b-5db11a756737.roa
File: 03674f2a-cb5d-4b67-8d3b-5db11a756737.roa (raw, json)
Hash identifier: OnKvwfM5iZTK7f5Ine1Er+xkjk2B3oXWijnp+Z54uLE=
Subject key identifier: CD:1B:A8:4B:CB:62:3D:63:B1:E2:84:2A:C6:C8:21:65:F2:E1:34:76
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 63E186A196D01D21E4AA00C49B568E07F5D5B972
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03674f2a-cb5d-4b67-8d3b-5db11a756737.roa
Signing time: Mon 20 Oct 2025 03:31:14 +0000
ROA not before: Mon 20 Oct 2025 03:31:14 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:e1:86:a1:96:d0:1d:21:e4:aa:00:c4:9b:56:8e:07:f5:d5:b9:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 03:31:14 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=549da1f803f55191c5091732455375e7547958fe9233471f7b5d74316a9292b5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a3:22:0a:96:28:2a:dd:2b:7b:2c:b2:21:39:
7e:fa:ae:2e:45:9a:78:e5:35:49:dc:b5:cb:19:e8:
e9:84:9e:23:26:f2:b6:fa:e7:f7:57:22:54:1c:66:
84:69:3a:ce:69:43:08:33:64:03:10:ba:7b:90:e9:
a6:d4:d9:9a:a9:70:97:07:44:a2:40:5b:7d:57:66:
50:21:33:ab:b5:78:d8:fe:7d:04:cc:14:b2:11:2a:
55:28:e3:57:a2:f3:f4:68:fe:9f:0e:75:bb:27:b7:
97:73:d5:c8:03:37:89:5b:f3:24:c7:de:ae:8a:91:
6e:cd:dc:90:ce:c5:62:3b:4b:a4:cb:ab:ef:83:82:
90:50:8e:6a:9b:67:17:bd:76:f0:45:f1:d7:76:8f:
91:9e:72:a5:32:7a:13:09:3f:61:85:53:0d:1c:47:
f8:2b:f1:18:e7:53:83:a9:68:a0:f1:9f:bd:11:00:
dd:45:16:46:4f:a3:66:3c:7a:ef:61:b8:1a:eb:8f:
8c:a9:61:22:76:c3:d7:04:f8:5f:98:85:17:7d:76:
ff:64:48:99:8c:fb:96:01:8e:76:16:d4:8a:b0:b9:
14:d9:c8:ce:ba:b8:58:64:eb:13:3e:37:fa:43:26:
7f:72:b0:f8:84:85:9d:bb:9e:df:d4:82:1c:ce:16:
de:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1B:A8:4B:CB:62:3D:63:B1:E2:84:2A:C6:C8:21:65:F2:E1:34:76
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03674f2a-cb5d-4b67-8d3b-5db11a756737.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.97.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:24:53:60:0a:ce:4e:ab:77:84:17:72:15:fd:ff:53:bd:07:
42:33:e0:3d:44:a4:ce:2b:fe:0c:26:26:71:e3:44:64:92:f5:
42:7a:2f:a1:20:f2:1f:f3:3d:5c:07:51:68:bf:6c:88:b4:61:
3b:e7:cf:04:ca:e2:6d:fa:ea:de:f3:34:e2:23:c7:bc:5e:de:
05:be:4c:05:2c:58:db:5a:84:f3:89:95:cb:94:c6:55:8f:fb:
be:db:91:c1:22:70:35:4a:95:f2:f4:ae:4a:20:6f:86:1a:6e:
df:43:1d:3f:a4:ef:b5:2f:cf:94:40:08:13:dc:f7:ac:c1:d2:
1e:a6:b7:10:5e:2c:7c:fd:2b:be:e4:36:9a:2e:93:4f:58:9f:
55:da:f6:70:0c:05:88:ce:8b:3c:30:83:55:e5:1a:7e:a2:08:
8a:b7:0b:21:96:3a:86:d5:44:ca:73:07:e8:ec:ec:05:c3:9a:
79:9f:53:71:c2:2d:37:7e:01:71:f7:84:16:f3:63:10:2b:db:
7c:e3:42:5e:99:c8:70:ac:08:9d:bb:7a:b9:1f:a9:11:49:bd:
9f:07:15:7c:62:f7:c5:2c:3b:ce:a5:a2:3d:c7:cc:3d:65:84:
9e:17:09:41:7f:8b:ab:15:0b:e2:64:9a:3f:fe:e1:48:cb:b0:
8a:87:9a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:49:49 2025 by rpki-client