Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06f772e7-0919-45dc-87f6-954bbae415e6.roa
File: 06f772e7-0919-45dc-87f6-954bbae415e6.roa (raw, json)
Hash identifier: FGtF+YgMj4b23663cCKhsl6JH4L98z3TvqnQdERqKwo=
Subject key identifier: 44:65:46:C4:BF:F6:3B:4C:54:7F:91:64:FE:E7:61:46:BE:BF:A4:21
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 60123A27D3F1582FAF34034C6044F795F9EDB7CC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06f772e7-0919-45dc-87f6-954bbae415e6.roa
Signing time: Mon 20 Oct 2025 00:52:12 +0000
ROA not before: Mon 20 Oct 2025 00:52:12 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:12:3a:27:d3:f1:58:2f:af:34:03:4c:60:44:f7:95:f9:ed:b7:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 00:52:12 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=20a5268afda1b769f7ed34211c817c8ee863a2298af2e9ce610aa3118f44beb1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0e:48:a5:12:28:17:af:7a:bb:1a:c0:86:ed:
b9:21:83:18:d7:30:b5:00:3a:12:c8:8f:11:3d:d1:
45:26:2b:ac:79:56:2f:ef:66:8f:1e:5f:5a:81:5c:
73:e8:d3:a8:73:9d:21:42:5c:6e:19:af:25:ea:78:
ce:ce:b8:60:5c:83:a4:32:fb:d0:1b:4b:1f:a8:0b:
ab:71:5e:a1:2c:1c:8e:54:53:44:9d:cd:6d:59:c5:
b3:81:db:f9:d6:1c:04:62:0e:be:92:bb:0c:70:e7:
14:75:99:ab:b8:d9:e9:4c:42:73:69:d9:e0:be:98:
ea:63:c8:48:31:d5:be:3b:5e:2e:43:dc:5e:65:2d:
2f:0c:f3:2e:96:ca:16:69:34:2b:e3:ed:80:35:dc:
e2:5a:a0:fd:96:eb:3d:fa:53:c3:13:41:2f:ab:30:
2b:23:f3:89:6b:47:b9:22:db:ca:41:8b:6d:18:a8:
2e:8e:4b:70:75:91:70:e3:48:a5:a4:7d:9c:6c:ef:
8f:2c:d9:9f:ea:55:87:0e:5b:8f:6e:4c:01:43:92:
f1:ba:45:c9:31:11:f2:03:0a:14:95:04:85:a3:1c:
3c:47:68:f3:2d:94:1b:10:8a:3d:80:5e:32:ee:8b:
4a:0f:e7:c5:53:d8:f0:f0:3b:cb:86:f8:eb:7c:ae:
99:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:65:46:C4:BF:F6:3B:4C:54:7F:91:64:FE:E7:61:46:BE:BF:A4:21
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06f772e7-0919-45dc-87f6-954bbae415e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.169.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:ea:0b:07:01:ea:6c:7c:a8:64:70:b2:a3:6f:e7:f4:8b:5d:
7b:13:d9:88:b6:08:d6:d0:46:f5:12:20:38:a9:15:36:96:7f:
91:0b:da:fb:e8:c3:bd:75:7d:7c:64:0f:30:08:84:aa:31:6f:
b1:1c:1a:de:49:a0:52:d5:d2:5b:23:9a:3b:6f:b1:7b:fd:dc:
ea:64:46:a2:50:da:02:78:d5:ee:e3:1a:5d:8e:49:2f:12:56:
d0:69:d9:31:43:67:5c:44:b0:a2:d9:03:49:b8:a4:bb:2e:77:
b9:d8:5a:e2:39:a1:3f:da:11:0d:10:11:a8:af:aa:e4:27:4d:
c3:f5:e4:23:b0:94:03:dc:85:b5:b8:e5:83:3f:5b:6d:2e:b7:
ca:fa:79:ad:0f:3b:8c:34:db:62:80:4c:c2:8a:03:6a:23:14:
9d:d5:6c:41:97:fa:4f:8c:aa:d2:63:54:70:2a:be:9b:e5:7d:
26:ec:ad:dc:9b:a0:ba:54:91:b7:7c:00:e3:a8:2b:3d:24:e7:
aa:22:71:e1:03:4b:3a:5a:b4:53:dc:75:ec:8e:91:8a:aa:13:
9f:bc:c6:b4:47:76:8d:aa:16:03:75:97:d9:f5:07:ee:6c:55:
a2:90:09:34:0b:90:20:3d:f6:da:e2:8e:25:f7:be:d3:f5:4d:
a8:1e:26:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:07 2025 by rpki-client