Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c22fd94-3e0c-4191-a993-66dd62deafd1.roa
File: 0c22fd94-3e0c-4191-a993-66dd62deafd1.roa (raw, json)
Hash identifier: D3uZ4h/J+5PAfYr4XEeKfX0rHpFPcIJ1sE+O6cF63xI=
Subject key identifier: F6:DE:74:8F:12:16:69:29:10:AC:D9:98:D3:1B:3A:F9:64:C6:7B:27
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1DFF551B8A8432C57AA3696E139BE9921AF037AF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c22fd94-3e0c-4191-a993-66dd62deafd1.roa
Signing time: Mon 20 Oct 2025 00:52:11 +0000
ROA not before: Mon 20 Oct 2025 00:52:11 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:ff:55:1b:8a:84:32:c5:7a:a3:69:6e:13:9b:e9:92:1a:f0:37:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 00:52:11 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=3372df043088989b3de98042ec5db00f845f2b6294005b113c87a03ff8fa3cae, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:e6:30:b1:f9:c3:3d:c0:21:aa:80:25:a1:
49:9c:a7:e5:1e:31:62:4d:3b:b7:ec:b3:b5:17:46:
f4:a6:aa:86:36:11:04:19:b3:12:d8:73:27:a6:36:
1d:f2:e0:78:ee:62:52:be:a6:8a:c1:d4:22:e0:58:
5a:6a:d1:2d:4f:6e:28:0d:01:a3:3f:09:b2:d7:2e:
97:3c:3c:b6:cf:39:80:89:39:83:9b:ad:32:60:0b:
b1:c5:66:8d:49:fa:8b:20:ba:bf:78:3d:74:f1:3c:
e8:37:03:51:a0:79:22:56:72:e4:77:07:58:63:71:
9e:55:2e:29:a4:e1:8a:77:b3:ea:26:8a:3f:08:64:
0f:f0:02:92:26:6c:96:6a:15:50:5d:c6:e6:34:0b:
62:8d:e0:17:b8:81:6d:b3:84:38:be:d3:c9:77:f2:
b1:ee:4c:14:72:7c:61:c3:b5:cc:b9:11:e5:d6:d0:
c4:6f:94:84:83:0c:9e:37:9b:df:aa:79:9d:75:fe:
b3:f7:44:f5:64:ca:23:54:1f:20:c0:8e:3b:ef:46:
32:ac:b9:7e:fb:29:40:3d:f6:7b:1c:f3:54:f9:83:
10:77:dd:f1:32:50:ad:74:a9:79:2a:84:4f:f1:ec:
4d:a8:2f:72:f9:1b:81:94:3e:cd:a8:7b:c5:48:7c:
49:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DE:74:8F:12:16:69:29:10:AC:D9:98:D3:1B:3A:F9:64:C6:7B:27
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c22fd94-3e0c-4191-a993-66dd62deafd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.139.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:ba:f2:cf:1c:c3:5b:91:f3:b2:22:a6:9f:0a:3d:14:dd:66:
15:2b:09:c5:a7:d5:86:a5:c8:26:91:fb:87:85:02:33:02:93:
94:17:a4:bb:db:34:f0:a6:d9:74:7f:e5:d4:56:c1:26:8f:9f:
86:88:25:22:28:12:0a:23:33:49:77:7b:5e:cc:11:7f:5b:be:
76:ee:1c:54:d6:5c:30:46:56:cd:68:03:33:00:97:3a:b3:40:
bb:b2:d5:b9:f7:ba:a7:8b:43:48:17:e3:5e:a9:52:8b:79:e2:
45:5f:4b:e9:9c:59:45:33:96:3a:28:cd:51:60:78:f4:1c:b2:
37:5c:a8:f4:ed:73:97:a6:aa:f4:53:29:62:55:fa:31:49:7d:
19:3f:94:50:dd:e9:22:75:a0:85:5f:c6:d8:35:b7:73:7b:a1:
86:9f:0e:40:dd:c4:30:06:96:f1:5d:59:f4:af:b0:f6:65:b6:
fd:66:f2:5f:2b:01:71:84:08:08:23:81:f7:0c:cf:ce:11:8f:
47:17:24:a3:5d:92:86:e6:53:8a:82:89:4b:95:85:60:98:38:
93:31:5a:ac:c8:bf:8a:f7:d7:00:29:bf:9b:78:02:04:b6:0b:
d8:5c:97:8b:60:55:bd:5e:3b:9d:32:3e:64:ed:d4:b2:4b:18:
45:b7:cc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:53 2025 by rpki-client