Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12291c69-c3f7-4b31-9223-c8cfde526fd9.roa
File: 12291c69-c3f7-4b31-9223-c8cfde526fd9.roa (raw, json)
Hash identifier: RGArYboErdcedPmgjoMJYpvyA/kkcwQigDZ/MpV3XuM=
Subject key identifier: 34:25:50:BE:3F:64:2E:76:CB:98:9E:AC:CA:8D:B4:1F:EA:0D:AE:41
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0BB82D450208F12E22AE71E579CB89E4296E148F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12291c69-c3f7-4b31-9223-c8cfde526fd9.roa
Signing time: Mon 20 Oct 2025 05:42:16 +0000
ROA not before: Mon 20 Oct 2025 05:42:16 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:b8:2d:45:02:08:f1:2e:22:ae:71:e5:79:cb:89:e4:29:6e:14:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 05:42:16 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=8f1b1fe0d280ccdaaa945d3a8a1c55e6db62a5e367dad67f5d928e4313168bb6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0c:bf:85:9b:7d:03:88:41:a3:0b:56:01:0d:
1c:5e:be:b9:17:e3:80:35:2d:79:a5:d8:bd:08:0d:
85:dd:0f:d5:b1:39:4a:f1:15:fe:bd:c7:16:86:01:
ba:70:d5:c9:3f:3d:2c:50:37:36:1d:f4:a4:c4:28:
e2:c0:2c:91:b9:b0:38:12:99:45:29:d5:86:ef:8b:
81:de:25:b7:68:c1:50:57:24:a1:69:27:e1:d1:da:
1e:d3:e9:75:a9:be:da:76:ba:59:22:4f:87:41:09:
f2:2a:5d:90:df:b7:2d:37:1c:09:40:04:e3:31:c9:
df:ca:7a:86:e6:6a:fa:5d:17:d1:f8:69:82:05:ac:
9e:72:67:97:65:e3:5c:83:e9:89:22:90:7a:dd:4b:
88:dd:53:0b:b5:5f:f2:91:e9:2f:03:fa:bd:b3:9d:
5f:5c:1e:fe:7d:be:f7:f5:53:29:4e:19:d1:0e:72:
82:e1:0c:90:79:7e:04:38:b9:95:5b:d3:28:c8:c9:
a3:2c:1f:54:ee:a7:2a:a8:2d:dc:b5:e9:42:47:ac:
5e:aa:51:7b:17:2b:5d:44:55:ff:ce:ba:4d:89:e0:
76:42:00:e1:01:e8:8b:e2:2b:b2:af:9d:5a:59:8d:
99:5d:c5:a6:29:b2:c1:d3:e4:e2:09:69:12:11:c2:
e2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:25:50:BE:3F:64:2E:76:CB:98:9E:AC:CA:8D:B4:1F:EA:0D:AE:41
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12291c69-c3f7-4b31-9223-c8cfde526fd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.221.0/24
Signature Algorithm: sha256WithRSAEncryption
59:7d:3b:f0:59:34:eb:73:67:29:59:7a:dc:b0:65:21:d2:72:
56:d8:5d:6a:95:df:a3:93:39:50:59:21:d5:a1:17:4e:cf:07:
db:d2:52:6c:e3:7a:20:e0:53:e5:2a:03:22:3d:88:f7:51:82:
4a:59:31:ff:69:f2:83:c8:c1:a9:20:1e:0d:e7:1a:5d:37:85:
08:8f:50:99:68:cb:28:0f:36:60:23:bc:6e:53:18:54:c7:cd:
14:16:af:ae:68:30:5d:76:42:02:a2:4a:40:d9:e4:10:4a:7e:
d6:76:b9:36:83:99:60:cc:d8:03:8f:d6:1f:b4:48:f8:d8:71:
ef:75:f9:63:01:cd:de:42:41:2c:cd:18:96:70:ec:3b:83:34:
03:89:68:fe:a2:42:04:4e:6a:6e:36:10:70:41:3f:30:84:9b:
67:f5:ff:42:30:65:07:ea:3d:83:70:81:90:3f:93:e4:d0:42:
a6:00:16:70:0b:a2:ad:80:e1:69:3a:82:50:8a:3b:45:26:a2:
6b:7f:5b:40:1c:88:9f:44:a4:c8:a1:c1:1d:6c:a2:ae:a8:68:
dc:0a:8f:36:c8:f8:73:83:e1:ce:d8:79:51:d2:51:3b:4a:dc:
da:8c:c9:ed:69:85:2a:64:41:3b:c3:71:0d:58:42:13:97:e5:
bb:1f:05:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:48:10 2025 by rpki-client