Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/163224a0-6b3e-47d2-8a72-107d722b68f2.roa
File: 163224a0-6b3e-47d2-8a72-107d722b68f2.roa (raw, json)
Hash identifier: n90poC6QagDQPfs1kG2R4IWVYg5lNyPVmOzTzueJPk0=
Subject key identifier: 27:A0:B0:5B:9D:AF:84:D2:D9:A3:82:A7:95:D4:B1:16:A8:6A:8E:84
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 64E71EEE5C1EFF19FDFEF094A9943E662FA0980D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/163224a0-6b3e-47d2-8a72-107d722b68f2.roa
Signing time: Mon 20 Oct 2025 02:32:25 +0000
ROA not before: Mon 20 Oct 2025 02:32:25 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:e7:1e:ee:5c:1e:ff:19:fd:fe:f0:94:a9:94:3e:66:2f:a0:98:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:32:25 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=a64c58a461fa184ad8ac147eedeffccfff827159696dddb6b0f033cd476046de, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d1:9e:cd:05:c0:13:5c:bd:3c:94:57:24:c9:
e1:68:c8:d1:ec:9c:00:0d:01:ae:15:c5:c7:a8:18:
36:33:c7:0c:0d:34:10:2f:c9:11:39:8f:f2:39:43:
1a:61:c7:9d:bb:a9:1f:64:f1:bc:40:80:1b:dc:8f:
e9:97:25:66:3b:0c:12:f1:6e:a4:fe:36:34:ec:d2:
6d:36:cb:77:00:df:e2:87:a1:26:ca:d3:64:2e:41:
e0:1a:5c:b4:69:82:33:47:89:23:0f:c7:00:e2:73:
03:bf:0a:6d:9b:d6:a3:bf:b3:dc:ac:c8:f3:a6:a3:
e8:c3:b1:a0:ed:11:87:77:35:d0:ab:ef:1a:13:40:
cd:33:03:0f:b9:b1:4f:a3:96:b5:ab:1a:4b:a4:6e:
e1:01:88:ce:e4:c1:44:70:ea:eb:01:5e:79:fd:4a:
6e:a0:8d:f5:a1:27:d2:90:b6:8e:01:81:45:34:f9:
19:58:16:90:7e:e0:5c:d0:c8:f2:d0:a6:e3:c3:35:
a9:14:27:12:42:50:97:d1:e1:9c:0d:cb:5e:6c:fc:
e0:ae:31:45:08:87:1a:6d:26:52:ed:36:e3:0e:b7:
51:11:9c:4d:9d:2c:b6:f1:76:79:43:67:36:f0:6d:
69:d1:5b:ac:7b:4b:37:57:be:db:cb:8e:a4:84:e1:
52:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A0:B0:5B:9D:AF:84:D2:D9:A3:82:A7:95:D4:B1:16:A8:6A:8E:84
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/163224a0-6b3e-47d2-8a72-107d722b68f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.64.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:e3:24:3e:4a:cd:1f:e0:52:21:fc:8c:ea:9c:d4:28:fe:c1:
64:53:2e:25:be:e9:e5:59:73:58:a5:21:2f:e4:7e:d7:17:90:
b5:32:09:40:66:93:37:90:8e:04:d8:83:3f:be:11:91:16:16:
1a:c8:1c:aa:c0:3a:fe:38:60:30:22:5a:38:0e:5d:9d:85:35:
c3:96:a1:45:48:c7:89:bb:f3:bd:eb:c4:9f:d1:30:64:44:ac:
58:03:c6:92:7c:ba:98:85:9f:47:bb:af:ba:da:df:65:c3:65:
a1:89:a7:31:01:df:6a:ef:d9:ce:82:74:ce:de:9c:59:54:c2:
92:f4:47:58:6f:40:76:11:7f:70:aa:38:24:a1:46:1c:e1:73:
69:f9:51:aa:60:be:ba:df:02:3b:83:a9:c6:af:01:f0:96:d1:
97:58:da:b7:27:5b:6e:43:56:cf:46:b6:53:8e:45:31:67:40:
40:88:38:07:ff:c6:c3:ed:47:99:41:20:03:06:96:61:c4:f0:
a5:94:fb:31:90:d8:b5:a9:91:c6:de:cf:8f:16:6b:6a:83:11:
13:1c:d5:2b:89:e3:5a:40:37:73:1b:3a:75:86:64:f8:c8:a5:
05:55:1d:fc:3c:7f:f9:9f:5d:85:0a:64:94:d5:42:04:61:3c:
82:c4:43:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:16 2025 by rpki-client