Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22bf17f8-84b9-4a8f-ad49-e92245418d12.roa
File: 22bf17f8-84b9-4a8f-ad49-e92245418d12.roa (raw, json)
Hash identifier: PoFBIpS2IXLKJemP6L7KAd2qVzt2WU1Y5O7aa4tdJnk=
Subject key identifier: AC:2B:9A:5F:64:63:7C:00:D0:22:62:41:2E:F2:C3:9A:7B:EE:D6:B5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0664259757BD98585B698BBB895A693741F3C4C0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22bf17f8-84b9-4a8f-ad49-e92245418d12.roa
Signing time: Mon 20 Oct 2025 02:51:40 +0000
ROA not before: Mon 20 Oct 2025 02:51:40 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:64:25:97:57:bd:98:58:5b:69:8b:bb:89:5a:69:37:41:f3:c4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:51:40 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=57bc51f94fd09260d71179ff9226d998d853adbc5482ae64837e564849e20a1b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:38:e9:66:0f:2a:16:71:76:53:cf:f9:a7:ac:
c2:94:f3:38:23:09:f1:20:f4:6c:f5:8a:0f:47:eb:
3a:99:5a:8d:b7:11:09:8d:eb:c5:a3:44:ed:1b:df:
57:02:96:f2:cc:0a:47:c2:29:ad:52:70:a3:9d:31:
ee:77:56:48:35:87:8b:f1:7e:54:6e:de:b4:21:34:
22:88:91:59:f9:a5:12:03:e9:a4:d0:aa:ef:cf:16:
39:5f:90:98:71:bc:59:39:d5:71:65:ee:36:d1:a1:
e8:a0:06:76:e6:f9:85:60:d6:bf:69:9c:b0:c7:99:
a9:50:7f:4f:1d:be:dc:5c:43:89:c2:82:b2:d7:2d:
17:01:d3:16:e6:9a:50:6e:fc:fb:e0:94:32:a6:05:
79:12:b0:77:15:d2:c9:3a:5f:95:6d:f5:d0:9a:60:
7c:be:13:7a:1c:17:b3:fb:c5:f7:16:76:6f:88:9f:
f1:b8:17:ac:2d:bd:97:c6:94:87:67:44:fc:81:2c:
2e:7f:fd:9e:3d:ab:a8:bd:07:06:5f:af:3a:5e:49:
8e:ff:1c:8b:ed:a6:08:13:e8:16:bd:49:01:55:6b:
6e:a8:56:b6:a2:d6:a1:7a:83:b3:c7:d9:03:01:b9:
9d:8e:c5:c9:55:97:46:26:65:d0:48:79:af:6f:7f:
9b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2B:9A:5F:64:63:7C:00:D0:22:62:41:2E:F2:C3:9A:7B:EE:D6:B5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22bf17f8-84b9-4a8f-ad49-e92245418d12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.123.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:44:c0:f0:14:e1:a4:cd:65:5f:a7:0d:fc:0a:00:a0:b2:cd:
d5:e7:49:5c:b3:d4:8e:c5:b5:ee:cb:0a:80:8b:13:35:1d:56:
65:72:20:ee:5a:eb:03:a2:a5:02:d7:d2:48:a1:06:4b:65:7c:
b4:61:07:e5:ff:a0:7c:2b:20:d9:96:ed:62:7f:39:f7:7c:3c:
0f:cc:78:72:dd:8d:2d:a2:d7:79:94:6c:3c:a5:aa:e9:cb:22:
d6:9b:3c:ef:fb:6c:88:93:1c:92:d8:e5:7c:61:c0:ba:2d:70:
2e:50:3b:88:7c:79:ee:bd:4f:40:ad:55:0a:48:5f:3b:a0:2a:
04:29:c4:1c:a0:2c:35:a5:a8:85:53:63:b4:59:6d:30:70:39:
26:6c:af:89:91:20:fd:66:42:8e:3d:ef:24:01:df:a1:30:17:
d9:1c:18:0b:67:de:fe:b9:63:0d:39:0f:44:9a:38:12:5b:a8:
2d:d5:10:df:c4:2d:94:c0:5a:7d:b9:23:dd:36:a0:7d:d1:31:
44:fa:6b:67:bd:25:33:07:83:e9:a5:b4:57:fa:3c:3e:d0:4b:
3f:06:f9:6a:2e:27:3f:79:a3:d0:e7:23:48:7b:25:8d:7a:c4:
a1:ae:18:7e:d6:db:e4:76:9d:4d:67:07:4f:a3:2a:f2:e8:e4:
f3:dc:7d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:46 2025 by rpki-client