Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/234414c7-a9b9-43b5-9ad7-86b7b69100f1.roa
File: 234414c7-a9b9-43b5-9ad7-86b7b69100f1.roa (raw, json)
Hash identifier: fmtqIzdXER2GCWWmTLNKSv/FE7q0owIE2RnyDN9MQpk=
Subject key identifier: EC:D9:27:81:65:D2:AB:99:C0:1C:BC:49:9A:5B:F9:4F:02:3E:61:42
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2A438B626EFB134E21B8E6FF2D17751D49ACEB5C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/234414c7-a9b9-43b5-9ad7-86b7b69100f1.roa
Signing time: Mon 20 Oct 2025 05:32:16 +0000
ROA not before: Mon 20 Oct 2025 05:32:16 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:43:8b:62:6e:fb:13:4e:21:b8:e6:ff:2d:17:75:1d:49:ac:eb:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 05:32:16 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=c8b4f474b96322df3ff42015843309525a533b4a7eb7d4d5ca374029c8f73e83, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1d:a2:dd:da:51:eb:5b:ce:1a:10:5b:48:e8:
81:9c:81:8b:4b:66:22:f2:1f:58:04:e8:2b:98:6d:
21:32:4c:bc:de:b9:cf:8b:2f:d9:2d:9a:bf:92:1b:
d6:ee:53:e5:f2:9e:7d:42:be:34:f5:53:74:58:65:
76:ad:30:0b:76:d3:8e:cb:11:d0:5a:5c:80:a0:42:
df:25:2d:ea:d8:67:0d:1e:81:5e:ac:99:7d:c8:ca:
14:6d:a0:a9:3c:ce:7e:f4:c2:e4:02:d4:5d:c0:33:
1f:d1:0d:9c:fe:59:72:05:8e:79:d6:b1:a1:ae:73:
36:a6:59:57:43:fa:d7:12:89:52:40:54:64:ff:0a:
7c:20:8a:65:52:57:8d:28:43:42:0f:8a:43:b5:d8:
f7:c5:27:77:9f:19:78:94:3b:06:39:3d:d6:4e:20:
f7:3a:36:ff:3e:4c:26:77:45:25:84:a8:8b:b4:1c:
c6:ae:6f:ab:3a:59:0e:b3:6b:c3:85:21:03:a4:a0:
74:9d:88:01:00:0c:44:fd:ff:ec:99:f0:a6:2e:88:
00:6b:e3:49:60:a0:f1:82:c2:02:f5:ec:53:c3:9c:
2a:dc:b4:29:c7:b4:4e:e0:f4:20:02:b6:76:b4:22:
35:7d:52:3f:a6:d1:5b:77:7a:4c:56:82:f2:01:3b:
8b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D9:27:81:65:D2:AB:99:C0:1C:BC:49:9A:5B:F9:4F:02:3E:61:42
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/234414c7-a9b9-43b5-9ad7-86b7b69100f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.44.0/24
Signature Algorithm: sha256WithRSAEncryption
02:8b:a3:f7:41:91:96:d5:5f:3b:65:a5:fb:e7:6f:c3:74:dd:
25:89:b3:a4:b1:bc:48:e5:38:86:76:72:9d:0b:6b:a0:45:eb:
61:22:cb:cf:ec:c1:2c:9f:79:10:9c:96:64:8e:21:4c:4a:0c:
f8:19:72:e2:0f:70:40:da:32:2c:b8:e8:e7:53:34:e7:d8:42:
04:e0:4e:ad:62:37:28:d3:4b:8f:bf:2c:11:42:11:78:6c:a3:
0d:2e:3a:2b:cb:23:12:15:0a:61:9e:e0:ee:34:03:7e:aa:68:
4d:c3:af:4a:1d:29:dd:f9:60:6d:cd:94:4f:8b:86:80:25:69:
54:fd:b4:84:5e:4e:7e:1f:be:c1:78:5f:bc:ae:f5:74:2c:72:
5a:8a:f1:de:85:17:95:bd:b5:c0:71:92:03:4a:7f:67:18:81:
db:ba:4b:51:45:24:83:fd:54:5c:f0:cc:9a:f6:07:33:0e:33:
c9:3b:fc:bd:cc:c9:64:81:a6:7c:4a:16:92:c5:2c:20:2e:2e:
0f:5e:91:e1:8b:71:a6:f6:49:ef:71:7b:47:85:15:25:a3:39:
b3:92:cc:7b:3c:db:fe:dc:f4:03:9c:41:14:bf:8b:82:04:82:
3e:09:65:ed:03:cd:01:08:b9:d6:eb:58:75:ef:0d:e4:1d:62:
1e:a7:88:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:29:02 2025 by rpki-client