Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38a5d8ed-e406-41a8-8c9b-ff840865e69f.roa
File: 38a5d8ed-e406-41a8-8c9b-ff840865e69f.roa (raw, json)
Hash identifier: M4t7V5LjwNGXn3t2UDcM14bMkqCtwqhNPa4dVaKgKhU=
Subject key identifier: 2E:71:04:B9:B8:87:32:A4:73:AF:78:51:74:52:2E:C3:9A:8D:8B:83
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5C783A5AB6573E30ED9032ECCA81C24A1AFBB45F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38a5d8ed-e406-41a8-8c9b-ff840865e69f.roa
Signing time: Mon 20 Oct 2025 04:30:14 +0000
ROA not before: Mon 20 Oct 2025 04:30:14 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:78:3a:5a:b6:57:3e:30:ed:90:32:ec:ca:81:c2:4a:1a:fb:b4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 04:30:14 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=10de91a2079994ac691e12d508d24b6b746f196e4f198ac40103846bc22ec27b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:86:50:d0:5d:33:e0:d3:c7:7d:85:33:49:
af:b5:21:ba:6e:33:59:5d:ae:04:af:2b:c2:5e:a8:
dd:2c:98:a2:2d:b3:75:09:0e:97:b5:43:d2:85:47:
0f:07:50:4b:aa:a9:ef:97:4d:1b:30:8f:6e:46:9c:
11:66:f7:d1:ec:a7:d8:6c:a7:0a:ef:1e:45:1b:23:
1a:04:f8:1a:04:ae:8a:fc:fe:35:e9:a7:76:e6:3c:
96:a3:13:8e:f0:e4:17:4a:f2:a9:55:1a:e9:54:0e:
c9:d2:c9:8e:a8:11:9e:30:a8:80:27:7b:e0:c7:97:
ea:df:15:27:f3:fb:f6:34:12:84:84:1a:fd:c7:6b:
bd:ec:0b:e5:0c:a6:1a:8f:7d:be:1f:29:da:35:96:
73:2e:0b:22:47:d1:fa:51:46:24:1c:2c:47:62:40:
ef:a0:f0:b2:5d:51:77:3d:11:d5:75:56:5f:7a:7e:
72:20:cd:9b:d2:57:aa:73:23:c7:24:a1:31:e3:02:
c8:41:83:8b:e5:90:13:68:2a:06:9a:21:e3:8c:c1:
e4:45:e0:30:a5:e5:43:b0:30:1f:e2:75:9e:b4:be:
e4:1a:54:10:67:00:ef:91:02:3b:19:34:c4:b9:e3:
c1:d2:b0:63:2d:8b:81:4c:62:fd:3a:03:9b:be:25:
b4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:71:04:B9:B8:87:32:A4:73:AF:78:51:74:52:2E:C3:9A:8D:8B:83
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38a5d8ed-e406-41a8-8c9b-ff840865e69f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.72.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:ea:a4:d0:8b:10:f0:a9:85:a0:c8:1f:1b:dd:58:a3:0f:be:
d3:23:14:d8:a5:d4:a4:e1:c8:83:a6:01:66:fd:48:0f:c2:a8:
4e:9d:0b:30:bd:74:d0:73:04:14:a3:16:8a:d3:85:9a:a9:10:
cf:d9:63:3c:fe:71:12:67:29:d6:65:81:a0:5b:18:40:3b:f8:
45:d4:87:42:11:40:c8:e8:7b:ea:03:21:e0:4e:dc:6a:50:45:
59:29:18:af:d7:a5:f0:ab:02:bb:a6:69:c0:0b:0c:76:5b:b5:
71:14:20:78:32:e3:ef:a2:ef:d7:0a:99:bc:e5:65:54:bf:4c:
66:b0:93:9f:66:df:8a:e7:b9:df:eb:53:ee:ef:11:42:97:3c:
7b:79:26:bb:ca:b2:a9:52:c3:ca:14:3f:63:ae:cc:5f:fe:d0:
57:1b:68:2f:94:60:c6:8b:c1:12:bb:77:4c:69:31:e6:08:d3:
2d:e8:15:30:9e:fc:f2:e5:ea:3f:2d:14:1d:0d:eb:c7:28:74:
15:73:3a:8e:27:a6:a4:03:53:4c:5d:b0:f8:a3:0d:38:b5:03:
42:98:20:f3:11:90:c1:7a:70:c4:db:52:74:73:15:ba:13:28:
2c:82:4b:b6:96:02:9f:9e:98:e3:87:97:ea:e5:a9:0b:5d:2c:
8e:95:66:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:29:04 2025 by rpki-client