Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4510eb0e-c0a7-453e-87df-5ba2b2757307.roa
File: 4510eb0e-c0a7-453e-87df-5ba2b2757307.roa (raw, json)
Hash identifier: KpXEtnCOQrMxLUMt5kFjtc77g6JZ3tLlln1WJJc3lhE=
Subject key identifier: 20:F3:56:CA:AE:F0:A6:77:45:F6:D6:BF:82:70:D1:1E:B3:7B:47:8F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7D8BAA0F58FEFC302A1049544D5079CC3B42825E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4510eb0e-c0a7-453e-87df-5ba2b2757307.roa
Signing time: Mon 20 Oct 2025 02:41:20 +0000
ROA not before: Mon 20 Oct 2025 02:41:20 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.188.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:8b:aa:0f:58:fe:fc:30:2a:10:49:54:4d:50:79:cc:3b:42:82:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:41:20 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=a1679946193adf67b34cd4e9d401a4a1cc174dd838c2ddc4e735eb234c4bb49d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8c:f5:ea:70:d7:a0:48:9e:c1:bd:30:77:06:
33:b5:29:42:f8:d7:46:ce:47:0e:ad:27:ac:11:67:
6f:33:16:1f:30:5c:fc:6e:54:ec:63:7a:6d:e7:c0:
ca:05:90:5b:aa:79:2c:8b:eb:9d:99:79:b7:37:e4:
5f:1f:ba:bc:71:dd:35:38:63:68:31:31:9c:43:df:
bb:8c:f1:5e:c5:5e:2e:4e:fb:3a:3c:86:a5:b4:51:
61:87:72:8d:dc:0a:a0:a5:dd:a5:10:e8:38:4f:45:
a0:97:62:3d:ea:ee:0c:3a:7d:56:c2:0a:0c:6a:fe:
26:db:96:e3:50:c8:97:2a:14:5e:6b:4a:6b:47:58:
a5:39:09:fc:9d:6b:36:c8:1c:94:d2:7d:a6:ec:71:
3b:63:ae:4c:60:8c:5f:71:30:69:e2:e7:b7:fc:3f:
94:92:96:89:63:a6:24:12:0b:ca:f3:94:ed:c4:26:
dd:00:1b:8c:f9:76:b5:a0:e2:c9:59:b0:41:80:27:
3a:c3:8e:37:45:f3:cb:e1:c3:6f:3d:3e:d2:10:2e:
f1:69:52:67:e0:13:f1:e0:79:e1:40:f9:41:e6:0a:
15:e7:3e:62:e6:bc:6a:9e:30:17:ed:36:dd:ed:4b:
58:9b:fe:1f:78:e1:64:59:9d:77:e2:13:eb:d2:70:
33:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F3:56:CA:AE:F0:A6:77:45:F6:D6:BF:82:70:D1:1E:B3:7B:47:8F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4510eb0e-c0a7-453e-87df-5ba2b2757307.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.188.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:93:ed:54:a5:ba:6c:d2:27:18:dc:74:90:24:9c:16:6f:09:
c5:c7:ee:be:82:ba:0d:88:83:12:7c:03:d5:e8:67:f0:59:2a:
72:a4:3d:93:de:e8:25:ad:cc:e7:7c:89:16:57:3f:69:cb:58:
fd:cf:92:ae:67:11:d2:5e:89:7f:a1:72:53:2e:97:19:f3:77:
01:74:8a:eb:db:2b:23:ab:89:a0:1a:6f:db:cb:d0:c1:3b:fc:
e4:ff:1d:5a:c5:f4:4f:ac:d1:5e:17:74:85:d6:d2:3f:d7:47:
d7:7a:b1:34:56:55:ef:4c:d0:8a:bf:16:45:bf:66:4b:64:a5:
fc:15:57:8e:f4:65:19:f5:dd:b3:34:fa:53:10:4b:4c:06:4c:
f9:8b:c2:07:78:56:43:b9:ef:bd:95:c1:84:f5:bb:d0:52:8f:
f5:39:82:8e:91:47:69:74:af:29:23:fa:5e:cb:4b:a0:e1:89:
80:70:9a:27:46:a7:34:10:37:ad:12:42:2e:36:96:9e:c4:16:
b0:7d:9c:2d:06:5b:11:76:61:3e:ce:ed:cf:ad:39:35:ae:42:
6a:b3:1f:4c:c3:d5:20:20:0a:ec:9d:55:91:58:75:22:d7:12:
9b:35:30:87:a3:0a:c4:80:25:28:cb:08:3d:9a:c5:5f:8f:9e:
8b:bd:59:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:11 2025 by rpki-client