Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d0567be-d098-4dae-b076-d5d5158e4543.roa
File: 5d0567be-d098-4dae-b076-d5d5158e4543.roa (raw, json)
Hash identifier: vD3kgv9di0tUYHEChVodHS96eIEtmXDf9xQAUS1nLfk=
Subject key identifier: AC:30:8C:91:F6:31:AF:05:9B:F2:D1:F5:B1:02:36:12:75:A2:AD:42
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 585B6AC38A4B329806B2E7F0318189D9FE93F2E6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d0567be-d098-4dae-b076-d5d5158e4543.roa
Signing time: Mon 20 Oct 2025 04:41:27 +0000
ROA not before: Mon 20 Oct 2025 04:41:27 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:5b:6a:c3:8a:4b:32:98:06:b2:e7:f0:31:81:89:d9:fe:93:f2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 04:41:27 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=d423c70a15cc81e44e436e006d0c0c433d36a96f9cbf32657ea43867a234dfef, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:c4:6f:8a:1d:f0:21:dc:74:a1:29:73:10:af:
e2:1d:77:08:a9:84:57:73:e1:7e:e1:d0:19:51:46:
ea:33:90:3b:ad:b9:01:e4:63:c6:93:d6:8a:0a:56:
3c:67:ca:0e:00:f9:73:69:f1:a1:9f:d8:51:34:f3:
64:35:fc:08:5c:05:ec:74:76:e9:fb:1e:f3:aa:c4:
d3:23:72:e2:e4:d1:cf:af:29:71:3b:58:cb:2a:c2:
47:6a:dc:4c:28:a2:ae:2a:72:12:9b:fc:f5:7f:29:
a6:33:c4:cd:0e:f1:73:32:ef:06:f0:9d:32:70:39:
94:49:b8:b5:26:b0:39:9b:7e:43:35:e7:42:ed:e6:
9e:8c:10:e4:42:01:e0:67:17:68:f0:fc:c1:29:29:
47:32:d0:e0:d5:24:8f:bb:e0:d4:1d:2e:4b:ba:64:
51:6d:3b:ea:c8:94:d4:d3:c5:b2:6d:d6:b9:02:29:
28:c4:3f:92:71:f7:43:17:d1:1f:2b:cc:51:2e:e3:
a5:0a:21:86:00:1f:a1:ec:c0:d4:94:99:24:51:4e:
5b:c8:58:04:8b:c6:67:02:af:81:0d:12:e5:a0:4f:
82:c3:da:73:0b:91:c1:40:93:1c:d4:e0:92:d9:2b:
c7:99:02:aa:e5:75:01:10:a5:b8:37:eb:80:5b:ac:
33:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:30:8C:91:F6:31:AF:05:9B:F2:D1:F5:B1:02:36:12:75:A2:AD:42
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d0567be-d098-4dae-b076-d5d5158e4543.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.9.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:7a:71:ae:3b:40:fe:fc:48:cf:0a:2c:40:b1:06:c9:6d:9f:
1c:9c:aa:f7:01:02:3c:37:b0:6c:dd:0e:9a:5c:0c:bb:45:b1:
ca:2c:74:09:de:8c:0a:63:ab:f3:d0:de:0d:3d:10:ec:65:18:
29:fe:b4:3b:52:b0:0a:6b:db:05:b6:ed:f3:3a:bb:98:3e:c1:
b2:1c:8f:30:bc:a0:90:c0:86:2b:ac:3f:4c:78:74:28:1e:1c:
7d:d5:a9:99:e2:10:e2:50:4c:11:94:dd:05:8d:4c:f8:b5:90:
25:5c:6f:49:c0:18:e8:57:9e:53:12:92:4f:9b:4a:c7:3c:39:
cc:b0:72:96:3d:ff:aa:f6:99:30:27:e1:df:6d:ce:da:b3:66:
4c:37:84:83:1f:3a:35:04:fd:37:31:33:bc:af:82:cb:8e:e9:
8c:38:c4:37:d1:09:12:df:e2:2b:df:7a:86:d2:74:94:6d:0b:
4f:63:7a:3c:d5:da:cd:bc:ec:e4:78:8a:15:e9:aa:a7:a2:23:
d9:f3:47:80:70:29:b3:33:94:f1:02:e8:dd:21:9b:71:fb:14:
4f:91:5e:9b:43:5c:74:93:fc:46:45:16:5c:c4:4d:7b:e1:c0:
cb:3a:9e:ac:41:7b:45:61:36:fd:bf:32:02:b7:bf:49:40:a3:
aa:e4:53:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:46:43 2025 by rpki-client