Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d167ec1-a194-4f03-98b9-513867537282.roa
File: 6d167ec1-a194-4f03-98b9-513867537282.roa (raw, json)
Hash identifier: 5aQp4heUzDKQEyL+ySiwH6+iXIeEaUuzbRhiMtlgBQQ=
Subject key identifier: 08:24:7C:1C:65:69:CF:42:E3:FB:E4:E9:C6:72:FD:0E:DF:CC:FA:01
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 31BDC807D90AE8A94597EB0F4B2C2FD9AEE94DBE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d167ec1-a194-4f03-98b9-513867537282.roa
Signing time: Mon 20 Oct 2025 00:01:37 +0000
ROA not before: Mon 20 Oct 2025 00:01:37 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:bd:c8:07:d9:0a:e8:a9:45:97:eb:0f:4b:2c:2f:d9:ae:e9:4d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 00:01:37 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=3ec55531400e1df609d5bd584ebc324350371d9ece0042dd391fe56d7f08af03, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c6:06:91:8b:94:e6:73:d8:2a:0e:e9:6a:93:
c3:34:fb:ff:5b:aa:8a:85:f1:96:a8:d9:61:94:cf:
3a:5f:dc:79:0e:30:16:a7:eb:2c:ea:18:63:0c:fc:
95:98:7e:21:24:57:31:0b:ed:ea:a0:95:8e:20:41:
ab:e9:fc:42:19:d9:d5:5c:b1:74:92:9d:33:e2:98:
0c:dd:dc:63:31:87:b4:ef:c4:f9:5c:60:01:16:3c:
ec:95:c7:3c:33:d2:5d:96:38:5a:cb:ea:b5:fc:a9:
98:47:b7:60:9e:8b:5f:44:09:25:87:09:72:28:90:
13:30:4d:76:c0:c0:a6:74:92:02:7f:de:87:99:1d:
67:8f:b9:e8:7a:e6:67:30:db:79:33:14:c1:86:35:
38:09:0f:84:a5:5b:6e:23:7b:1b:71:b5:5f:4b:e7:
5c:bd:2c:df:2a:5e:f2:fe:1c:91:02:b0:ff:aa:5b:
18:1c:d2:6c:da:d3:6e:05:4f:87:ba:72:48:44:e6:
12:0f:cc:7b:cd:03:6c:3b:4a:a4:53:a9:ef:9e:73:
bf:85:56:fd:eb:86:91:f7:d1:08:6d:52:11:0b:30:
01:d4:74:22:f4:45:57:d9:a3:65:47:2b:e6:31:4d:
50:49:96:ff:25:d4:9e:09:71:ed:a1:95:be:11:15:
12:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:24:7C:1C:65:69:CF:42:E3:FB:E4:E9:C6:72:FD:0E:DF:CC:FA:01
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d167ec1-a194-4f03-98b9-513867537282.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.173.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:0d:b5:91:d9:a3:27:9c:3c:5a:76:c2:54:14:08:95:b9:dc:
05:c7:17:60:2f:ca:77:77:b2:2b:48:d2:63:8e:c1:a9:43:a4:
6a:72:3e:8f:65:53:bb:e0:96:ba:c3:66:3c:1c:b3:01:f0:2b:
68:1c:94:c0:76:f3:24:7a:9c:eb:fa:59:82:10:f4:30:62:c1:
4f:b4:f5:31:95:ca:cd:3a:b7:92:c6:5b:12:09:9d:d2:1b:63:
34:34:8e:3c:93:0e:f7:32:86:bc:76:4e:24:9f:ee:98:41:b8:
48:23:c7:6e:d3:35:d8:2f:05:f0:e4:95:ee:bf:5f:2c:00:68:
bf:ef:d7:eb:50:a5:05:a6:50:6e:f3:0d:cc:d8:67:33:dc:8b:
67:51:c0:39:ad:d9:55:c5:57:ef:9c:29:09:fc:ea:a6:30:3c:
a6:03:81:26:7b:15:b3:8a:23:01:82:ee:59:c9:74:82:b3:46:
30:97:d2:67:74:02:04:78:f0:cc:fb:fd:44:31:21:ce:21:e1:
ce:0c:98:e0:94:48:2b:dd:7a:b2:3b:7d:4d:5c:bd:3a:9d:33:
b3:de:e4:c0:f8:c5:68:d0:e4:f1:db:e3:9e:48:76:49:37:53:
23:b9:3e:c7:9b:93:a0:2e:9b:ba:57:72:e0:4e:be:96:6b:42:
ea:ed:30:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:29:04 2025 by rpki-client