Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6dc5749f-3bbc-45c3-8d13-8ce27c19ae3a.roa
File: 6dc5749f-3bbc-45c3-8d13-8ce27c19ae3a.roa (raw, json)
Hash identifier: tu53Wf7pir6rCyCMElYE0I9BzE46f/ZVvPTelvyYtxY=
Subject key identifier: 6F:AD:D2:D9:47:D3:3D:F4:40:01:7A:67:BE:66:34:03:CC:61:21:16
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 399BE925EF2855C4D73849838EECFC8E62798EDB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6dc5749f-3bbc-45c3-8d13-8ce27c19ae3a.roa
Signing time: Mon 20 Oct 2025 05:30:54 +0000
ROA not before: Mon 20 Oct 2025 05:30:54 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:9b:e9:25:ef:28:55:c4:d7:38:49:83:8e:ec:fc:8e:62:79:8e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 05:30:54 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=321ef867f2bec90afd938aed7bcf55a0cea058594e56877352f043f006f2d7aa, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e0:39:11:60:93:bd:e3:8d:c8:66:d5:81:5f:
25:74:cd:09:de:2e:bc:29:29:09:65:43:77:64:8b:
cc:4c:58:7b:b8:ed:8f:ea:64:87:15:66:fe:52:8b:
91:91:ab:c6:64:23:b6:f1:85:8d:fb:9c:1d:7a:fa:
59:a0:77:eb:34:c8:c4:d4:bf:6e:33:95:50:79:7e:
c5:0f:51:4d:ea:42:78:a4:b1:1d:24:1a:f7:0e:b5:
a3:84:16:82:e9:95:40:00:32:32:2a:36:2d:44:9b:
56:fb:d3:c3:c0:17:db:bd:38:f1:84:c1:e6:22:9e:
92:26:68:f2:9f:2b:56:55:22:4b:46:26:18:20:7a:
77:0d:2d:45:ea:39:ac:8e:90:c3:86:90:04:c0:6b:
20:24:6a:3d:9f:8e:38:e2:39:36:64:28:b8:9d:13:
11:f5:06:16:3a:7d:16:ec:f1:ce:a8:ec:12:b3:fc:
33:2d:d4:f1:25:a5:06:a2:a4:32:00:03:e6:d3:4f:
cc:3e:31:58:39:a4:ab:6e:71:09:be:4d:59:49:17:
38:68:93:cb:20:3c:1e:56:71:02:ea:f0:a6:4c:4d:
c0:98:84:d3:70:a4:ea:01:c7:cc:35:65:28:f0:22:
1b:b7:ad:4d:f7:c6:88:fa:70:34:ec:1b:73:03:4b:
d9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AD:D2:D9:47:D3:3D:F4:40:01:7A:67:BE:66:34:03:CC:61:21:16
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6dc5749f-3bbc-45c3-8d13-8ce27c19ae3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.38.0/24
Signature Algorithm: sha256WithRSAEncryption
45:65:57:45:3a:f2:62:6b:e0:d1:ef:1f:44:4d:4b:c4:2c:1e:
c8:13:55:c0:02:21:97:d0:ae:21:63:54:a9:27:87:75:51:26:
17:28:83:e3:09:16:dc:ed:77:35:46:ff:18:f7:74:c4:b5:90:
ac:ad:70:89:45:6f:f6:18:9e:43:2f:c6:33:c4:e1:64:85:ec:
75:72:83:a7:aa:a8:1c:d5:ba:b4:14:35:f2:d9:92:b9:5d:e0:
99:94:b2:db:b1:2b:54:aa:d9:8b:45:02:99:c3:b2:f0:c4:7f:
dd:db:be:fe:90:1d:77:63:04:fb:4b:4d:2b:09:68:70:2d:ce:
ba:06:1e:00:40:8d:2c:b8:5c:25:32:4c:67:75:57:96:4a:5d:
4d:1a:a2:23:6c:4d:47:b9:f5:5d:b4:a7:1c:b9:1c:71:fc:e7:
8c:f0:54:77:d9:ba:7b:74:a6:c6:4d:61:14:27:48:a9:f9:a6:
28:49:10:eb:de:bc:61:ea:02:a7:a9:32:9e:48:90:bb:6c:6e:
54:17:03:d1:a5:e0:29:12:ca:5f:da:87:5e:4f:0c:a0:d9:63:
52:81:d5:38:06:0b:fc:ca:88:3b:cd:4e:22:72:9b:96:44:e8:
c0:54:04:ec:77:2b:ad:9c:12:5a:9c:05:e4:0b:df:09:0f:22:
56:48:ec:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:49:31 2025 by rpki-client