Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e0cd2b6-598d-46da-be5b-1cdd9eda1cfc.roa
File: 6e0cd2b6-598d-46da-be5b-1cdd9eda1cfc.roa (raw, json)
Hash identifier: meqb01R5GEMCb66bOiB2L/lusNLFJJCdRdbie2kHk9E=
Subject key identifier: A6:23:96:31:BA:C8:A5:BD:C5:F1:AF:E8:C7:3A:3B:9D:5E:66:FD:03
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 08FA0BB27F498F8E3C0B1B1488805FC50A9397BF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e0cd2b6-598d-46da-be5b-1cdd9eda1cfc.roa
Signing time: Mon 20 Oct 2025 03:20:52 +0000
ROA not before: Mon 20 Oct 2025 03:20:52 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:fa:0b:b2:7f:49:8f:8e:3c:0b:1b:14:88:80:5f:c5:0a:93:97:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 03:20:52 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=50ea8df8ac1c301bdda8f8cd6b4dc957532f7b39b40d353a8703e8fcc674871b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bf:df:6c:e5:d8:87:af:3b:a9:3c:50:e6:5b:
8f:0c:99:ac:23:f2:15:ba:b9:d9:d6:69:ca:26:af:
55:97:2f:ea:a3:10:79:47:d1:b3:71:62:9a:c5:d0:
e1:d6:f5:ed:55:aa:79:ca:36:85:b1:90:80:e3:50:
76:c1:44:c7:84:5d:e3:d1:1c:4e:a8:03:39:07:0f:
c6:51:3f:15:13:fe:31:2e:52:45:1e:f6:63:d5:bc:
93:87:d3:5b:6b:93:a8:17:77:dd:f1:16:3a:10:9f:
26:31:b8:85:f2:54:ef:a3:55:53:00:76:e5:d5:93:
55:55:25:5c:10:d4:cb:4e:ed:3b:d0:6c:1d:e0:7f:
fb:3a:e7:47:d5:ed:90:0d:18:ca:b3:ab:cd:3c:02:
28:b0:8a:6e:31:73:51:44:23:17:f3:e9:c4:7c:7c:
52:37:63:49:5f:a1:10:a6:6e:be:08:96:10:b2:b7:
16:16:d4:32:bf:fb:38:78:77:59:63:e0:56:dd:be:
74:ed:ab:17:58:0f:7d:dc:e3:6e:7b:f5:f9:60:56:
47:c3:44:ef:12:70:f5:64:db:26:26:a5:dc:b0:41:
0f:24:45:5d:3c:49:04:64:4e:c3:9e:0d:1c:4e:02:
59:e6:17:5b:10:16:0e:35:f1:54:89:e6:3c:c2:15:
78:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:23:96:31:BA:C8:A5:BD:C5:F1:AF:E8:C7:3A:3B:9D:5E:66:FD:03
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e0cd2b6-598d-46da-be5b-1cdd9eda1cfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.45.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:f1:c5:12:9d:54:19:27:8a:12:ce:86:f4:72:db:13:22:4f:
b3:09:67:b0:4a:30:ed:e4:27:9c:b6:77:03:ab:fa:71:6e:b5:
3f:8a:be:8d:ed:00:18:8d:0a:6b:8d:63:c0:1b:ea:98:03:d0:
5a:03:ed:22:66:47:a9:df:44:a1:f6:9b:b9:15:92:38:81:59:
e7:2f:f9:d4:ea:ee:a3:fd:e3:99:b2:ad:b5:9c:7b:84:ee:bd:
50:db:54:22:f0:ca:80:ab:ca:93:db:09:6e:e9:1e:8a:ea:df:
96:05:30:c6:e0:67:7f:78:08:b4:28:20:29:33:fa:2a:de:71:
f9:a8:c8:22:ae:91:ca:9a:42:aa:68:a3:4d:88:8b:51:6f:20:
64:d2:72:87:38:fb:1c:c2:22:59:9f:a5:76:0d:60:1f:64:48:
33:47:be:8d:f3:39:05:de:7b:ca:db:f5:1d:cb:8e:f2:6d:5d:
1d:38:6b:39:12:c2:fd:ab:66:11:c5:e0:3d:a0:b8:13:8d:b5:
c2:c3:30:af:18:f4:bc:dd:fc:19:4d:46:f4:22:26:3d:62:b0:
88:0a:e1:51:b0:91:0f:78:5a:2a:b0:98:d2:c2:14:e9:13:bf:
46:65:cc:e1:50:4a:cc:86:3f:b5:61:c3:ee:c6:3a:37:35:b0:
37:bc:16:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:02 2025 by rpki-client