Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a64f9da-3ca6-4568-b816-8155814c42d2.roa
File: 7a64f9da-3ca6-4568-b816-8155814c42d2.roa (raw, json)
Hash identifier: XXN/XGqTMKvAhbDIKg+BBnw7urlWQMZepJ0Ecaad0oM=
Subject key identifier: 41:CE:19:24:0B:66:F0:1B:29:A0:68:2C:02:FE:2D:9D:1A:FF:F3:F2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3CE224E46B09B45AE489653DC55DC9A662B39FF4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a64f9da-3ca6-4568-b816-8155814c42d2.roa
Signing time: Mon 20 Oct 2025 03:02:19 +0000
ROA not before: Mon 20 Oct 2025 03:02:19 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:e2:24:e4:6b:09:b4:5a:e4:89:65:3d:c5:5d:c9:a6:62:b3:9f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 03:02:19 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=e5e8ed24e49e60a4c4a274c1e290a88831d60d6d4b25f449079948c531469cea, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7a:ae:97:0f:ae:68:31:52:35:b3:93:30:ff:
e1:c1:61:63:92:67:f6:00:84:cd:d5:6b:6c:d7:47:
93:e4:9e:49:51:fe:6a:ce:f9:c6:5b:a0:45:3d:cb:
21:08:7e:ab:42:0f:13:08:35:20:4d:16:eb:97:89:
04:d6:80:7b:42:9c:95:20:a4:95:44:cc:64:aa:25:
fa:7d:83:c0:8a:5a:8a:cc:68:30:08:81:80:9d:e6:
fc:11:02:2d:00:c2:e7:9b:c2:64:d0:90:01:8e:98:
b4:a0:d1:76:87:49:8f:c6:8a:a1:0e:a5:45:92:19:
f7:9f:ad:3e:f4:f4:0c:df:69:bd:0c:c1:d8:c3:96:
a1:49:02:9b:73:b6:a9:17:cc:e6:3b:23:c8:47:ce:
96:5f:d2:bc:c8:ab:3c:cc:5e:42:41:ca:3c:b3:1a:
6d:63:86:89:5e:19:d8:ef:9f:6e:c1:de:24:dd:61:
f8:fe:4e:91:0b:a2:80:37:3c:63:eb:91:0c:40:46:
da:b7:51:cb:08:21:9b:e2:48:fb:67:62:15:61:43:
43:a8:91:c4:bf:48:b8:67:e3:1e:5b:24:ec:a8:47:
ca:e0:f9:11:f8:ae:82:0b:18:d1:55:7e:18:47:5e:
12:97:23:3f:be:8d:f2:1f:93:71:2a:93:b5:3d:b0:
5e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CE:19:24:0B:66:F0:1B:29:A0:68:2C:02:FE:2D:9D:1A:FF:F3:F2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a64f9da-3ca6-4568-b816-8155814c42d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.24.0/24
Signature Algorithm: sha256WithRSAEncryption
57:41:b6:a1:f8:37:18:9c:a1:c0:40:73:b5:b2:cc:7d:10:45:
88:f6:b7:ce:86:f2:b8:cb:f4:53:90:f3:81:32:e7:30:27:56:
e6:40:03:54:4f:b2:a0:d8:d1:19:27:e4:4b:d4:76:43:6b:a4:
9a:3e:25:65:89:14:58:29:c4:d7:33:00:13:90:db:73:da:fb:
05:59:8e:1f:3c:23:e2:37:16:0b:db:6d:e1:a6:8e:bc:16:44:
8f:e1:0e:2b:5e:12:ac:17:c6:af:14:7b:cd:6f:56:91:e7:9c:
3c:81:04:06:e5:21:9b:c2:01:8a:4d:44:ae:30:48:8a:71:6e:
e4:90:ea:6d:5d:4d:5e:c2:0a:37:92:60:30:94:e2:3b:98:3e:
0e:c0:e4:0b:3d:14:57:69:0c:41:d0:51:60:fe:4a:f1:4c:6e:
52:12:75:fb:8a:05:3f:21:07:47:77:84:32:5c:5e:27:a2:03:
a0:b4:ed:96:73:40:e6:07:5a:a8:8b:3e:fd:6a:cd:ee:83:db:
f5:54:80:c4:01:8d:79:8d:e9:e1:47:51:8d:6c:68:eb:8f:23:
60:b5:fd:dc:48:84:6e:fd:73:8a:4c:87:7a:31:93:e8:65:f6:
85:3b:48:c3:b4:9b:25:99:dc:6c:34:4d:97:bc:99:38:38:d3:
83:9a:d3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:28:57 2025 by rpki-client