Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/998d873c-5ed8-4afa-94e4-bbf88a69bab2.roa
File: 998d873c-5ed8-4afa-94e4-bbf88a69bab2.roa (raw, json)
Hash identifier: L0VrPQxWGNYC1AMLOwfEhd6oyoM+LoRNNWwm2ne4Y2g=
Subject key identifier: F3:04:6C:70:1D:D9:39:E4:4C:80:BF:5C:5F:5C:AE:27:9A:69:57:B4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 778E710196CAEB5981DF709A1A5AE200736CE1EB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/998d873c-5ed8-4afa-94e4-bbf88a69bab2.roa
Signing time: Mon 20 Oct 2025 02:41:21 +0000
ROA not before: Mon 20 Oct 2025 02:41:21 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:8e:71:01:96:ca:eb:59:81:df:70:9a:1a:5a:e2:00:73:6c:e1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:41:21 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=4b36384ed35e2d5fe367fbcff70eac1686954ae57d3cc7f585d104b4a1d433df, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0e:7d:0d:2f:9b:d2:cb:9c:51:2d:0e:56:db:
30:f7:87:bc:1e:7a:ba:7d:ec:95:2b:36:f0:c4:67:
f6:ef:f6:78:00:bd:be:7c:e6:b4:f2:81:38:be:b8:
eb:bc:25:83:cd:5a:76:62:39:0d:00:37:5e:c5:26:
fc:a1:7e:0f:03:d3:55:c3:fd:9b:65:ea:d2:51:4c:
ba:36:bc:6e:37:1c:a8:10:91:9b:b3:d0:de:a0:cd:
75:66:c6:33:88:71:cc:24:24:c2:6b:a1:89:04:85:
63:f4:25:c0:51:50:c8:83:b0:bf:25:1b:08:16:bc:
25:9d:cd:73:6a:07:86:75:4d:11:cc:2a:5f:a2:a6:
ed:8a:1f:9f:f5:5d:d7:13:a9:e5:1b:ee:dd:3b:11:
05:fd:b5:55:0c:10:7c:2b:c2:0f:6a:e1:de:3e:08:
51:c2:ef:d6:ee:59:c1:a2:12:5f:ee:82:1f:b2:3e:
ac:68:34:b3:87:e1:6c:43:8b:3e:0b:d2:90:ca:e9:
2f:3a:9a:48:e6:f5:34:0f:81:4a:6a:e4:f0:9e:20:
7d:16:18:0f:3f:99:c8:2a:96:f2:27:16:bf:ff:10:
71:27:bb:42:16:b4:2c:65:7f:09:ab:28:a6:8b:24:
0d:92:cf:50:f3:8f:1d:a7:d9:c7:cd:41:84:56:0f:
63:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:04:6C:70:1D:D9:39:E4:4C:80:BF:5C:5F:5C:AE:27:9A:69:57:B4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/998d873c-5ed8-4afa-94e4-bbf88a69bab2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.87.0/24
Signature Algorithm: sha256WithRSAEncryption
40:90:d9:c5:44:4e:c8:b6:f6:07:2e:e9:33:dc:45:5f:80:58:
69:55:34:1b:f0:6a:21:7a:ee:a5:4a:d6:fb:98:4a:60:1e:2e:
04:60:50:47:73:e7:bd:05:b4:41:e0:9c:7c:cd:42:39:1b:16:
5d:12:7d:33:b9:66:f7:d3:a1:c9:34:64:c1:34:0f:27:bb:71:
4c:ba:3d:8a:ae:51:b8:c9:e3:3b:24:e1:63:10:84:3e:4f:62:
08:23:e3:35:fb:0a:f5:26:1a:2e:50:e4:2b:b9:bc:d8:3f:0f:
de:fc:5c:80:a2:57:c9:fd:c2:9b:49:8e:b3:0b:84:fa:5c:17:
5b:a7:a5:5a:b2:46:4c:cb:a2:a1:c6:9a:1e:46:1c:d6:39:20:
ec:4a:21:67:e8:b3:a9:e0:84:b7:9a:6d:22:df:ac:9e:dc:01:
cc:32:88:b0:8b:8e:40:5b:23:41:bd:14:81:2d:54:1f:c0:2a:
7b:51:04:a7:80:e4:9e:8f:06:be:2d:3e:43:b9:f7:f2:c5:4e:
5b:29:b5:a1:43:6f:20:5d:0e:d7:96:d9:1d:55:a1:3a:ea:b4:
e1:f2:23:02:53:60:2b:45:d7:b3:cf:b9:20:56:0a:17:c7:a8:
7a:21:28:61:9c:93:d6:25:c0:ad:32:cb:22:8d:75:8d:30:2a:
f2:fd:25:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:40 2025 by rpki-client