Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6e70c5a-c009-4e3b-b453-252f783a6e13.roa
File: a6e70c5a-c009-4e3b-b453-252f783a6e13.roa (raw, json)
Hash identifier: OD+rD8Crtuqg+gTt4nCC6rC1uS3PhM/6gI+ujGu6bHs=
Subject key identifier: E5:BE:D6:30:FC:AE:7E:9E:C4:9A:77:36:DA:21:A7:5F:82:06:AE:5B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 137EF88042BA718F7E8B1F2C2D87C9002822948F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6e70c5a-c009-4e3b-b453-252f783a6e13.roa
Signing time: Mon 20 Oct 2025 02:10:05 +0000
ROA not before: Mon 20 Oct 2025 02:10:05 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:7e:f8:80:42:ba:71:8f:7e:8b:1f:2c:2d:87:c9:00:28:22:94:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:10:05 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=b543b8963800ee9c3e22a1c0123175d5a40ed40ca1f6f19a57c57d3ca5f5d85a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:77:de:3e:e5:d1:54:d7:30:ae:c0:ef:dc:40:
85:c5:7d:e2:64:94:15:2b:a1:11:af:05:4b:81:6d:
d7:71:0e:e6:27:7c:c7:82:9e:96:56:e1:67:6e:a3:
14:52:c0:5a:ef:21:7a:32:4a:ec:f5:51:fa:5d:1d:
ca:a1:4b:39:f9:c1:e3:4e:e6:dd:e8:3d:9e:70:4b:
28:eb:c1:fb:2f:ff:c2:9e:e4:7b:00:01:d5:79:20:
76:d1:11:0d:2a:a7:32:42:05:1c:43:03:1a:ad:c2:
f9:b9:7b:aa:19:91:4e:b2:8f:ea:37:23:eb:a7:fd:
d0:d7:cd:69:e2:9e:9b:a3:b2:ba:e1:44:b9:c1:fe:
14:97:94:47:19:46:47:3c:ef:e9:89:09:c2:a4:fb:
c0:ac:1d:23:35:c0:be:d4:f2:a9:6c:78:59:a0:b6:
80:62:28:5e:f7:b1:29:a1:63:90:05:01:ed:f3:82:
c2:9f:f5:ee:6b:75:59:54:82:bc:01:1f:1e:cf:76:
89:ee:fe:d6:c5:e5:00:b2:f7:92:3e:51:98:23:ec:
77:26:ba:e7:aa:41:04:4b:c8:7d:5c:a0:db:89:5f:
51:55:ab:b9:5c:a5:61:67:0a:4d:78:d3:38:9d:23:
d1:bf:c9:9e:d2:df:72:a7:14:01:c1:5d:c1:37:6d:
c2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BE:D6:30:FC:AE:7E:9E:C4:9A:77:36:DA:21:A7:5F:82:06:AE:5B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6e70c5a-c009-4e3b-b453-252f783a6e13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.220.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:21:57:36:d4:98:25:ae:39:59:86:32:c8:5f:9e:01:50:12:
30:3e:23:cb:26:a7:2b:07:17:c5:bb:b8:93:d2:51:bd:0f:a8:
e7:f6:c3:96:b2:c4:13:d0:48:9f:54:b6:01:a9:9b:c2:cd:f1:
46:ac:67:75:9b:85:7a:d2:46:69:ca:e5:7e:1a:87:bc:26:57:
b2:fb:5b:be:0f:c6:9f:6c:24:12:09:5b:ea:c7:ac:27:8b:cc:
bc:05:fa:7b:c6:32:8d:6f:76:8a:fa:d2:a6:55:d2:d8:ec:aa:
ac:37:29:d6:00:51:f5:d1:0d:3a:64:cc:a7:0b:31:0d:b5:3b:
e4:a5:7a:e8:c8:d2:65:ca:75:f1:ef:68:c6:93:57:39:86:19:
c8:eb:57:44:2b:a3:cd:9c:d0:6b:de:b4:a9:a8:0a:7b:41:97:
e8:82:00:8f:1f:2d:dc:b1:16:0d:29:8b:09:1a:8c:c7:94:87:
9d:95:ad:f5:8c:e5:48:b9:66:cc:d0:e6:3d:0b:18:f6:73:d3:
79:5c:df:74:63:66:e1:81:0a:ce:d7:e5:46:da:a7:b3:96:bd:
ad:a1:ca:8a:a5:d6:21:88:fc:aa:bf:26:c0:c2:a5:64:ff:12:
d2:f8:aa:51:ae:58:5b:9b:0e:5b:8e:39:b1:69:91:24:7f:59:
2e:66:61:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:10:49 2025 by rpki-client