Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4bbdc71-7399-4d94-a90e-fb31b985dfc6.roa
File: c4bbdc71-7399-4d94-a90e-fb31b985dfc6.roa (raw, json)
Hash identifier: tIOBB5Nc+Wp8PuB2if1Zl4NbspQGaeEvPr2z4mi9tSY=
Subject key identifier: 38:57:78:C8:EB:0B:C6:C2:B8:60:5D:3D:F7:05:BB:5E:88:44:2D:9A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5C82AC2B552DFF40CD515E0A3A437D46D8225E88
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4bbdc71-7399-4d94-a90e-fb31b985dfc6.roa
Signing time: Mon 20 Oct 2025 01:51:44 +0000
ROA not before: Mon 20 Oct 2025 01:51:44 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:82:ac:2b:55:2d:ff:40:cd:51:5e:0a:3a:43:7d:46:d8:22:5e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 01:51:44 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=76861a4f601a2ef9f9800f05f43a35cc391a8545c8b740eac935d1f8ad8b966d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d1:63:b8:27:fa:64:71:86:a2:b7:81:4c:0c:
09:e6:c4:8c:5e:46:cf:7e:41:75:99:e0:6b:37:80:
c9:59:fe:1c:c9:32:81:43:cc:80:f9:14:04:d7:ad:
da:e7:81:24:dd:24:27:fb:50:d8:e2:3b:9d:7a:d8:
66:09:22:c7:97:4b:34:3e:fa:51:7e:57:b5:7a:c9:
4f:94:33:1f:35:5e:b6:f3:95:81:c1:6b:49:a2:28:
94:ff:24:a8:a2:b7:1d:3d:06:31:3c:64:8f:e5:11:
ce:d0:97:c9:30:de:2f:9d:a8:89:77:b3:95:3b:5d:
ca:8e:51:7e:3b:ab:5a:41:b3:2a:bd:cf:1e:87:60:
7f:33:3a:1f:6f:1e:70:e9:d8:36:6e:98:a1:e3:17:
14:46:35:43:e9:a4:88:f7:ec:7f:b8:b6:1b:5f:1b:
de:af:ca:66:5d:8f:68:5a:ee:b5:a4:d8:8d:df:ea:
4d:f2:da:2d:75:06:3f:81:e8:84:05:83:51:25:cb:
49:e6:36:fa:42:3b:41:79:28:d3:ff:82:85:29:b9:
2c:6d:38:ed:bd:c4:35:cb:6e:e5:c9:1b:ea:21:af:
51:07:31:6e:51:8d:09:f7:cd:c3:17:f9:53:01:cf:
e9:45:1f:8c:b9:a3:39:35:d5:98:d1:23:31:4c:03:
50:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:57:78:C8:EB:0B:C6:C2:B8:60:5D:3D:F7:05:BB:5E:88:44:2D:9A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4bbdc71-7399-4d94-a90e-fb31b985dfc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.138.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:3f:36:63:f1:98:e4:8f:57:ac:db:93:6b:4a:94:1d:e3:4c:
83:04:13:72:1a:22:7b:3d:1b:5d:b3:f3:e4:0d:07:0c:2a:3d:
f3:95:50:50:ba:94:94:f5:00:8e:6a:e6:ea:98:dc:5f:fd:c8:
d6:42:4e:e7:07:07:87:21:45:dd:2d:6a:50:0d:c5:16:54:1e:
9e:25:8f:c3:1b:a6:da:90:ce:53:56:b7:5f:96:df:3e:a1:f5:
4d:5b:16:7b:76:4b:6b:be:37:28:d8:91:49:ad:0a:6b:6b:73:
7a:7b:58:e9:f9:cb:db:04:aa:f0:81:ec:bc:da:dc:b3:c8:5d:
6f:da:d4:18:1f:a7:33:57:84:54:a1:54:0c:30:eb:8e:e3:3c:
8f:4a:65:62:f2:df:fd:3f:d6:9c:26:42:fc:97:bc:be:6a:e7:
9c:a9:39:6b:2b:a6:c6:a0:78:45:94:e7:e9:c8:33:38:3f:de:
d7:e9:e8:20:c7:79:12:84:f8:40:5b:52:81:ae:94:98:d0:97:
18:d3:69:b6:c8:c8:3d:10:55:8a:cd:89:cd:d9:ba:9b:4f:61:
59:8d:01:9c:3b:f2:00:d8:80:0c:76:c6:7a:9d:d4:09:24:81:
c2:0c:97:12:5e:14:95:fe:bb:8c:c2:e0:85:28:48:87:d0:cf:
ec:f4:b6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:20 2025 by rpki-client