Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c703bc5b-7867-4a8e-bf66-09e715d4853d.roa
File: c703bc5b-7867-4a8e-bf66-09e715d4853d.roa (raw, json)
Hash identifier: yw1Xre2e9CICOgyUsehE55eP0xXLaXTZY685r3GMLrQ=
Subject key identifier: E0:16:DA:ED:41:F3:AD:BC:C9:97:82:4C:0B:C5:FE:D4:6E:18:5C:86
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4B8FC4F7BA4F950E94EE5646419D145795B32D17
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c703bc5b-7867-4a8e-bf66-09e715d4853d.roa
Signing time: Mon 20 Oct 2025 02:41:55 +0000
ROA not before: Mon 20 Oct 2025 02:41:55 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:8f:c4:f7:ba:4f:95:0e:94:ee:56:46:41:9d:14:57:95:b3:2d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:41:55 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=79835b4e4fe7c66f482a90362275c3fd4618bda2ed84fd8fa5c82276245d227d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e5:25:44:79:28:18:98:67:91:bb:cb:6f:8e:
cc:39:ad:2e:3d:fe:93:f9:c6:fe:06:08:57:93:ac:
b2:e6:d2:ae:e9:2c:e8:55:36:e8:c3:d3:d3:7f:49:
36:61:c7:43:0b:a5:fc:6f:03:e8:ff:79:9c:1a:e9:
12:92:f0:0c:d2:5f:7e:cb:10:26:bc:d1:7b:a6:66:
d4:0d:c0:f7:70:44:59:f7:b4:49:30:fe:5e:85:a0:
b7:17:3b:a0:ae:57:ff:be:60:b4:ce:85:12:07:11:
25:0d:3a:6e:00:a2:3a:da:2f:d9:ab:f5:29:04:ea:
0c:cc:a4:76:16:fb:b6:30:16:91:29:b1:ee:64:33:
e0:18:22:b7:d6:59:6a:d4:60:4a:d4:d4:8e:d3:30:
ed:2f:df:f6:dd:b9:1b:30:d2:c8:72:74:ca:ef:24:
ad:0a:24:0c:12:65:ee:ff:56:36:10:02:d6:d7:73:
b1:48:a8:61:65:06:9a:7c:c3:43:a1:ec:0c:18:51:
22:e4:ad:86:90:c2:76:ca:75:25:5f:1c:6f:e8:43:
62:a0:fd:15:fb:b3:2b:7f:e9:52:2b:87:d8:0a:e8:
59:cd:f0:4c:29:98:bf:9c:b9:1a:f5:ed:09:6e:16:
da:0f:6f:68:ba:91:c0:f3:32:78:c0:30:ed:14:0a:
eb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:16:DA:ED:41:F3:AD:BC:C9:97:82:4C:0B:C5:FE:D4:6E:18:5C:86
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c703bc5b-7867-4a8e-bf66-09e715d4853d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.156.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:e5:d7:c4:ab:14:be:aa:b3:20:3c:28:99:17:15:d5:ba:e3:
d9:57:86:f0:a4:fd:4a:13:e2:20:ba:fa:85:6c:e6:7c:96:ad:
d9:8f:e6:cd:10:be:0d:fa:2d:46:21:5c:a5:03:e6:22:aa:17:
fe:ba:87:1e:f0:20:2b:d4:73:91:85:44:ce:e0:45:ba:48:6f:
a5:e8:a2:f8:97:2e:f5:19:79:4a:4c:c4:06:af:4e:8f:0d:e9:
7c:e3:98:7b:ff:52:79:2e:b8:9b:92:c0:1d:ce:fa:dd:6d:98:
0c:45:8f:e0:2c:f3:6a:f8:06:c4:ab:1f:ee:3d:0c:4e:46:90:
f5:d9:d1:b1:2e:d5:05:f0:8b:34:84:36:af:39:e3:52:ae:39:
f9:06:99:f9:86:6c:37:c2:11:4b:87:6b:fb:e9:31:16:9e:60:
90:78:3b:73:6a:0f:14:bb:9d:e1:70:ff:11:63:85:b3:25:44:
ee:7d:2d:69:a8:1f:36:c8:26:3c:ff:2f:06:7c:af:58:cc:00:
70:0c:ff:44:a1:68:2f:fb:33:d7:78:de:57:4e:8d:3c:b6:35:
0b:43:09:fd:b5:3f:9f:eb:15:39:fa:3d:4a:34:7c:f5:96:3d:
17:8f:e7:a0:9a:b3:6f:10:e9:91:25:90:23:a4:b8:08:36:7f:
66:8c:b2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:50:14 2025 by rpki-client