Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7c3cc4d-3015-43b2-9ec4-513f5f863810.roa
File: c7c3cc4d-3015-43b2-9ec4-513f5f863810.roa (raw, json)
Hash identifier: /gPRwHubhMp07zK5QeNswlvAa5dkknzZ/LZi5t+1804=
Subject key identifier: 13:3D:62:28:FA:6F:65:21:64:C0:8F:B7:BE:8F:7E:CD:A1:4C:A6:5B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 51DDB9418EE7B051CA5AA326424F996C6804BF6E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7c3cc4d-3015-43b2-9ec4-513f5f863810.roa
Signing time: Mon 20 Oct 2025 01:21:56 +0000
ROA not before: Mon 20 Oct 2025 01:21:56 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:dd:b9:41:8e:e7:b0:51:ca:5a:a3:26:42:4f:99:6c:68:04:bf:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 01:21:56 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=67501649f6518733d5e4b51b3c8b8ab437f76958cbc503f16696990bd9f1eb0a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6b:40:28:55:aa:f7:7f:08:80:3a:22:ef:b6:
67:92:8e:ef:b8:9e:c5:91:f4:88:37:3e:b4:38:a8:
9f:72:e6:73:04:74:15:f2:88:ec:6c:95:a5:27:eb:
94:f7:09:aa:04:50:31:8a:d1:80:78:7d:45:3e:df:
37:f1:74:1a:3d:21:c4:d7:a4:24:47:94:c0:d7:d1:
7f:f8:cd:13:ea:ee:3f:5a:37:b0:6f:d5:09:a9:e5:
64:10:4b:e2:02:bb:f9:b5:cc:68:e0:05:c9:65:14:
3a:fd:06:85:3a:b5:51:42:20:15:cc:e3:69:6b:2c:
f6:32:01:a6:36:ca:5c:c9:51:8b:fd:4b:bd:66:be:
2a:cd:82:60:9a:60:99:c5:1e:be:cb:0c:43:e7:31:
be:28:71:1c:27:91:bb:85:82:c7:64:d2:bd:52:ba:
72:18:8c:ba:7d:93:95:d7:8f:35:29:ed:5d:97:10:
65:d9:88:bd:c5:42:3a:19:ba:54:f4:4e:8b:14:03:
bc:73:00:de:8e:db:c6:73:82:36:95:b5:46:3b:01:
8b:15:e8:fe:e3:ef:6a:7f:61:07:e8:04:bf:bb:f9:
09:07:71:f8:0c:ab:48:57:9b:8a:11:bd:a0:e4:2c:
cf:66:2f:7f:26:73:96:c5:57:6a:7e:fd:71:b2:fb:
25:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3D:62:28:FA:6F:65:21:64:C0:8F:B7:BE:8F:7E:CD:A1:4C:A6:5B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7c3cc4d-3015-43b2-9ec4-513f5f863810.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.172.0/24
Signature Algorithm: sha256WithRSAEncryption
34:b5:6b:90:ed:e5:7d:1f:42:6e:4d:fe:60:31:e0:d5:45:e0:
65:95:0c:47:11:3e:d3:46:ea:ed:34:56:f6:f0:98:9d:9a:6b:
4f:89:a9:65:bf:47:23:65:63:b6:bd:31:b8:43:7c:1a:a9:24:
d1:3f:30:7f:d7:dd:83:65:ee:f1:32:b0:41:84:3a:ee:35:59:
93:02:ba:31:f5:2d:2d:8c:7c:80:d7:09:34:c7:21:4e:6e:bd:
ba:24:36:37:22:e0:05:6a:09:47:2d:1e:ff:cb:63:d3:f1:5b:
66:cc:33:57:2d:21:90:90:16:56:ba:50:83:5c:78:49:fa:0a:
fa:f4:7a:c4:92:54:95:17:6b:6a:ba:da:89:a0:0e:15:5b:4b:
84:e5:26:2c:2a:ed:af:35:09:a1:aa:80:d0:3a:81:7c:d4:31:
f0:b4:e9:ab:6a:33:c1:9d:18:cc:3c:e0:e1:7e:91:4b:89:18:
11:57:6b:1b:0c:0e:4e:e7:b8:46:90:fd:01:3e:ed:2b:fb:8f:
12:06:a6:5c:a3:d6:2b:a4:1c:0e:da:60:8c:95:c0:9d:21:bc:
a5:20:77:94:eb:53:c4:7d:91:a3:5a:01:d6:f3:2a:f0:cb:8c:
d3:bc:0d:e3:2c:dc:6b:b3:a4:e7:7d:42:47:3f:94:f7:ff:19:
cb:d4:37:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:48:41 2025 by rpki-client