Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc7f5e35-d001-4a94-af05-a48c262efe8e.roa
File: cc7f5e35-d001-4a94-af05-a48c262efe8e.roa (raw, json)
Hash identifier: 3CyEl6bX6PWyAwUWUy4GnAwEmK3E3ewCMgUzy/2bD9c=
Subject key identifier: 01:A4:F1:39:F0:6E:D9:13:46:EE:4C:E8:9B:B7:0D:5E:31:CC:CC:65
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2291DD0A17C2B8E75417C2A408440D25F29D9431
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc7f5e35-d001-4a94-af05-a48c262efe8e.roa
Signing time: Mon 20 Oct 2025 03:11:25 +0000
ROA not before: Mon 20 Oct 2025 03:11:25 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:91:dd:0a:17:c2:b8:e7:54:17:c2:a4:08:44:0d:25:f2:9d:94:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 03:11:25 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=5e28c2263eaa2bf7b015870ae40d5580bf57595bcc93096951397b305720e943, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a4:11:14:20:f4:76:f4:fb:30:56:ef:b1:3a:
38:dc:a3:d4:05:00:3e:b2:06:94:e6:49:60:bb:a0:
a2:f4:f4:67:4a:0c:21:fa:4a:d5:12:cc:7c:56:3b:
d6:0f:4e:8c:a9:0f:28:48:56:95:7a:03:8b:03:86:
e6:4f:17:9f:27:73:45:04:39:b5:01:27:8d:57:e7:
93:bc:49:2f:fa:db:ff:7c:a9:26:74:65:68:7a:4a:
07:25:c2:ec:72:48:16:37:00:e7:e4:a2:9d:84:f6:
12:c7:33:bb:80:60:41:b9:b6:23:49:13:0b:68:17:
c0:e7:79:6c:a3:ba:6c:44:46:26:c0:d3:8c:d5:3e:
61:59:ec:4f:d0:df:45:e0:ad:b3:8d:4f:ea:83:e2:
19:22:b7:f2:bf:45:73:86:2d:df:49:bf:8a:04:61:
c7:2f:c9:06:61:38:c9:b6:6d:95:3f:10:a8:b1:b3:
4a:1b:75:9f:5c:6b:78:ca:00:1d:c3:2a:b8:a6:e8:
44:f0:21:0a:84:a3:d7:fa:7a:75:27:a8:9e:da:79:
1c:60:4b:29:27:12:53:20:e2:34:a3:46:e5:83:fa:
9d:60:2d:1d:0d:bb:24:db:b2:6c:58:1f:b7:d9:e3:
d4:2b:a5:4f:b0:b9:8d:a7:d9:18:31:09:00:3d:13:
c8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A4:F1:39:F0:6E:D9:13:46:EE:4C:E8:9B:B7:0D:5E:31:CC:CC:65
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc7f5e35-d001-4a94-af05-a48c262efe8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.235.0/24
Signature Algorithm: sha256WithRSAEncryption
13:cc:69:52:b3:08:1d:31:33:53:59:ba:58:3f:93:c9:d7:19:
9d:01:07:ea:db:8a:76:b5:ea:6e:80:7f:9e:61:d8:82:85:dc:
e1:d5:a5:49:3f:56:2d:f4:6f:82:57:5d:35:69:eb:f0:60:10:
7a:4a:14:73:56:f3:7a:0b:ed:e8:81:76:7e:e1:85:22:eb:8a:
43:da:e6:41:9b:f0:13:b3:9c:c4:2d:ae:1e:f2:56:2f:6a:62:
12:6e:8f:c8:2e:65:bd:a6:c7:5e:b1:d0:9d:51:e9:3b:de:5c:
57:6f:0f:bd:e4:8a:78:f1:73:e1:3b:b2:f0:96:21:68:44:6e:
2b:c2:c3:e2:84:c0:f2:22:32:da:ba:d6:2c:a3:49:04:44:50:
c0:90:ff:f7:d8:3c:5e:81:0f:38:5f:a0:eb:d8:b0:b4:35:d1:
84:54:4a:c7:c9:b0:cd:5a:80:4e:95:7f:26:78:12:2d:ea:df:
a3:de:ae:f6:00:26:e9:25:d2:25:2b:b0:c1:ce:f2:3f:70:35:
0a:fc:99:24:f2:ca:0c:fe:ed:9b:76:ca:b5:bf:68:12:5a:37:
f5:18:e0:61:3c:89:15:3a:e1:8e:19:b6:a5:7d:ff:ef:e0:9e:
9b:b0:68:da:4e:61:89:0a:06:ab:4f:8e:c5:4e:b8:c8:c4:c7:
4c:9f:56:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:29:01 2025 by rpki-client