Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce59186f-284a-4f33-962a-69a7d425a05d.roa
File: ce59186f-284a-4f33-962a-69a7d425a05d.roa (raw, json)
Hash identifier: tpszj1d/Fx7jY3GjfItz3uYqccqvjFWsxv/XjVSawXk=
Subject key identifier: 4E:1A:CC:B2:59:E6:90:8A:22:B8:E5:75:71:05:FC:D6:15:58:BC:BC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1CDDDF4A3A11E18F24BDF08F832BAA8BF3B7F01C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce59186f-284a-4f33-962a-69a7d425a05d.roa
Signing time: Mon 20 Oct 2025 06:11:24 +0000
ROA not before: Mon 20 Oct 2025 06:11:24 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:dd:df:4a:3a:11:e1:8f:24:bd:f0:8f:83:2b:aa:8b:f3:b7:f0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 06:11:24 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=6e08565a6e9ecee6fd124c98e467a3541901064652006e0d5a51bff73357f4bc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6f:02:83:9b:30:f7:57:3f:d1:a6:fc:77:4e:
3c:08:65:33:61:07:6c:1a:3c:a4:55:c0:eb:4b:33:
ea:7b:b9:13:2a:ab:b8:3c:98:65:82:66:a4:26:60:
6d:d0:9f:2a:7c:c3:9b:8c:5b:b1:6c:c7:6c:24:bb:
e8:06:84:a8:2d:8c:4d:7f:0c:f1:45:a2:39:cb:b0:
d0:ae:85:7f:aa:92:68:f5:72:32:4e:84:1d:4f:f1:
55:40:8c:96:8e:8e:0b:7f:ee:a1:bb:fe:60:9f:e9:
79:c1:aa:49:88:03:c0:a3:85:a5:06:1c:0a:65:6b:
3a:89:a3:2a:43:1e:27:10:a5:61:35:31:df:2b:57:
17:c6:2d:57:4d:b3:43:2f:f5:dd:2d:a1:93:e9:cd:
c0:fe:8c:37:f3:b5:81:92:a6:8a:8c:13:d0:52:e3:
64:7e:ec:da:66:e9:fb:06:a6:ba:48:1c:9b:18:bf:
56:89:6e:0e:70:25:6b:77:ab:b6:10:d0:14:59:2f:
8b:a1:b9:82:8f:03:c3:a6:ae:a9:45:07:11:1c:11:
d8:45:83:74:0d:1f:85:9d:be:40:d1:00:07:9b:6b:
d2:e3:f4:27:58:2a:45:96:29:16:99:4d:4b:d8:dd:
63:8f:6b:da:d2:b6:bc:59:8b:70:19:f4:b5:92:78:
5f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1A:CC:B2:59:E6:90:8A:22:B8:E5:75:71:05:FC:D6:15:58:BC:BC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce59186f-284a-4f33-962a-69a7d425a05d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.1.0/24
Signature Algorithm: sha256WithRSAEncryption
50:b6:d3:68:2c:4d:51:9e:96:d6:38:6b:ec:d3:cd:01:d5:db:
f8:1c:7b:bb:9d:01:f0:1c:75:13:a2:e4:86:34:df:a5:66:8f:
4c:7d:0b:82:4a:4f:02:49:44:b9:5b:ae:44:39:11:c8:ef:31:
de:c7:98:9d:a7:60:2a:1e:1b:e3:d4:45:97:c1:4a:63:ed:8a:
8f:be:aa:a5:ec:ea:a8:b7:d9:a4:b0:91:28:3e:44:e1:79:eb:
29:31:e7:a5:4d:12:c6:b9:93:a9:7e:e2:f1:5d:24:31:23:04:
3e:8c:24:11:75:55:bb:a0:19:36:27:d9:79:c1:63:5b:24:b3:
f6:4e:e4:5a:02:3b:ed:8f:fc:47:a0:6a:c3:79:04:48:81:58:
bc:46:4c:29:69:97:e5:55:47:a6:5b:d6:60:1b:4b:8c:15:48:
9b:ab:2e:c1:b3:26:17:9f:84:2a:d9:1d:ba:48:6f:35:83:c4:
68:16:78:b9:d7:cf:c6:60:36:2f:56:ed:f8:fb:b7:04:30:6e:
be:18:21:27:69:af:af:3e:42:43:02:3f:54:4a:3f:b1:3a:11:
8b:de:45:83:62:22:fe:b6:be:75:97:2d:75:ce:95:fe:61:99:
3a:cf:f3:ea:4a:6c:b0:f2:dc:31:22:4b:4e:3b:67:87:79:ea:
4e:22:e0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:01:00 2025 by rpki-client