Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf80756c-5c8a-4d0a-92a7-c8d90a782fe6.roa
File: cf80756c-5c8a-4d0a-92a7-c8d90a782fe6.roa (raw, json)
Hash identifier: fPojW9J4Z22CTZ/UwOPMqtN8orHuqV3L2xn+oZMAtZY=
Subject key identifier: 52:F7:E8:0C:2C:0E:81:2A:C5:30:C4:DB:B3:CF:F1:62:49:19:58:CA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 38AD2A34E60B9C5964519298980F19A9DC123492
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf80756c-5c8a-4d0a-92a7-c8d90a782fe6.roa
Signing time: Mon 20 Oct 2025 01:40:49 +0000
ROA not before: Mon 20 Oct 2025 01:40:49 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:ad:2a:34:e6:0b:9c:59:64:51:92:98:98:0f:19:a9:dc:12:34:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 01:40:49 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=56433fe7e32bd73517374a8174dd1e3f351bca5949d2fd6e52833d9246bcef25, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9d:be:8b:47:13:0c:d6:ad:4b:ed:9e:72:69:
93:e6:86:71:a1:48:1f:75:35:49:65:f3:13:c9:09:
7c:01:0a:85:93:a7:14:46:a6:e8:a8:32:65:6d:bb:
8f:74:53:db:0f:cb:df:b5:a0:1e:44:a5:de:91:51:
72:cb:a5:f0:3a:54:7d:83:ed:05:b0:97:48:d6:b3:
d0:8b:73:7e:6b:32:7d:5c:a3:b4:87:2e:d5:21:b9:
59:c2:5b:9b:e0:eb:ec:0b:9f:2d:77:38:06:d8:2c:
67:d2:72:d0:86:c9:f9:a9:e3:97:5f:b5:0b:f2:7b:
70:7f:dc:37:c0:4d:b4:c7:d1:b3:c9:4f:ba:f8:1a:
d0:74:cd:b5:8f:0f:7b:02:16:52:6a:17:43:60:a1:
47:7c:b1:b1:50:50:1b:01:a7:bd:2f:73:9d:1f:f2:
69:58:2b:d2:1b:c7:85:5f:24:b5:d4:10:7f:bb:d7:
58:87:7d:60:e1:0e:40:ec:9e:61:39:80:e0:e8:43:
25:b7:34:68:43:7e:0e:ac:bc:d7:6c:15:03:71:cb:
5a:c8:15:b5:ac:22:f2:1a:ad:14:ad:87:4a:cc:c9:
fc:7c:39:36:b2:c4:49:15:80:2f:94:5f:7b:23:41:
c5:c4:cc:97:98:cc:05:f8:91:c6:80:c3:c2:14:bd:
48:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F7:E8:0C:2C:0E:81:2A:C5:30:C4:DB:B3:CF:F1:62:49:19:58:CA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf80756c-5c8a-4d0a-92a7-c8d90a782fe6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.144.0/20
Signature Algorithm: sha256WithRSAEncryption
ca:5e:87:54:a5:99:cd:a5:c5:eb:c9:06:25:67:73:2f:95:53:
79:39:43:64:27:2b:57:33:d5:28:b5:58:57:b4:3d:80:fe:5f:
aa:38:33:61:2b:25:b7:b2:a9:ae:aa:c1:87:b6:54:07:6c:07:
7b:71:26:14:c7:13:e6:de:97:e1:b9:71:b6:12:58:af:c7:d0:
9f:67:9a:6d:a7:33:b4:55:06:52:c7:2f:a8:5b:27:a9:f0:5c:
71:a5:d9:e6:35:c0:42:39:61:3c:9f:e4:df:5e:ef:c3:d2:dc:
36:d7:6d:d2:69:e8:2c:07:68:97:62:85:5d:1e:68:e3:ed:ec:
b6:b5:7a:d4:5c:e7:29:9f:c6:f7:69:2e:4b:20:df:53:e5:04:
be:91:49:80:f7:f5:57:a4:f8:44:98:cc:5f:08:01:ab:18:06:
9e:7f:80:2b:36:d6:dd:1e:99:05:ba:6f:6f:83:a1:15:a0:93:
ec:14:b7:2e:d1:53:b7:dc:41:6b:53:a6:3d:6b:11:fc:f7:87:
8d:ad:6e:e2:f4:90:38:2e:ee:18:35:65:76:42:61:cf:7a:c1:
56:a6:ca:71:bc:79:f7:5b:dc:24:ba:e1:5b:14:68:e1:6e:90:
1d:73:c8:95:64:2d:c0:0d:83:93:4c:64:de:4d:59:cc:d5:a3:
35:f6:50:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:28 2025 by rpki-client