Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4c7592e-4452-492a-a6c8-25942b12afd1.roa
File: e4c7592e-4452-492a-a6c8-25942b12afd1.roa (raw, json)
Hash identifier: 0pI/K9DI9+EaAnX0SYrGAQaRAwODSASJaVoA3+w7R2c=
Subject key identifier: 45:EE:B7:53:2D:8C:CF:7F:2A:15:8F:07:AC:62:C8:6A:20:98:E5:68
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 30E00E767AAD4FBFA48A62E6F6ED2C4201B09E69
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4c7592e-4452-492a-a6c8-25942b12afd1.roa
Signing time: Mon 20 Oct 2025 02:31:02 +0000
ROA not before: Mon 20 Oct 2025 02:31:02 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:e0:0e:76:7a:ad:4f:bf:a4:8a:62:e6:f6:ed:2c:42:01:b0:9e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:31:02 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=a7e09a9a0ddc7607fe0180c3d9207eb5abe075c3246f10724b7a84b4ecf8e427, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:24:9a:4e:d1:ac:b9:37:81:7d:ab:c7:e8:96:
b6:83:22:68:99:a5:ba:4a:c5:2e:af:28:c0:cc:0b:
50:7e:75:3e:59:e5:29:f8:47:8c:83:93:67:1f:4e:
8b:f3:88:a5:95:50:d1:46:55:4b:4e:76:9d:25:73:
08:54:62:4e:7b:7b:93:37:05:d1:50:b9:23:59:3a:
14:89:b8:d3:ab:09:c3:1b:4a:58:41:1e:0a:41:74:
97:70:69:c8:db:ee:74:99:ba:3a:04:3e:a0:6a:d5:
c9:89:7f:74:7c:39:42:fa:4f:7b:9b:cc:2e:bd:d9:
91:58:ae:7a:c3:fc:d8:09:b2:1c:0c:20:a6:1c:82:
54:d3:58:15:b0:20:db:05:c8:a1:97:b7:2a:5d:2a:
26:dd:75:18:17:24:91:94:ac:1c:96:8b:b5:3b:0c:
25:19:a9:dc:bc:03:1f:dc:86:20:bb:64:f2:eb:89:
a6:38:8e:6f:cb:e3:eb:65:e1:8c:35:33:56:cb:c8:
3b:8b:33:ae:b7:29:1e:3f:da:7d:56:24:0c:eb:8b:
56:51:9b:60:89:a4:ea:ff:d6:73:7b:80:ce:13:fe:
e4:eb:02:28:6a:91:03:21:c8:56:e4:bf:9d:b7:05:
52:f3:d6:94:30:97:55:a4:eb:88:e4:23:80:19:ec:
80:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EE:B7:53:2D:8C:CF:7F:2A:15:8F:07:AC:62:C8:6A:20:98:E5:68
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4c7592e-4452-492a-a6c8-25942b12afd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.249.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:f1:f8:85:54:a1:07:2a:ae:59:f0:db:21:68:11:d1:14:aa:
39:60:cf:a1:b7:a6:5b:60:c3:60:51:82:35:81:cf:67:1f:e8:
61:0e:b9:2c:f6:da:05:31:24:7f:7c:6f:bd:05:be:4b:93:d9:
57:33:77:e6:db:0f:94:49:87:d3:5c:b7:57:0e:13:ef:25:2b:
2a:e9:2b:ab:fc:18:c5:ef:da:ef:fe:7c:20:f2:28:4c:b3:fb:
2f:f5:77:f6:6f:93:e6:af:13:94:84:f7:bc:82:53:b5:22:8b:
e2:5d:54:98:6a:11:80:d5:ae:f0:bc:1f:a0:ff:7e:62:1d:3a:
8c:2c:56:e4:30:65:f9:90:0f:df:79:ad:6a:d9:68:e7:d2:8a:
2f:0e:2b:85:09:fb:e9:ad:48:fa:5c:b1:6f:29:c1:99:fb:a4:
be:57:11:b5:f5:c4:0e:31:4a:55:1c:ad:b6:da:c1:78:22:25:
81:82:30:1c:3c:c6:d0:51:67:74:9d:7d:96:ba:92:98:66:bc:
d6:c0:27:4f:6c:ad:5b:1b:58:50:d4:f8:f2:bc:5a:4f:ae:55:
af:e2:81:95:4f:fb:67:7d:83:d6:8b:e1:93:d6:96:16:13:cf:
fb:b5:4c:e2:f6:cf:05:43:de:9f:1e:1e:53:7d:54:5e:54:51:
24:dc:4a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:19:52 2025 by rpki-client