Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e80fc702-2e38-4abd-b420-d4b8dba8a30e.roa
File: e80fc702-2e38-4abd-b420-d4b8dba8a30e.roa (raw, json)
Hash identifier: +yw6RBT62Rzqm9RVxymAgN1Z/PzloXfu5woKPTVbDmI=
Subject key identifier: 28:AB:E5:02:74:8B:9A:05:C4:AD:94:7F:D5:85:C5:26:91:0F:A2:E0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 32C7C5AAE7FA836A164DA7FB17E4BDF4F2E16BD8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e80fc702-2e38-4abd-b420-d4b8dba8a30e.roa
Signing time: Mon 20 Oct 2025 04:12:32 +0000
ROA not before: Mon 20 Oct 2025 04:12:32 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:c7:c5:aa:e7:fa:83:6a:16:4d:a7:fb:17:e4:bd:f4:f2:e1:6b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 04:12:32 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=2e5a45cf2f6880b5d56834b1301720661178182909b2a99f146df15a29c4bd02, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:21:46:a0:7e:39:74:83:a4:4d:e4:1f:b7:
a4:c7:af:bc:52:85:ce:f1:fa:03:9a:5e:8a:32:0f:
24:09:66:d9:e3:22:0b:4a:bf:d7:f5:0d:2e:31:97:
c5:0a:7a:11:9a:d2:8b:5c:09:c8:0a:88:50:8b:5c:
75:50:49:f7:29:94:db:2c:fc:68:c3:ff:35:17:6d:
47:74:2c:19:22:50:a1:d0:3a:2f:5a:1d:46:d7:1d:
c2:83:f0:a9:b6:82:78:f5:53:08:32:05:e5:d2:01:
5b:8a:90:1d:6b:69:2c:99:e6:90:18:95:42:40:f8:
af:d8:a5:95:30:bb:a6:9b:46:65:38:ab:5e:51:a1:
97:a7:55:b2:06:6e:df:2b:a0:85:39:05:3b:3f:4d:
ce:f5:68:7f:48:b3:31:0a:57:42:2f:c6:83:8a:38:
7e:e3:5e:75:03:29:c3:99:ea:3f:a4:bb:9f:a9:16:
77:3c:ff:23:40:bd:2e:08:b4:5b:e6:6e:3d:c7:ca:
1a:81:17:50:6d:77:4c:bc:8e:ec:2c:f0:b0:cc:d8:
49:cb:f0:6b:4c:f0:e8:31:2c:e8:64:01:1d:ac:15:
00:2a:ac:59:45:aa:ce:22:61:b2:cc:11:70:10:ad:
f5:4d:9f:b1:11:b6:50:fb:9b:f1:f9:bb:e9:86:2e:
26:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AB:E5:02:74:8B:9A:05:C4:AD:94:7F:D5:85:C5:26:91:0F:A2:E0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e80fc702-2e38-4abd-b420-d4b8dba8a30e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.190.0/24
Signature Algorithm: sha256WithRSAEncryption
96:64:02:68:1e:1b:1b:1d:b5:52:3e:61:2d:06:9c:1d:31:42:
e1:62:71:55:47:57:d9:3a:2a:52:f4:82:74:ac:30:d7:10:d5:
78:92:20:5d:fd:99:68:40:ea:2b:35:97:c3:ee:51:ad:76:c5:
08:1e:74:53:0b:db:2d:48:03:82:50:dd:79:5c:8c:ed:c3:f2:
e0:6c:86:11:1c:ba:a2:f2:0e:ce:63:e5:45:38:db:eb:a7:a1:
18:f2:b3:ad:62:7f:ba:7f:45:40:0a:17:3a:1d:40:ca:6b:4e:
7c:86:79:d9:3a:6f:77:81:f8:1c:7d:3d:99:55:ac:32:a8:7b:
e4:be:fc:99:28:b1:32:98:ec:75:a7:07:e6:47:f9:c6:e5:0b:
df:bb:00:14:cb:6a:7f:aa:8b:17:0b:45:cb:47:09:bb:3a:c1:
e4:7b:4b:6d:cb:2d:15:c5:a1:2e:b9:3a:f0:df:5f:f7:b8:95:
b3:6c:df:ea:68:21:92:0c:0e:14:69:07:10:b6:e6:eb:46:bf:
37:44:63:01:0f:d1:0a:77:ef:dd:6d:8d:33:60:80:d6:aa:59:
0f:e9:34:82:3e:70:99:fa:4f:98:56:7e:04:39:63:6e:d7:77:
8f:c1:75:12:a7:e6:0e:46:eb:b7:3a:b7:44:2a:9e:83:dd:9b:
bd:be:d8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:25:42 2025 by rpki-client