Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed04ccc0-26ef-406d-be7e-f3fea96dc674.roa
File: ed04ccc0-26ef-406d-be7e-f3fea96dc674.roa (raw, json)
Hash identifier: D8vbmRdgsCtY4+MJ/t5JdINbY+te86+8QBi22m9ymD4=
Subject key identifier: 03:A0:85:B3:19:08:2F:37:0C:4B:C4:3B:E7:8A:30:A9:96:A3:6C:D4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4570E99A0FC2B52E3B922E4D3FC7E32A600AB93C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed04ccc0-26ef-406d-be7e-f3fea96dc674.roa
Signing time: Mon 20 Oct 2025 01:10:07 +0000
ROA not before: Mon 20 Oct 2025 01:10:07 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:70:e9:9a:0f:c2:b5:2e:3b:92:2e:4d:3f:c7:e3:2a:60:0a:b9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 01:10:07 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=9444f5ccaacbc9daed6f52582eaec0d59fb66b77c7c9b581eb975f0913c0ac49, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:15:00:75:c2:94:ef:fd:9d:0b:cf:47:13:e8:
dd:78:ed:c0:89:d8:28:8f:d4:9e:97:0c:39:c8:4a:
5a:b1:29:79:eb:2d:62:61:5b:e0:9b:32:63:b4:8f:
95:05:44:55:fc:35:42:cc:f6:f7:2a:87:70:4b:8c:
62:8b:76:32:fc:f7:76:85:e8:78:8f:9f:d4:38:70:
f1:10:d8:35:d6:65:5f:f8:9c:30:91:70:e6:fd:42:
45:2e:1e:08:f2:ce:75:fd:20:e3:17:e7:0a:64:da:
30:03:47:bd:a9:5f:1b:11:87:21:20:6a:0a:4a:87:
65:20:c8:34:9f:cf:06:c3:54:b3:da:e7:26:13:8d:
ab:7d:ad:d3:1e:9e:a4:7b:0f:be:25:a6:a1:0f:18:
99:fd:c3:28:d2:a0:f7:24:fa:50:49:99:86:b0:ca:
60:15:3e:46:4e:52:03:92:98:2c:49:a5:35:b3:a5:
77:10:6a:b9:3f:d2:d0:e8:94:45:da:0a:4b:31:9a:
07:2a:d5:96:a8:ff:ae:76:a5:ac:f4:f0:5c:0c:f5:
95:10:f0:86:e2:cc:1e:b3:56:9e:69:cb:81:2c:a3:
21:b5:81:89:5a:3c:dc:9c:30:64:d4:8e:f2:27:27:
f7:92:c2:d9:c5:95:26:af:fd:f7:5a:fe:01:d2:2d:
dd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A0:85:B3:19:08:2F:37:0C:4B:C4:3B:E7:8A:30:A9:96:A3:6C:D4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed04ccc0-26ef-406d-be7e-f3fea96dc674.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.166.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:1e:0d:bf:82:fb:ff:e4:6e:d8:89:79:4c:ac:b8:d2:0a:7a:
89:f7:0a:e1:f6:68:aa:a1:c3:9a:32:13:da:89:ab:c6:c4:40:
d1:3e:e9:19:ea:2f:1c:7b:bd:8b:0d:63:75:14:f4:80:9d:61:
04:c7:4a:69:94:d1:53:a9:2e:1e:74:e9:7d:f0:a1:0d:7e:c7:
83:af:da:53:ca:d7:03:e9:c5:e2:37:b5:83:ba:0e:30:23:0f:
4a:26:b6:56:39:0a:9c:0e:55:b5:95:30:9e:3e:94:26:96:96:
a4:78:30:c8:0b:7c:83:28:1d:85:d7:fd:8c:44:65:4e:cc:23:
8d:ea:1c:e3:03:15:87:96:4f:89:45:9d:33:96:9a:0e:03:9f:
49:df:99:2e:10:81:f3:16:b0:74:77:92:9c:ab:df:fa:72:45:
cc:a0:79:60:ea:d2:5e:11:7c:6f:20:74:3d:92:d9:8f:ec:33:
b3:4d:d4:74:1d:93:b3:d8:b5:78:ed:fa:b5:54:f9:d5:8f:d6:
61:bd:b4:4b:59:70:92:2b:f0:8d:6c:ae:02:90:cc:e7:b4:8e:
ab:2e:14:97:c9:a5:52:f3:99:fe:49:2e:f2:c2:71:7c:6b:b1:
f8:4b:31:ad:bf:31:f1:cb:82:60:c6:70:19:ea:61:3c:5b:d0:
68:b4:62:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:28 2025 by rpki-client