Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f20a04b2-cb01-46e5-be41-eeb4fafdcdfb.roa
File: f20a04b2-cb01-46e5-be41-eeb4fafdcdfb.roa (raw, json)
Hash identifier: PoMsGwf+Q/6cOy6LbIUvrY+7X2G/DqLE+pvm992yp6M=
Subject key identifier: 87:54:63:23:7A:9F:F7:C3:95:29:36:18:72:2C:64:10:9C:4E:32:7C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 15C712E00970993B4CAA9A77A898820584A47ABE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f20a04b2-cb01-46e5-be41-eeb4fafdcdfb.roa
Signing time: Mon 20 Oct 2025 03:20:53 +0000
ROA not before: Mon 20 Oct 2025 03:20:53 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:c7:12:e0:09:70:99:3b:4c:aa:9a:77:a8:98:82:05:84:a4:7a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 03:20:53 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=c0a0836aa5b52eec520efebc24fa6bd4751a8a8952e91d0e844c2c43e11a3e7f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6d:f5:45:61:e3:b7:85:61:19:41:a2:d6:40:
60:b2:4a:3c:91:cf:69:30:cb:ff:ab:76:58:82:5b:
9c:37:32:a1:91:c5:69:89:d3:aa:e0:c7:ae:7a:84:
fd:ed:66:11:de:22:72:26:47:17:ae:e1:51:7f:2e:
16:73:7f:ea:e9:de:01:f3:7b:fa:87:9e:6b:38:7d:
5d:cd:73:f4:79:bf:91:07:40:88:dd:b3:b9:a6:e2:
aa:10:66:6c:9c:6b:be:03:44:43:31:d1:c4:8f:d7:
48:7d:de:ff:22:06:f5:e5:19:61:f3:b6:4a:a6:c2:
f7:3b:c4:bc:10:e3:24:60:2e:cc:3e:dd:34:04:f1:
f5:02:8a:ec:3f:57:15:18:2c:5a:a5:78:48:79:63:
c5:eb:6c:ee:5d:58:6f:7e:65:6f:0a:4e:be:ca:30:
8f:2c:40:13:e1:71:07:4a:5a:3b:51:d5:7c:c5:23:
86:e5:fd:7e:b2:d1:ca:7a:72:9c:c2:25:ec:ea:65:
d9:2c:03:0e:fb:99:b9:b0:cf:87:b5:71:93:a9:2f:
3e:99:61:f7:38:0a:0a:67:5e:eb:6c:a8:75:53:59:
1e:76:dc:f5:aa:8d:01:93:58:e8:c1:71:e5:0a:07:
b8:a6:41:5a:eb:37:21:ac:d4:0b:93:4d:2f:d5:d2:
32:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:54:63:23:7A:9F:F7:C3:95:29:36:18:72:2C:64:10:9C:4E:32:7C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f20a04b2-cb01-46e5-be41-eeb4fafdcdfb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.94.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:0d:68:23:0c:bb:76:4f:98:01:ac:05:e8:de:5b:58:37:c0:
db:41:e0:54:9b:d4:23:05:1e:63:71:f5:77:4f:15:92:89:37:
45:4c:31:12:9e:09:83:3d:50:31:d0:c0:0f:ef:c5:a2:a2:3e:
e6:e6:fe:33:9a:df:68:fb:d7:75:92:ce:a2:b2:e6:62:41:95:
fd:d1:7e:c2:9a:12:5d:76:2b:1f:e5:96:16:cb:a4:e0:e1:0a:
32:73:1a:20:a1:37:8b:6b:22:9c:29:a0:fb:85:7f:27:9f:07:
9f:48:46:02:51:b6:40:9c:be:eb:96:68:b2:2d:d6:0b:88:64:
0c:1d:63:6f:97:c7:e9:af:e2:34:6f:5c:1c:4d:ef:aa:63:a8:
51:cd:33:ca:ae:ad:ef:de:99:8a:83:80:5f:14:36:f0:a4:d0:
38:e4:54:a1:16:94:8a:d1:70:64:43:94:8d:21:f3:42:50:ed:
1a:28:05:d8:e9:0f:fe:90:20:3f:ba:11:9f:bf:16:c9:fd:33:
0f:0f:a3:ea:e9:cd:33:23:2b:b0:4e:d2:ee:62:c8:00:ce:39:
11:ee:36:60:57:92:0b:3d:c8:9b:eb:13:42:0c:ff:b8:1b:f6:
6a:14:91:a4:f1:da:ae:30:f7:22:52:e1:42:ec:90:2e:82:c6:
3b:5e:84:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:07 2025 by rpki-client