Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd897f02-f798-4986-9dc8-1ffb08d0fab7.roa
File: fd897f02-f798-4986-9dc8-1ffb08d0fab7.roa (raw, json)
Hash identifier: 9YtktYhMh4ZnoUiWYCEPB5zlpxnx5yXFc8o6VAzzoOs=
Subject key identifier: 76:45:9D:D4:A6:1A:2D:5A:72:D1:DD:22:B7:0C:47:6C:C7:35:1E:F2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1F4CE14CD297A8D3043CC9F5FE682C5F986B07C9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd897f02-f798-4986-9dc8-1ffb08d0fab7.roa
Signing time: Mon 20 Oct 2025 02:30:13 +0000
ROA not before: Mon 20 Oct 2025 02:30:13 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:4c:e1:4c:d2:97:a8:d3:04:3c:c9:f5:fe:68:2c:5f:98:6b:07:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:30:13 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=df0a1b079067ee40affad84638c0ce5540ed90f003afb2d5efb53cd75dbe98fe, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:53:01:b3:9a:2c:6f:0b:a5:4b:b3:ce:2c:e3:
b3:04:9c:bf:7c:a5:fb:48:be:7e:7f:06:0d:0e:49:
07:f6:2f:d0:be:f6:5b:5d:de:63:cd:c6:19:04:dd:
f5:3c:1e:7c:cc:3a:ec:c0:4b:fa:c5:a3:ff:d8:4e:
da:af:a3:13:df:a8:a6:6a:51:b8:92:e0:d2:ee:dc:
c6:f1:8c:20:d5:f8:15:5f:89:23:27:b9:81:5f:9d:
54:b5:5b:93:3c:ff:8c:58:6a:72:89:c0:ee:51:29:
cc:d6:b0:02:17:c0:93:a0:69:03:4f:cc:f8:f7:a5:
2c:0d:76:fe:38:35:97:7a:65:7a:e3:91:6e:5b:19:
fa:c7:fc:66:dc:3d:ba:61:d4:33:47:e5:ec:29:8c:
24:aa:a2:4f:4c:74:c4:2d:4c:8e:43:44:29:b6:5a:
43:f2:44:77:52:11:ad:8e:b7:cb:de:0b:fb:4f:c6:
41:21:b0:13:ba:ca:b3:1c:2f:de:21:46:d2:73:b0:
a6:6d:7d:12:d6:6c:e0:e0:ba:09:af:f5:bd:82:01:
5c:78:f9:49:5b:a6:1a:a5:13:79:2a:79:0e:94:dd:
b8:e4:c0:32:c2:e5:8f:c1:87:98:30:58:87:25:6c:
89:7a:94:33:b8:bc:33:28:93:85:e3:d6:d1:3f:da:
68:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:45:9D:D4:A6:1A:2D:5A:72:D1:DD:22:B7:0C:47:6C:C7:35:1E:F2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd897f02-f798-4986-9dc8-1ffb08d0fab7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.201.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:3e:f0:8c:d4:ba:5d:b4:e4:e3:05:df:df:10:ed:4d:f3:98:
74:91:58:7a:1a:11:7f:94:29:ab:34:af:50:9d:17:1b:a8:c0:
5e:06:40:b3:10:c2:02:3c:5a:97:fe:0f:d4:4d:bb:57:05:6b:
1a:ab:a1:a6:6c:71:94:bb:85:b1:33:82:0a:d7:9a:f6:61:7d:
ff:a2:be:c0:a8:97:43:f4:31:10:18:69:86:5c:e7:2e:d6:35:
e5:6d:01:47:16:83:d6:97:9a:ce:9b:73:36:e0:ff:d2:62:c5:
de:9c:6d:ad:3d:ac:e6:81:4c:14:59:de:26:bd:51:49:e5:3c:
c1:e7:ea:04:8c:72:c4:b6:ca:39:c3:de:d8:52:83:1e:2d:ba:
dc:34:43:46:31:bd:12:07:02:05:09:4c:2c:e4:1f:45:23:63:
ce:9f:95:fc:3c:e4:df:c9:c7:b1:9f:a9:ca:6b:71:61:a5:e1:
94:45:04:88:fa:d1:29:31:3b:cd:ed:81:26:dc:a7:bf:e7:94:
8e:6f:88:4d:86:87:84:ab:43:8e:b7:1f:38:90:cf:67:24:30:
37:00:5b:28:1c:6d:92:90:4f:e4:54:9a:89:7c:57:01:15:a8:
b8:f0:db:6e:1d:49:92:fd:83:6a:8f:6e:53:a5:9f:6b:c8:30:
08:03:f6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:49:19 2025 by rpki-client