Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c922c85-21b8-4d32-8262-26dc83b39421.roa
File: 3c922c85-21b8-4d32-8262-26dc83b39421.roa (raw, json)
Hash identifier: QDXfmcK9aBpm0wSlc9ntgn1w7HM2LYyDFteGFwCDGSE=
Subject key identifier: 84:7E:98:D7:01:30:FD:F1:22:BE:F4:90:9C:83:5B:90:41:34:32:CC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0F45F4F787A086FF2D45E084A1D4DDDE0B9A9F30
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c922c85-21b8-4d32-8262-26dc83b39421.roa
Signing time: Mon 20 Oct 2025 02:12:29 +0000
ROA not before: Mon 20 Oct 2025 02:12:29 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:45:f4:f7:87:a0:86:ff:2d:45:e0:84:a1:d4:dd:de:0b:9a:9f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:12:29 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=c4eb3e7ca084a09276d029c3543f3619f72b0fa635d7d69226977f40c5bea75c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ff:ca:84:c1:f2:74:36:51:5d:a7:89:ca:05:
94:0e:19:10:09:fe:f9:07:71:61:5c:57:28:60:01:
af:4f:bd:6e:18:7c:4c:99:4c:a5:3b:fc:b4:73:1c:
e9:00:56:26:e9:06:e6:4f:4d:44:d7:3a:cd:38:92:
50:6d:d3:3d:17:1e:7f:9f:d8:f4:d1:96:16:50:01:
e2:7c:bd:56:b1:7b:db:2b:a3:9d:13:4a:37:9e:0f:
15:94:f4:ce:2b:d8:73:a5:a1:51:b3:83:08:88:28:
e0:d4:30:63:c3:a5:92:94:c6:82:59:b2:d6:47:17:
ec:e0:6c:dd:4d:6f:db:fd:f6:51:8d:d6:21:28:7b:
68:d2:22:6e:c7:5d:73:43:18:75:c5:a4:17:4c:cc:
93:a7:69:c2:f6:73:63:b1:27:18:48:de:d7:d9:71:
af:79:9a:e1:cc:02:59:e0:67:9b:f3:a3:b0:a4:32:
0c:8d:a9:b8:3a:c6:e1:cc:ff:8f:29:8d:27:07:fe:
d8:67:d2:70:71:03:6a:a5:70:d1:b3:da:4c:d9:63:
fd:65:b9:b3:0c:8c:65:11:a7:3d:b0:b8:28:b3:fb:
20:cd:b7:b0:51:f2:ce:19:07:a0:fc:61:a3:a5:cd:
47:2d:d3:34:90:ef:14:11:18:94:9c:b9:d6:89:0f:
82:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7E:98:D7:01:30:FD:F1:22:BE:F4:90:9C:83:5B:90:41:34:32:CC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c922c85-21b8-4d32-8262-26dc83b39421.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.39.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:a9:e9:10:84:81:52:8d:b3:2c:83:05:c9:47:16:2b:cf:a5:
f5:ca:05:47:e1:be:cd:9d:c6:b6:dd:ec:f3:5b:7a:40:cf:e4:
96:64:38:28:c9:56:6c:12:d6:6c:df:58:52:c0:14:36:32:28:
8e:41:19:d9:47:16:03:f9:37:21:81:78:eb:ba:e2:cf:cf:b9:
0a:13:41:91:4e:bf:72:c6:aa:0b:3e:88:bd:36:00:06:91:2f:
01:11:76:da:be:2d:7c:14:a4:d5:d8:64:87:8f:c4:ac:64:0e:
92:64:e7:32:56:a5:f5:cd:4a:4a:e7:93:c7:1a:8f:c4:0f:1c:
b1:c3:a6:96:de:65:33:34:14:61:96:ca:70:c7:d7:ae:5a:1f:
bc:da:85:2b:8e:33:7c:d8:54:29:02:33:ec:09:87:13:57:7c:
47:73:43:f3:85:3a:c6:88:65:8e:eb:47:9e:45:84:54:6e:4d:
77:a3:44:5f:4e:67:14:b8:d8:1d:9a:08:53:01:75:8b:9e:e3:
67:f0:21:b5:a9:6b:cb:b7:22:98:df:92:81:ee:9c:ac:6e:43:
45:b5:5f:a7:ae:27:5d:6b:15:3e:b8:57:15:30:4e:ad:01:71:
ae:54:f1:c4:6b:f4:30:37:cf:29:92:2b:8c:ad:7b:35:b5:18:
ac:30:3f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:20:07 2025 by rpki-client