Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c982594-884e-4ba4-8525-86863572b5ec.roa
File: 4c982594-884e-4ba4-8525-86863572b5ec.roa (raw, json)
Hash identifier: DSKlLB+FZgQ7Ia8byIp71CRmNpPb0DLeTQzpOcbhBO8=
Subject key identifier: 92:E2:CC:21:E1:2B:86:2E:E4:70:7C:30:F5:39:EE:E5:85:5A:DB:D3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1E3BF79E518F116F6F02F386C5F73A8930DC2E66
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c982594-884e-4ba4-8525-86863572b5ec.roa
Signing time: Mon 20 Oct 2025 01:20:07 +0000
ROA not before: Mon 20 Oct 2025 01:20:07 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:3b:f7:9e:51:8f:11:6f:6f:02:f3:86:c5:f7:3a:89:30:dc:2e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 01:20:07 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=e40cd467126803cd82d1df6b78794c0c35dd83fe244bf1e29dcd48d4c8f7b051, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d8:72:b9:40:c6:3a:3d:08:14:64:10:b3:dd:
22:42:0f:3b:53:b6:65:24:15:6a:70:64:67:f2:81:
da:d7:9f:39:62:50:29:ed:a6:02:7a:b2:68:51:c1:
b2:00:88:23:62:a9:a5:a9:4c:14:15:61:82:97:54:
0e:d3:9f:61:00:0b:94:6d:b2:d3:7a:ec:64:2c:4a:
82:7a:75:14:ee:2c:e0:5a:72:80:10:92:ef:ae:e2:
51:70:83:b1:2d:ba:ee:1b:14:e1:8e:58:3b:11:04:
8f:dd:a4:92:61:73:14:a1:43:f2:85:85:62:8a:b3:
e2:33:10:d6:dc:91:44:6e:d4:21:25:3d:d0:a1:7a:
10:bb:66:e9:bb:38:5d:95:8f:78:aa:d3:01:2a:47:
68:8b:56:fc:c9:ac:5e:5a:df:6e:4d:10:40:41:d9:
cb:7d:f4:05:c6:55:37:a2:7f:f8:01:7c:f9:1f:59:
10:b7:db:7f:3b:b2:59:20:a8:cd:e6:ff:63:6e:24:
56:26:16:1a:9a:82:a5:2e:b6:8b:3e:aa:44:d7:81:
b7:cf:f7:ae:71:59:49:62:3a:d0:4d:f3:96:60:3c:
9d:da:f1:95:20:89:f5:ee:68:6b:59:84:8f:82:4a:
98:d0:4f:02:2d:a2:57:38:14:c9:0f:ec:f3:68:ea:
6c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E2:CC:21:E1:2B:86:2E:E4:70:7C:30:F5:39:EE:E5:85:5A:DB:D3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c982594-884e-4ba4-8525-86863572b5ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.185.0/24
Signature Algorithm: sha256WithRSAEncryption
35:81:54:e1:91:d9:a0:82:6b:93:55:80:cd:63:d1:8e:3d:e9:
05:1a:7c:72:a4:11:ff:bf:e6:f1:d0:b6:50:12:76:ed:1a:53:
ee:b9:0c:f4:b8:e1:b1:5f:d9:e2:4a:d6:ee:70:10:59:a6:a6:
a6:44:1b:93:b2:58:8b:98:01:ba:bb:36:63:dc:0d:d4:7f:57:
67:b2:27:c4:5b:68:0d:ff:04:de:dd:aa:56:f1:36:46:5b:5a:
1e:5d:c5:d7:68:6e:38:5f:e0:01:f5:ec:80:87:8c:4b:ce:ad:
72:96:95:38:ed:6e:3c:6c:db:fc:27:50:1f:44:65:1a:45:0d:
c9:8e:50:84:32:98:f9:f6:9e:7e:79:f7:14:85:cd:98:bf:fc:
5a:ed:53:8a:c9:4e:dd:40:b8:b4:8e:27:6e:4d:8c:86:5a:51:
79:70:ab:e4:6f:16:76:00:db:ff:11:35:d0:00:d9:9b:c4:56:
f7:79:3a:d7:d3:4b:2e:6f:64:91:cb:61:ae:ca:10:d7:7f:e5:
6d:e8:fb:01:d6:b5:22:ac:a3:f9:dc:68:0d:4a:16:32:e4:ee:
24:b3:c3:1d:7d:36:17:71:e4:df:94:3e:44:ec:25:a0:d3:31:
08:30:eb:0d:48:5b:51:a6:a0:c2:ee:a9:f8:cb:0d:8d:f7:53:
c9:aa:8e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:28 2025 by rpki-client