Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59074798-7f7a-43d5-8555-2fcf90771598.roa
File: 59074798-7f7a-43d5-8555-2fcf90771598.roa (raw, json)
Hash identifier: 1yVAqBP5x03z+49kfY1YmEMK0FFYE+AXtslcV/PEnL8=
Subject key identifier: A9:84:94:C9:C1:FD:E3:38:39:26:37:48:50:AC:E0:9E:6A:B9:74:90
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 50AF21C8FB597E610AB90A461E38AA461ABFA829
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59074798-7f7a-43d5-8555-2fcf90771598.roa
Signing time: Mon 20 Oct 2025 00:30:13 +0000
ROA not before: Mon 20 Oct 2025 00:30:13 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:af:21:c8:fb:59:7e:61:0a:b9:0a:46:1e:38:aa:46:1a:bf:a8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 00:30:13 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=5da5ab73200ecf9cb0fedfb569aa408d2ed5ecaeaa7a2cfac418bacce453dbfd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c5:a7:18:4d:34:78:d2:96:67:60:3a:26:3d:
09:3a:df:45:a3:5e:76:05:4f:b2:15:03:76:5e:f4:
90:1f:89:79:82:eb:84:02:cc:7f:39:1a:84:9d:25:
78:45:d8:61:37:ac:92:17:f2:f7:5d:17:80:01:6b:
3e:a1:af:df:e0:10:4f:a9:1d:0d:a0:66:f8:c6:1d:
62:1a:f2:ff:17:56:d4:56:11:3b:1e:48:bc:10:5f:
70:ac:d5:0c:85:00:19:77:d5:3f:78:73:d6:7a:dc:
53:94:e3:b3:85:8e:2d:d3:92:aa:3b:10:38:eb:4a:
f4:19:f5:61:7d:b6:9b:53:9e:cc:2d:34:53:af:98:
38:66:dc:38:c2:8e:a2:0d:2f:6f:c2:e7:0f:03:9a:
19:40:75:41:c0:da:28:8f:f7:8f:86:25:f1:11:55:
bb:f7:90:70:d7:b2:41:bc:fa:9f:a4:b0:dd:0c:ac:
94:ad:65:4d:c5:c5:4a:b8:f7:d0:0a:63:53:51:56:
70:aa:98:b0:3b:7b:71:fd:27:cf:6d:ff:e3:3c:a5:
ca:1f:bf:25:8a:d9:99:03:e2:7c:1b:4f:d1:09:d1:
3d:91:3e:df:c5:86:32:57:16:e3:b7:b8:91:88:d2:
01:47:01:f3:cb:84:0e:18:4d:c1:d5:18:f6:5e:9c:
bc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:84:94:C9:C1:FD:E3:38:39:26:37:48:50:AC:E0:9E:6A:B9:74:90
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59074798-7f7a-43d5-8555-2fcf90771598.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.41.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:4f:2f:0f:36:46:ae:01:d9:19:f0:a3:2b:f8:3e:fe:fa:88:
a8:42:a3:d3:d3:b5:ec:08:aa:79:fb:b8:b0:b4:42:f6:4f:d4:
80:8f:b8:71:d3:c9:06:65:52:66:e5:25:c2:af:85:2e:f4:54:
b6:d2:70:c9:11:60:ea:98:2f:b9:35:07:8d:eb:34:d4:52:65:
e6:b2:c9:5f:fd:34:33:6a:d4:8b:17:0e:a0:48:ff:2d:1f:88:
1f:e1:3c:06:4b:2f:5b:86:b1:c7:07:16:24:b0:c2:74:c8:59:
e2:25:62:00:80:0c:88:55:57:77:49:5c:85:9e:93:dd:9f:fb:
d9:1a:e6:48:3e:a7:69:37:6e:61:a6:55:7d:05:56:3d:e3:60:
a3:f8:f8:6a:af:98:55:cd:19:9f:f1:c0:d9:81:4c:d1:d4:02:
82:7c:c8:6c:1a:21:5b:99:91:36:fc:51:6d:66:fc:c6:22:25:
52:4e:86:03:ae:78:43:ca:ec:f9:b5:11:15:56:22:fc:a6:51:
1c:fa:d5:3f:5d:ba:3c:89:44:11:81:a5:e5:fd:c2:9f:cd:90:
11:75:6a:02:7c:ae:c8:48:f2:28:e6:3d:ea:07:7e:19:fe:85:
29:02:d3:c5:6d:62:69:30:e5:f1:6a:09:de:b2:9c:07:4b:28:
01:7e:ad:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:10:46 2025 by rpki-client