Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b857432-7a0b-41b8-8b1d-4ee0262e3ca0.roa
File: 6b857432-7a0b-41b8-8b1d-4ee0262e3ca0.roa (raw, json)
Hash identifier: 2CzPabullAUh476oagjE0S1m4sRVbxkdtAAEBAjO840=
Subject key identifier: C3:3F:AA:16:6C:E7:7F:1C:6F:EC:A7:10:57:A4:7C:EA:93:21:D8:99
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 19108E89E27ED345AE6AA05EC7FF06B36D1D29A9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b857432-7a0b-41b8-8b1d-4ee0262e3ca0.roa
Signing time: Mon 20 Oct 2025 04:00:59 +0000
ROA not before: Mon 20 Oct 2025 04:00:59 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:10:8e:89:e2:7e:d3:45:ae:6a:a0:5e:c7:ff:06:b3:6d:1d:29:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 04:00:59 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=2a40887971ab9ce13ff6265fc85396e3c26744d80f4cc999f0091c333d5e19f7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cc:a8:a2:c8:39:3e:4c:63:07:f0:39:70:1a:
e1:1c:4b:ea:1b:11:ca:b6:38:e6:43:4f:5e:9a:18:
ae:41:70:7e:67:ae:3f:50:c9:3e:01:53:92:d7:12:
2c:f8:51:94:74:c0:20:63:4b:0c:bd:f2:07:1a:85:
45:fd:41:33:e3:bc:65:fe:6b:bf:bc:4e:3a:73:7b:
79:c4:79:3e:29:ae:84:7c:a8:e3:70:39:22:90:d6:
f7:b3:74:54:f1:a3:19:15:06:82:c3:6b:1c:e0:08:
e2:13:09:a3:93:e3:f4:6a:4a:a6:38:e8:4c:aa:37:
01:82:67:f8:dd:01:05:bf:80:c4:57:a9:79:09:eb:
25:ac:d3:c9:3f:ff:2c:79:b4:bb:5c:8f:0e:35:91:
cc:0f:e5:42:4f:ed:cb:6e:f1:9e:40:3e:bc:6e:4c:
e5:d0:3e:f4:b5:78:b0:af:42:09:70:c6:71:0f:c6:
00:27:1c:39:e0:9d:32:aa:58:8f:1e:9e:9d:22:c5:
ef:05:10:70:a1:bf:42:44:e0:b5:de:cf:2c:81:12:
31:e2:13:39:a9:b6:65:5e:2e:ed:3f:b9:e0:70:ff:
96:e2:63:45:3b:b2:82:a8:57:61:36:59:f2:4c:dd:
9e:4c:1b:19:f2:1c:10:b6:d0:a3:f9:90:4a:80:36:
7f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3F:AA:16:6C:E7:7F:1C:6F:EC:A7:10:57:A4:7C:EA:93:21:D8:99
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b857432-7a0b-41b8-8b1d-4ee0262e3ca0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.61.0/24
Signature Algorithm: sha256WithRSAEncryption
89:03:7e:32:74:40:65:c6:9c:20:1f:a4:8b:53:8f:8c:f0:48:
2c:c7:9b:28:75:4c:23:36:de:65:b4:80:62:ac:6a:ec:f0:32:
e1:d1:7c:4a:52:a4:44:3e:67:c4:50:49:b1:b5:bb:9c:f7:6c:
29:5a:a0:d2:b6:5d:d6:c6:99:d0:6f:af:0e:05:54:2e:79:de:
cc:00:e5:65:aa:b9:68:c9:a1:ec:c4:2e:8e:5a:f6:77:9a:a9:
51:78:28:12:32:72:5d:d4:06:3c:71:7d:10:fc:9a:bc:81:35:
c3:28:4f:59:f6:b2:90:58:c9:4d:56:64:5d:3a:b6:ef:21:28:
8b:4f:91:36:ba:96:e0:cd:c1:d3:1f:5d:38:70:94:c7:52:74:
50:a4:e3:45:f3:9e:18:46:e3:f3:64:84:2e:88:1c:7b:39:81:
93:df:aa:32:6c:9c:13:26:24:be:09:ad:c4:7c:16:1c:31:7a:
b6:41:1d:1e:79:ce:fe:37:42:90:3d:b0:33:4b:9f:eb:f5:9e:
b8:aa:03:ef:08:0c:77:33:a9:af:b0:f4:dd:95:c6:e3:4d:c0:
26:87:5a:c9:2e:02:d3:f2:1d:db:6f:a0:45:0c:7d:26:61:3f:
1f:03:82:96:8e:e7:c8:95:40:ca:c4:cc:1f:52:03:81:f3:ea:
b5:c6:7a:c9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGRCOieJ+00WuaqBex/8Gs20dKakwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDQwMDU5WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0AyYTQwODg3OTcxYWI5Y2UxM2ZmNjI2NWZjODUzOTZlM2My
Njc0NGQ4MGY0Y2M5OTlmMDA5MWMzMzNkNWUxOWY3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDUzKiiyDk+TGMH8DlwGuEcS+obEcq2OOZDT16aGK5BcH5n
rj9QyT4BU5LXEiz4UZR0wCBjSwy98gcahUX9QTPjvGX+a7+8Tjpze3nEeT4proR8
qONwOSKQ1vezdFTxoxkVBoLDaxzgCOITCaOT4/RqSqY46EyqNwGCZ/jdAQW/gMRX
qXkJ6yWs08k//yx5tLtcjw41kcwP5UJP7ctu8Z5APrxuTOXQPvS1eLCvQglwxnEP
xgAnHDngnTKqWI8enp0ixe8FEHChv0JE4LXezyyBEjHiEzmptmVeLu0/ueBw/5bi
Y0U7soKoV2E2WfJM3Z5MGxnyHBC20KP5kEqANn+FAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUwz+qFmznfxxv7KcQV6R86pMh2JkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZiODU3NDMyLTdhMGItNDFiOC04YjFkLTRlZTAyNjJlM2NhMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsnD0wDQYJKoZIhvcNAQELBQADggEBAIkDfjJ0QGXGnCAfpItTj4zwSCzH
myh1TCM23mW0gGKsauzwMuHRfEpSpEQ+Z8RQSbG1u5z3bClaoNK2XdbGmdBvrw4F
VC553swA5WWquWjJoezELo5a9neaqVF4KBIycl3UBjxxfRD8mryBNcMoT1n2spBY
yU1WZF06tu8hKItPkTa6luDNwdMfXThwlMdSdFCk40XznhhG4/NkhC6IHHs5gZPf
qjJsnBMmJL4JrcR8FhwxerZBHR55zv43QpA9sDNLn+v1nriqA+8IDHczqa+w9N2V
xuNNwCaHWskuAtPyHdtvoEUMfSZhPx8DgpaO58iVQMrEzB9SA4Hz6rXGesk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 23:49:13 2025 by rpki-client