Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c42edfe-2931-462a-91ac-78eb58a8e8b5.roa
File: 7c42edfe-2931-462a-91ac-78eb58a8e8b5.roa (raw, json)
Hash identifier: Nk3ocskMRGljDH4jPgJKSKA99fJqOU2U4x+I5fKL9vM=
Subject key identifier: 54:B8:DC:46:53:5A:01:9F:BB:F4:F9:81:DC:23:33:91:5C:91:07:12
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 310EFF43E262806E0B700276282E37A0D40D5796
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c42edfe-2931-462a-91ac-78eb58a8e8b5.roa
Signing time: Mon 20 Oct 2025 05:32:15 +0000
ROA not before: Mon 20 Oct 2025 05:32:15 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:0e:ff:43:e2:62:80:6e:0b:70:02:76:28:2e:37:a0:d4:0d:57:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 05:32:15 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=76c284fd62ea32a718fbecad04ce39efb39bab9c4c46c511b24a50adde81743c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:59:0b:10:f5:52:24:b3:d6:7e:bb:8e:58:
c7:ed:72:61:1a:b1:ce:d9:94:c9:58:46:6f:65:dd:
38:84:07:b4:7e:d9:99:22:c0:34:95:97:92:80:cd:
83:fc:dc:e9:d9:45:15:22:e4:53:ed:f0:a0:0c:ec:
05:1e:71:42:64:85:12:20:05:a3:aa:6d:8b:ff:ab:
5d:29:ce:60:65:f5:2a:f1:aa:61:1e:f4:a7:c5:0f:
b9:d6:6d:bb:4c:4c:ba:e2:87:fa:4e:6d:dc:d7:9c:
36:a1:ea:63:16:d8:7c:34:35:80:5c:4e:8a:36:8c:
1d:b5:96:2d:28:62:29:62:91:7a:1c:d0:5a:b9:2d:
69:74:be:e7:37:d5:f0:13:ea:db:d4:9c:ad:a5:e3:
63:17:25:d2:7c:f4:07:c4:98:e1:f9:10:5c:64:31:
76:fc:67:94:a6:01:f6:65:ed:27:ff:30:64:43:81:
1a:8b:2c:a9:97:ed:e9:b9:a6:22:eb:1e:38:cd:57:
9c:4b:56:94:e1:fc:0e:04:e2:76:01:ac:f2:2d:b0:
30:98:eb:a7:0e:b6:f3:ec:e9:31:39:7d:63:62:3f:
56:55:1f:0d:91:8d:d7:fb:f0:2d:17:e4:31:33:fa:
7d:a6:42:59:38:54:aa:10:48:5a:26:a0:6d:3f:3d:
94:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B8:DC:46:53:5A:01:9F:BB:F4:F9:81:DC:23:33:91:5C:91:07:12
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c42edfe-2931-462a-91ac-78eb58a8e8b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.188.0/22
Signature Algorithm: sha256WithRSAEncryption
65:48:76:1c:f9:f8:cf:0e:69:1b:e3:96:15:90:1d:c2:14:6e:
6a:df:19:bb:49:44:b8:38:bf:c1:f3:30:2a:62:31:91:6c:6f:
2a:d4:3c:5e:b7:8d:55:9a:5d:92:77:99:eb:ce:10:c3:f2:4f:
8e:45:2e:dd:d1:be:29:99:e8:06:7b:e1:57:37:aa:e5:53:d7:
b2:e3:1e:55:b7:57:28:ca:a7:80:ce:f0:36:42:a3:82:3b:b3:
01:49:c6:8e:e9:49:2d:82:d1:12:0a:04:de:53:b1:17:ec:93:
91:f6:cc:d3:c2:6f:9a:01:3f:0c:a5:f5:30:cf:47:24:f8:4c:
ba:3e:83:cd:a6:4e:fe:4b:7e:21:4f:1f:d8:ba:62:42:e8:70:
4a:5c:3d:f5:0c:83:a5:55:45:57:c9:79:c0:b2:b4:a6:c5:55:
24:0b:d8:0b:22:6f:a3:1b:d3:be:bc:5e:52:21:51:72:be:5d:
a6:3c:5d:9c:74:6b:2d:95:42:d1:ba:cb:de:c7:a4:c9:92:90:
10:bd:a2:84:81:e3:b6:ba:17:f2:32:a9:d1:08:3e:65:1d:65:
80:b5:1a:0d:86:84:9c:9e:c1:a7:ea:3a:fa:cf:67:bb:8d:ef:
3f:f9:df:29:26:ba:48:99:1d:be:2c:0f:f4:de:72:91:bd:50:
58:8c:6f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:19 2025 by rpki-client