Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/864ea874-5e2c-4d1d-83a6-34bd31b28e5d.roa
File: 864ea874-5e2c-4d1d-83a6-34bd31b28e5d.roa (raw, json)
Hash identifier: aR2jHlwXYqrnBmYABH2xJ73NjmPFLCS4RXADuscrERw=
Subject key identifier: FE:59:78:F2:FD:89:3B:1D:77:52:95:E0:26:08:36:A6:09:02:1E:C7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0BCE5A0AC1B6EA463CDAA5EA17655B7FDB81941A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/864ea874-5e2c-4d1d-83a6-34bd31b28e5d.roa
Signing time: Mon 20 Oct 2025 05:02:17 +0000
ROA not before: Mon 20 Oct 2025 05:02:17 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:ce:5a:0a:c1:b6:ea:46:3c:da:a5:ea:17:65:5b:7f:db:81:94:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 05:02:17 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=3fd4f9017176c09e533f2e3583c247805e2c46ea3c809f8ccc089ca701984520, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:36:9b:a7:f5:e8:29:b6:ea:b1:84:7a:64:63:
f0:27:ab:d9:e6:d1:7e:20:b7:a6:3f:9b:c3:13:ac:
e1:f6:9b:33:20:97:0c:06:34:80:fa:cf:86:b4:ef:
f5:9d:ad:31:9b:5e:3c:1b:b9:b9:2f:9f:78:4d:fb:
80:20:01:25:31:8e:23:0e:fe:5b:90:2d:5c:0b:eb:
34:66:e6:43:a2:c6:ec:e8:1e:c7:31:87:b6:3b:ec:
d8:e1:fb:83:72:e5:99:8d:8d:b7:36:7d:52:74:1d:
16:94:a9:81:8a:8d:e5:99:de:d3:ad:4f:5b:dd:65:
95:f7:0f:70:81:51:50:c0:88:86:a6:0d:ab:29:0c:
cc:fe:e3:ac:2c:42:11:54:23:e9:44:fe:17:3b:13:
70:fc:f0:1a:f7:36:27:81:5c:6e:a7:b1:7a:85:94:
19:58:ad:56:27:c3:a6:0b:e8:0d:f7:72:50:fe:95:
d9:6d:df:eb:81:88:75:7f:4b:5b:9e:42:1c:5c:df:
b4:1b:aa:3e:75:84:6e:48:b0:5f:30:bc:a3:9d:b2:
4e:f9:9f:95:37:87:20:74:3b:e3:a0:87:c6:58:ca:
66:c9:b2:f7:c9:0e:da:69:2e:9a:85:dd:e8:a2:14:
62:b9:44:ac:5c:3b:2a:47:1c:1c:65:3a:cc:f7:27:
86:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:59:78:F2:FD:89:3B:1D:77:52:95:E0:26:08:36:A6:09:02:1E:C7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/864ea874-5e2c-4d1d-83a6-34bd31b28e5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.14.0/24
Signature Algorithm: sha256WithRSAEncryption
36:1e:41:86:25:9b:03:04:f9:03:35:df:d9:57:5f:30:e3:31:
86:77:61:e3:9f:71:4d:dd:35:8a:ec:81:1d:2e:57:42:c0:77:
34:17:c6:c3:e8:6c:43:f8:8e:19:45:fa:3c:e7:1b:11:7e:2d:
fa:bb:91:fd:81:14:65:8a:79:b0:b2:59:86:41:b7:79:ca:f6:
93:1b:fc:7b:64:a0:ef:2c:73:f7:35:ab:ad:09:53:46:33:b7:
49:27:77:fa:97:55:0d:ec:19:c8:70:41:e3:33:a3:21:bb:5d:
cc:6e:55:63:5f:28:63:d0:28:c1:98:8f:22:8e:6d:ce:d0:8f:
d6:c2:d0:42:63:3c:68:da:2c:bb:cb:2e:80:20:98:93:27:65:
3b:e0:48:af:4a:b5:4c:3c:bf:78:36:25:82:eb:99:b7:ac:57:
97:06:a6:03:9a:f9:a8:82:36:81:f6:92:e8:74:cb:df:b2:d7:
ff:c6:da:7e:ff:4c:08:0c:fe:9f:9a:90:54:a3:91:79:5b:59:
9d:77:27:3c:ce:93:46:58:94:fc:22:3e:18:a6:e5:b9:99:e4:
b8:b0:c0:a8:6a:e7:9f:fb:3d:9f:79:8b:57:71:23:5b:b0:02:
a3:95:bc:11:a1:57:4a:92:72:c3:be:b4:6b:95:a5:be:b7:d5:
43:ce:23:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:41:44 2025 by rpki-client