Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87c9f8c7-dd80-421e-81e4-2996666f098c.roa
File: 87c9f8c7-dd80-421e-81e4-2996666f098c.roa (raw, json)
Hash identifier: meSzAgN/HTFquRht353pWlUZ2BFZdjCe5imbvLlqE2Y=
Subject key identifier: 41:C6:CD:0E:CC:9F:D7:28:3C:59:44:8F:90:C1:E6:43:E7:C3:B9:BE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 629C0379DBFD6A43E72EB5371E712C0B1D80CEBA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87c9f8c7-dd80-421e-81e4-2996666f098c.roa
Signing time: Mon 20 Oct 2025 04:41:26 +0000
ROA not before: Mon 20 Oct 2025 04:41:26 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:9c:03:79:db:fd:6a:43:e7:2e:b5:37:1e:71:2c:0b:1d:80:ce:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 04:41:26 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=e4ad3d95ce1b845aff668ef01a1413b6c4b04733893b05c3da7caf3efc73947f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:17:ed:f3:e4:5d:99:79:c3:fe:2b:41:40:9b:
d2:f8:07:7c:34:39:4c:d1:74:35:ec:a1:85:da:b8:
16:46:22:20:b3:34:40:47:f3:07:6c:0b:a3:f3:25:
6e:ff:8e:38:4c:6e:8d:b0:1f:2b:07:9b:0b:df:c3:
67:d0:c6:82:5e:f4:f0:76:d6:4f:45:8b:3c:2c:fb:
31:4b:e8:76:01:df:b3:35:61:d6:6c:71:50:21:95:
0c:69:4d:b4:05:85:bb:e4:a0:1f:bf:3b:48:3e:de:
f5:c5:e1:5a:e1:5c:25:9d:d6:e1:59:d9:88:40:ed:
20:87:cb:a3:29:fd:f8:5b:0b:d1:ac:f1:f0:f5:e9:
23:80:d8:7e:1e:64:be:ad:95:84:92:e9:33:da:cb:
dd:c0:dd:72:5f:a0:3c:ac:f9:80:34:86:63:39:04:
7f:1b:1e:e7:09:71:51:e4:d3:5e:5b:fb:c8:8b:4f:
c2:6a:98:ea:73:6f:b6:77:ee:77:db:53:04:ea:cd:
10:bf:10:42:c3:05:7e:19:b4:9b:75:d5:c2:e6:5f:
18:88:79:af:09:00:cc:b7:83:eb:9b:12:54:a6:a9:
1b:66:6a:91:91:c4:ad:fa:cd:6f:c2:da:7f:90:84:
28:9e:c5:3c:eb:bb:4b:2b:70:83:a5:70:8e:53:ae:
fe:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C6:CD:0E:CC:9F:D7:28:3C:59:44:8F:90:C1:E6:43:E7:C3:B9:BE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87c9f8c7-dd80-421e-81e4-2996666f098c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.68.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:4a:2d:23:4e:26:cb:14:dc:cd:69:58:97:a9:0c:a0:fb:0a:
c6:02:66:5e:20:60:2e:60:b7:5f:a1:19:eb:52:45:36:cd:77:
2b:ab:59:09:ef:88:67:c9:6f:38:58:b0:59:2b:ae:80:ae:af:
f2:95:69:91:f1:1f:90:4d:64:36:0d:82:36:6a:53:aa:ba:05:
d6:01:a9:fe:78:32:6c:12:86:46:d2:a1:7f:8a:66:cc:12:37:
fe:cf:02:c4:ed:36:b6:67:3d:74:15:c3:6b:63:75:d4:60:49:
66:33:79:09:8e:d6:4d:ad:cb:49:06:4a:5a:85:cb:25:f4:3d:
a3:e7:5f:26:e8:32:6f:e9:dc:68:0b:3d:2e:9d:66:3e:58:b1:
03:43:14:ed:16:9f:17:dc:d6:ab:ce:46:c6:bc:45:ac:7c:32:
9e:12:41:25:02:85:b8:fc:59:55:30:af:ad:4b:5d:c2:20:53:
f7:d6:f9:da:2b:05:4c:79:85:96:cf:af:35:1b:c9:4f:4f:b3:
3e:5a:a2:21:85:f5:76:b3:a0:f5:5b:73:57:91:dc:e8:d0:3f:
00:b9:11:a9:a1:bf:ab:96:bd:12:9c:ef:a1:ee:70:19:95:48:
f7:36:fb:3c:56:76:10:30:cf:b7:60:41:d1:8f:84:fd:24:a2:
1d:f7:dc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:41:49 2025 by rpki-client