Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f330f29-7815-41cf-acef-d62c1086aaef.roa
File: 9f330f29-7815-41cf-acef-d62c1086aaef.roa (raw, json)
Hash identifier: Kef5FvQ2YHYjvpHoS6eOBclCOCeQs8Vde5pq21PHck0=
Subject key identifier: F8:E5:BE:62:FF:40:D9:E4:E8:B7:07:8B:97:42:1F:F3:FC:33:15:21
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 14099DA005F521B0FF38B643D44B5D9B91D90809
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f330f29-7815-41cf-acef-d62c1086aaef.roa
Signing time: Mon 20 Oct 2025 01:11:57 +0000
ROA not before: Mon 20 Oct 2025 01:11:57 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:09:9d:a0:05:f5:21:b0:ff:38:b6:43:d4:4b:5d:9b:91:d9:08:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 01:11:57 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=522eadedd24b8c003e16562dea4a70392b2dab8ae81ea07c29e1ad409b909234, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a4:fd:d1:a7:c8:27:63:b6:a3:3f:60:f3:4a:
43:c3:b2:cf:10:ea:6e:05:5f:62:4e:fc:38:4b:83:
24:1e:cb:f5:33:e9:7b:2c:96:03:ae:29:be:6d:3d:
4b:d4:0b:a4:50:f8:48:b6:03:6e:7d:da:6c:d3:82:
dd:20:c9:ef:67:40:e6:48:2e:5f:85:52:29:b4:58:
3b:cd:fc:93:17:20:21:ad:4f:c2:be:4d:94:0e:84:
d4:a7:6f:34:f9:aa:6d:2f:c0:65:9c:56:8c:fa:92:
39:f5:0e:4f:49:47:30:e2:1f:d5:2c:ed:b9:b4:3b:
e7:f9:36:b8:bc:bb:63:71:25:68:ee:0b:11:06:08:
41:cd:62:78:26:b3:4c:ee:37:10:ac:fc:45:91:c4:
3b:03:83:c6:e9:cd:e7:da:f3:72:01:b9:4d:5e:a2:
8b:41:61:ee:d9:59:ef:d2:5e:48:c7:dd:ca:40:33:
9f:97:80:a4:07:64:e8:bc:36:18:f6:97:2b:4d:90:
d8:2d:d6:fc:2f:9f:fc:88:1b:6b:85:c4:74:3f:22:
48:89:3d:2e:0c:5e:31:0c:53:e3:ad:2c:5c:04:9d:
c2:26:75:a5:7e:7e:bd:ca:95:35:f1:11:fb:c8:bc:
4c:f4:50:2a:9c:1f:0d:4b:0e:33:1f:5b:75:8c:13:
a8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E5:BE:62:FF:40:D9:E4:E8:B7:07:8B:97:42:1F:F3:FC:33:15:21
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f330f29-7815-41cf-acef-d62c1086aaef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.31.0/24
Signature Algorithm: sha256WithRSAEncryption
49:a4:cd:68:dc:42:d0:76:72:56:52:7f:0f:06:ba:03:a9:df:
1c:07:25:7e:2e:16:7a:44:66:74:2f:d5:79:e2:ad:dc:95:ce:
8f:b4:23:d4:ab:2f:2f:68:bb:79:cf:aa:78:4c:de:13:c9:96:
01:f5:f1:ce:4c:75:e9:9d:a5:7d:a0:17:bb:ea:e1:20:09:1d:
45:c1:da:3d:56:1b:59:63:cf:3e:ec:a9:49:c5:a2:36:4b:0b:
e6:8b:b3:ea:72:2a:cc:b8:24:82:e3:b6:aa:02:10:cd:4b:05:
c6:3d:fb:b0:c5:b4:ea:36:5c:e3:a9:3b:8a:bf:1c:92:aa:b6:
48:df:85:57:fa:8c:48:a6:b0:d4:f4:b9:6a:b5:27:bf:ef:ba:
93:a8:d6:63:c2:74:c6:7c:5a:e0:35:36:c5:99:be:6d:77:95:
80:67:9a:ed:0c:76:7d:ad:cc:1b:1b:95:79:d1:1a:c4:32:82:
fd:4d:3f:b0:85:f1:85:ef:f6:64:40:3e:ad:12:81:b5:b6:35:
18:42:1a:b5:ee:20:3c:94:c2:01:f4:d8:38:ea:62:cb:75:1f:
17:72:0f:8c:63:3a:6e:b8:99:cc:2f:09:d3:31:ed:53:c0:91:
63:2c:e8:73:53:23:20:f6:17:86:b8:73:27:cc:91:34:38:aa:
8e:3d:0a:5a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFAmdoAX1IbD/OLZD1Etdm5HZCAkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDExMTU3WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A1MjJlYWRlZGQyNGI4YzAwM2UxNjU2MmRlYTRhNzAzOTJi
MmRhYjhhZTgxZWEwN2MyOWUxYWQ0MDliOTA5MjM0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJpP3Rp8gnY7ajP2DzSkPDss8Q6m4FX2JO/DhLgyQey/Uz
6XsslgOuKb5tPUvUC6RQ+Ei2A2592mzTgt0gye9nQOZILl+FUim0WDvN/JMXICGt
T8K+TZQOhNSnbzT5qm0vwGWcVoz6kjn1Dk9JRzDiH9Us7bm0O+f5Nri8u2NxJWju
CxEGCEHNYngms0zuNxCs/EWRxDsDg8bpzefa83IBuU1eootBYe7ZWe/SXkjH3cpA
M5+XgKQHZOi8Nhj2lytNkNgt1vwvn/yIG2uFxHQ/IkiJPS4MXjEMU+OtLFwEncIm
daV+fr3KlTXxEfvIvEz0UCqcHw1LDjMfW3WME6h5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU+OW+Yv9A2eTotweLl0If8/wzFSEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzlmMzMwZjI5LTc4MTUtNDFjZi1hY2VmLWQ2MmMxMDg2YWFlZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsnB8wDQYJKoZIhvcNAQELBQADggEBAEmkzWjcQtB2clZSfw8GugOp3xwH
JX4uFnpEZnQv1XnirdyVzo+0I9SrLy9ou3nPqnhM3hPJlgH18c5MdemdpX2gF7vq
4SAJHUXB2j1WG1ljzz7sqUnFojZLC+aLs+pyKsy4JILjtqoCEM1LBcY9+7DFtOo2
XOOpO4q/HJKqtkjfhVf6jEimsNT0uWq1J7/vupOo1mPCdMZ8WuA1NsWZvm13lYBn
mu0Mdn2tzBsblXnRGsQygv1NP7CF8YXv9mRAPq0SgbW2NRhCGrXuIDyUwgH02Djq
Yst1HxdyD4xjOm64mcwvCdMx7VPAkWMs6HNTIyD2F4a4cyfMkTQ4qo49Clo=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:41 2025 by rpki-client