Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a808ed35-a8bf-4a97-b0c8-774932842116.roa
File: a808ed35-a8bf-4a97-b0c8-774932842116.roa (raw, json)
Hash identifier: FHwNKyWyiFN5SNW0GOGY7bU0EbLtwstu+OMZFv8ddKA=
Subject key identifier: 1C:EB:5E:60:7E:47:08:94:F4:71:17:87:0B:76:43:2C:D8:64:90:2A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2DF2EE902329B6E7F466007B6796AA34F1433BB0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a808ed35-a8bf-4a97-b0c8-774932842116.roa
Signing time: Mon 20 Oct 2025 00:10:04 +0000
ROA not before: Mon 20 Oct 2025 00:10:04 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:f2:ee:90:23:29:b6:e7:f4:66:00:7b:67:96:aa:34:f1:43:3b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 00:10:04 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=29515ebadd507490484cd142adb07e1af67ae7de2727ccaec096ee0a6ffeb79b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9d:ed:19:6e:35:4f:ae:41:d2:4f:31:d3:40:
80:6e:ca:28:ec:3a:90:82:10:93:5e:47:62:9a:9b:
29:ad:ca:8a:c3:51:62:41:b5:44:01:5e:83:e0:a0:
87:3a:9b:a3:1d:e5:c5:72:aa:1c:7c:55:93:23:f2:
ca:d4:5f:70:69:0b:83:65:c1:5c:b0:ea:76:60:a1:
e6:ae:ea:6d:74:5e:ea:76:c3:4c:74:e6:d5:21:c3:
a7:b3:66:f9:d1:cd:c0:f7:bf:66:34:79:18:5b:9d:
37:aa:c4:82:ae:e6:9a:98:f1:59:45:a3:ba:ae:3f:
f6:5d:11:74:c2:88:ab:f7:a6:dd:5a:e9:37:ef:e1:
f4:77:68:27:61:63:a6:b0:9d:09:5a:88:a6:b3:43:
c9:79:5a:44:34:72:0b:b6:b1:25:38:15:b1:f4:7e:
df:6c:8a:6b:3b:30:0c:e9:37:14:55:64:12:a8:51:
c5:de:e8:eb:51:08:62:ac:d7:bd:8e:32:70:28:b8:
9a:79:ab:98:e2:8d:80:5f:99:a8:80:e8:18:d0:06:
6e:7a:cb:cc:55:8c:da:1d:05:86:3c:44:3e:5a:7f:
97:5e:77:00:92:34:c0:0b:7d:9f:16:d7:23:48:da:
e2:ab:f9:76:63:58:83:d3:76:d7:b5:18:20:06:33:
dd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EB:5E:60:7E:47:08:94:F4:71:17:87:0B:76:43:2C:D8:64:90:2A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a808ed35-a8bf-4a97-b0c8-774932842116.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.15.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:5a:bd:a4:0c:44:17:59:c8:d7:07:7c:26:35:48:8a:b9:43:
9f:af:02:52:e4:5b:04:56:70:8d:96:99:f7:d6:3a:c7:f5:af:
69:4b:59:e2:89:b2:54:66:4b:9a:4c:35:7a:df:d8:9a:16:e1:
c5:63:71:71:47:21:9f:6f:6c:4a:48:d5:2d:e4:43:7c:10:0f:
e2:25:d6:91:eb:da:bd:f7:3d:ba:24:f4:d3:60:16:12:55:2e:
28:eb:dd:62:78:af:d1:25:b1:8e:e7:f0:ee:bf:bd:ff:f8:ce:
25:0a:c5:96:fa:a0:ac:bc:12:57:1f:98:74:5a:bd:56:fd:3e:
56:3e:03:77:1f:2a:0c:8b:fc:3e:1c:7f:df:39:82:d4:e5:df:
c1:64:b0:fe:67:da:38:5e:cb:c3:30:92:33:7f:09:58:fb:2c:
3a:05:69:1e:45:89:90:7e:63:04:68:69:e2:8e:0b:c1:8f:4c:
98:e0:aa:76:27:af:67:3a:2a:7e:51:f1:70:4d:46:6e:c2:63:
2e:81:5b:c7:81:26:b3:f9:15:06:41:f6:1e:0f:3b:dc:3f:31:
a3:00:fd:28:2e:9b:96:5c:a6:be:b3:d3:f6:22:ff:e6:8f:e7:
00:8c:af:86:a9:62:5c:a2:2c:ca:8c:e1:3c:f4:2c:fd:49:22:
25:c5:cb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:10:37 2025 by rpki-client