Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01f99b66-a5c4-4ea9-8c43-900cc778326c.roa
File: 01f99b66-a5c4-4ea9-8c43-900cc778326c.roa (raw, json)
Hash identifier: 47SJReFEjOsuZzxboHjCBAhGbCVCUzXE6njjK/7U0Bg=
Subject key identifier: 4B:4A:FF:B6:86:07:FF:B9:07:90:24:A0:46:B8:C4:D6:36:D8:7A:22
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 230BCCF84C7EEC6A065640D8FE17897258239B4F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01f99b66-a5c4-4ea9-8c43-900cc778326c.roa
Signing time: Tue 14 Oct 2025 17:52:35 +0000
ROA not before: Tue 14 Oct 2025 17:52:35 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 71.152.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:0b:cc:f8:4c:7e:ec:6a:06:56:40:d8:fe:17:89:72:58:23:9b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 17:52:35 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=5c826f1baabe5dade8427a8d9de92abbfb44a8ef55c3b9703b1c58bf26aa3dc1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:c2:ae:bf:25:e0:79:66:1d:32:de:62:de:
c3:22:e0:f8:f4:e5:27:9a:a0:4e:dd:44:f4:91:4f:
ab:a0:6a:9b:df:c1:f9:e5:36:2f:f0:8a:63:37:1a:
66:a1:e1:9f:3c:1f:dc:59:3c:55:46:51:8c:86:70:
d6:7e:4e:90:79:6b:44:b6:cf:88:84:25:79:03:ec:
7e:bf:12:04:ff:9b:6f:e8:a6:22:bc:54:16:cb:87:
04:c2:e9:14:c3:0f:2b:de:af:ca:75:3a:71:c4:88:
ec:bb:3e:10:19:aa:60:a1:25:d6:6e:10:ec:77:5d:
ab:25:6a:f8:8d:65:7c:f6:ad:87:58:20:ae:fa:0b:
32:ba:52:71:34:7b:c6:ad:c7:d7:23:b3:93:67:ff:
12:70:5a:e9:e9:21:b5:45:87:aa:56:f5:e8:85:5e:
50:c7:86:5f:c9:c7:ae:a8:8e:f8:74:10:a8:cd:96:
24:35:e3:3a:7c:2b:77:4f:37:d1:7a:99:7b:a9:b7:
f7:b9:ba:b7:17:ea:42:41:24:6b:7b:26:e3:70:83:
b6:f2:3c:88:62:ba:12:65:84:ca:ca:12:c5:66:59:
60:fc:bb:85:fe:45:ef:0c:db:30:37:de:b8:67:50:
69:54:ae:2c:8d:bb:89:db:76:b6:7a:84:41:70:61:
0e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4A:FF:B6:86:07:FF:B9:07:90:24:A0:46:B8:C4:D6:36:D8:7A:22
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01f99b66-a5c4-4ea9-8c43-900cc778326c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.152.55.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:6d:72:4b:8f:13:57:5f:41:f6:67:23:de:c4:23:a7:86:a0:
d5:8e:86:fd:8d:0e:7c:96:bd:39:8c:b5:01:95:38:f8:c8:05:
92:57:9a:5d:95:f5:89:d2:b1:1c:0e:3a:3e:1c:4e:e5:2b:77:
fa:5e:dd:aa:1e:66:4f:70:94:54:60:8a:f7:6f:41:72:b2:be:
55:a1:8c:3b:7d:98:78:26:21:7c:ed:52:fd:65:5c:d0:91:2f:
53:e3:23:d2:59:01:bf:fc:14:e7:9d:e2:57:85:d1:48:49:d3:
a5:ff:5d:c8:36:c2:ed:88:fc:55:1b:b5:bd:72:9a:b0:1d:6c:
7a:ce:38:23:08:89:f8:42:bf:84:29:6c:19:93:c1:aa:7a:97:
cc:37:b5:9e:19:da:80:53:95:ab:f7:29:3d:ee:b8:dc:88:00:
6a:dd:fe:b9:2e:78:05:bb:f2:2b:d9:f2:73:60:33:d2:bb:70:
91:a9:53:63:b8:d9:b6:7e:73:63:71:63:e0:3f:36:99:a1:ca:
83:14:75:28:a7:e7:4c:e2:d2:8f:a5:3a:4c:57:2b:b2:0c:f6:
1e:04:d1:2d:9f:bd:f4:da:7c:9b:a6:a8:54:a3:e5:ef:66:76:
91:c2:4a:0c:57:e1:54:f1:6e:03:38:79:a0:17:e3:83:bb:ed:
89:fd:5a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:48:47 2025 by rpki-client