Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11dfeca9-5080-4a37-b459-e7a30f90d8fd.roa
File: 11dfeca9-5080-4a37-b459-e7a30f90d8fd.roa (raw, json)
Hash identifier: c431ItvkZuWtqrULoa2F8HcIWBWHmyoaTPaEQbFrXH0=
Subject key identifier: CB:08:D0:6D:65:67:C4:15:20:9F:89:90:98:1F:0C:68:CB:6F:03:E3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 514B02CC373B8A1F9AF8D13A4212E7283AC29421
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11dfeca9-5080-4a37-b459-e7a30f90d8fd.roa
Signing time: Tue 14 Oct 2025 18:01:52 +0000
ROA not before: Tue 14 Oct 2025 18:01:52 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 71.152.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:4b:02:cc:37:3b:8a:1f:9a:f8:d1:3a:42:12:e7:28:3a:c2:94:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 18:01:52 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=327170645dabba6fff66a08adc8617a587296459f4029bebc8e2434247a06792, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7f:77:a4:42:b9:65:97:f1:4e:6a:41:a8:56:
29:da:da:21:db:20:74:dc:bc:88:c2:a9:9c:7e:79:
fb:72:c2:98:70:02:8e:13:44:db:24:eb:70:d1:8d:
4b:37:82:3b:59:8e:a2:6f:1c:51:b7:18:00:93:10:
30:8c:20:f8:a9:b7:32:7b:aa:53:8c:d5:2b:81:e1:
8a:a7:3f:96:47:43:52:28:d7:d8:9d:e7:ad:02:dd:
4a:0a:d2:06:8f:ac:27:95:90:51:b8:0c:9f:2c:f3:
34:f7:c3:32:c5:2a:1a:33:17:f9:33:c3:4c:bb:69:
eb:61:ba:87:2e:51:05:bb:7f:36:ea:92:1e:80:cf:
3e:2d:b1:12:03:34:25:ce:a8:24:bc:64:df:ae:57:
b0:c7:fd:df:f5:de:5b:a7:da:cd:1e:f9:35:ed:7d:
8a:0f:90:ee:a1:1c:fe:d2:5d:14:9b:92:63:48:a8:
89:dd:04:f7:ce:2f:93:2d:1c:cd:60:9e:64:fa:03:
e2:09:d8:16:b7:9d:26:cc:16:7c:d8:52:c1:46:5d:
7f:4e:af:54:c9:e7:40:f6:64:18:b6:1d:5b:02:35:
e9:10:42:3e:69:54:b4:b2:77:21:e5:7c:a1:00:4b:
99:65:fe:32:08:70:82:b7:1b:98:60:4d:73:2a:f3:
67:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:08:D0:6D:65:67:C4:15:20:9F:89:90:98:1F:0C:68:CB:6F:03:E3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11dfeca9-5080-4a37-b459-e7a30f90d8fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.152.96.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:5e:9c:d0:5c:0a:c5:c7:2f:38:9f:99:d6:06:c9:d3:c7:1d:
78:05:cb:be:82:04:7e:b0:69:ec:c6:ff:b5:1c:b4:7c:0e:6a:
e8:ab:e3:70:ac:ae:5a:38:d0:9d:3d:4d:03:de:b1:3e:b8:d0:
4c:21:c0:99:fb:b6:8b:ed:27:89:be:7a:d1:27:3f:9f:49:8e:
9a:a4:ea:57:08:ea:29:89:95:9c:89:ce:52:da:3f:ff:ca:d8:
3e:97:7c:76:6b:75:58:18:be:72:9c:ec:e3:78:d2:a3:b5:ca:
cb:45:71:c6:95:7c:f4:97:1b:dd:cd:0a:f2:21:67:b3:d7:e5:
9c:d4:d4:ac:99:b1:62:19:1a:8b:73:b7:a6:f8:0e:6c:e9:94:
e1:bc:01:ff:c6:8a:cc:ac:e8:48:af:f0:be:62:c8:59:cd:70:
34:d1:68:4f:ee:d9:74:a2:8d:ee:c6:0b:c1:e0:f2:f5:f6:96:
68:4e:fc:7e:87:17:32:df:95:8b:03:d0:6e:0f:02:cc:bd:1f:
84:36:97:e7:b3:52:8b:ae:37:a0:4a:f1:9b:d9:af:88:50:02:
8c:ae:28:6e:41:63:aa:0a:f0:ec:55:28:7b:1d:3a:95:dd:eb:
38:39:c1:23:7d:a1:fa:f6:d2:2e:73:f8:ba:ab:ae:c1:8e:a5:
b2:59:d2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:46:53 2025 by rpki-client