Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/141a3dcb-7200-4b5d-b511-d7615134a807.roa
File: 141a3dcb-7200-4b5d-b511-d7615134a807.roa (raw, json)
Hash identifier: J3Hx3k1+tglPjcvVL6nFqDDrU0HQM+hYj603VoQ/Kb4=
Subject key identifier: 3B:20:CE:DE:17:D3:E3:95:1D:54:E8:89:61:22:9C:EF:CA:2F:1C:3D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 585AB4311B431546B5DDCA1B8C2ECD4A0A1D748A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/141a3dcb-7200-4b5d-b511-d7615134a807.roa
Signing time: Tue 14 Oct 2025 17:51:59 +0000
ROA not before: Tue 14 Oct 2025 17:51:59 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 71.152.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:5a:b4:31:1b:43:15:46:b5:dd:ca:1b:8c:2e:cd:4a:0a:1d:74:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 17:51:59 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=eb0e807fdc9c64afd34ffa4a769efa90d515c19cf2d5939b76108f3677d50307, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:50:97:d3:34:7c:63:ad:4a:7f:0a:45:00:3f:
5a:4b:84:5f:bc:21:bf:48:d9:6e:1d:95:77:f7:f6:
31:09:a5:64:f2:c4:a3:cf:1e:f3:55:e7:d3:d2:fe:
f3:2d:96:8d:e3:e0:6d:95:c4:19:f8:be:33:99:aa:
56:18:8a:b4:aa:9a:ae:f1:f0:08:33:b7:cf:84:c1:
71:f0:61:cd:3b:dc:1a:83:92:56:30:a0:c7:29:ad:
2d:2b:ab:21:18:f0:43:67:87:32:70:df:2d:76:cf:
c8:1f:ec:28:15:da:23:a2:9f:18:31:e9:47:5f:35:
16:cf:63:7d:10:cd:8e:c6:be:a2:dd:58:46:b0:fa:
e9:d2:23:37:ab:b3:04:02:a9:2f:18:fd:80:8b:c4:
08:b4:5b:cd:5e:3b:d6:a9:ed:a4:a2:ec:ad:5c:91:
11:ac:97:9c:ce:24:7f:55:7c:6a:ad:f0:97:71:7d:
e8:38:64:d3:97:75:8b:d4:8c:69:e0:60:45:90:9c:
c9:56:89:02:34:80:97:d8:32:10:bf:e9:8d:20:8c:
93:79:6d:0b:04:c2:43:ad:a8:5d:4a:96:b1:0b:ad:
33:48:37:b3:96:56:90:78:80:7c:52:a6:ca:17:0b:
6f:5d:be:00:34:e4:93:c8:ca:f5:08:43:e1:01:f6:
8a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:20:CE:DE:17:D3:E3:95:1D:54:E8:89:61:22:9C:EF:CA:2F:1C:3D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/141a3dcb-7200-4b5d-b511-d7615134a807.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.152.5.0/24
Signature Algorithm: sha256WithRSAEncryption
af:d4:0d:1c:71:60:61:6e:e5:b3:27:16:d2:68:32:9e:7e:fa:
d8:da:5a:59:d3:50:28:e6:7b:8c:08:11:52:49:5f:1b:cf:3e:
fd:33:5b:b5:b4:83:63:de:2e:ca:97:da:0f:87:26:2e:a7:23:
83:19:bf:00:dc:fc:74:f3:e0:3d:78:07:0d:9d:3a:89:82:66:
3f:36:31:80:5f:6c:5f:f3:3d:10:97:a9:4a:b9:db:e3:d2:22:
6b:3e:ee:c8:9b:dd:b9:0b:db:42:9b:6b:aa:7b:af:d4:ed:67:
17:a5:3e:52:a4:81:87:49:10:94:7e:3a:19:fe:45:b7:8b:a4:
b4:d5:9f:af:d5:b2:ba:5c:15:b9:32:eb:b7:ad:ce:40:03:b1:
eb:00:a2:92:dd:13:9a:20:8e:ec:ed:16:21:a3:1b:1d:37:8f:
ae:42:66:48:40:5e:c9:5e:92:ac:cc:07:44:ad:2c:dc:0b:aa:
ca:f6:ff:c1:33:a6:ca:55:40:d6:33:11:10:23:2c:0d:3f:c3:
76:e7:a4:e6:e4:2a:7e:52:84:0e:5b:f3:eb:ac:97:88:ea:71:
8c:50:71:91:73:bc:35:e6:89:d9:c6:1f:bd:9d:c5:c3:76:8b:
89:0b:8c:d5:c0:67:db:2f:c2:2b:49:01:d1:b0:6d:cd:d7:95:
37:e0:76:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:54 2025 by rpki-client