Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19437b74-ebae-4527-8325-657be729b35a.roa
File: 19437b74-ebae-4527-8325-657be729b35a.roa (raw, json)
Hash identifier: 4GszQvZ0Y4M8ZODFuFuyrqwv2PhBnrb9e8WzL/Wt8uA=
Subject key identifier: 47:52:85:C1:D5:6F:0C:A5:CD:3F:9D:6B:11:28:AD:05:73:6D:F1:AF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 734BB9459CA7D100820DD38B41E5FBADCCABD91F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19437b74-ebae-4527-8325-657be729b35a.roa
Signing time: Tue 14 Oct 2025 17:42:44 +0000
ROA not before: Tue 14 Oct 2025 17:42:44 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 71.152.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:4b:b9:45:9c:a7:d1:00:82:0d:d3:8b:41:e5:fb:ad:cc:ab:d9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 17:42:44 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=edac07ac126317b7b253f6ead816451e28c5a011c88edd2b8e0446377be37752, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:43:44:c7:30:90:9b:c3:d0:1a:4e:db:85:59:
4b:98:c6:08:ba:53:41:f7:29:c1:8d:92:37:7a:0e:
d0:ba:fa:df:bf:d7:7e:26:9b:6c:84:d3:a4:54:7d:
32:a0:fc:d1:0d:e7:b7:02:bf:ae:46:c7:55:7d:2c:
e0:eb:04:64:9e:f4:30:28:08:f4:06:a8:e1:13:0d:
77:64:27:f7:4c:ce:c4:1a:84:cb:f2:3a:bb:ed:ed:
ab:1c:dd:6b:03:9c:08:20:9f:4e:c1:9d:73:32:e5:
41:40:76:95:74:3d:f2:71:a4:1c:74:17:4f:7f:34:
75:96:21:f0:e7:43:1d:69:3e:f2:2f:ee:7e:be:16:
73:33:d7:89:4e:30:af:92:78:19:c2:b4:70:08:51:
81:6a:e3:70:22:00:7c:d1:39:0b:88:e4:ad:80:41:
c6:8d:e7:03:68:38:5e:47:19:be:6d:7b:2e:29:32:
4f:34:58:0d:78:76:f5:0c:00:02:1d:81:9d:eb:12:
d7:9e:7f:77:05:d8:38:1c:9d:21:82:40:91:87:a0:
4b:34:3d:7e:45:3c:69:c8:c6:5e:4a:f3:0c:92:9a:
94:7b:0c:55:0b:36:ff:ea:e5:7a:54:d0:7f:0a:b7:
e2:fb:15:76:7c:3a:e5:f2:ef:5d:dc:61:76:c1:65:
a0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:52:85:C1:D5:6F:0C:A5:CD:3F:9D:6B:11:28:AD:05:73:6D:F1:AF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19437b74-ebae-4527-8325-657be729b35a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.152.117.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:95:9a:16:cb:34:2a:fe:82:67:dc:94:d9:44:ea:40:4f:90:
ba:03:d2:11:08:0d:1e:db:78:f0:c2:24:aa:59:7e:e2:b9:cb:
33:e6:d4:ef:bb:37:50:67:ff:01:fa:bd:f8:73:69:9d:34:97:
14:27:11:8e:aa:48:dc:44:49:47:60:c3:76:d8:a8:bf:93:43:
54:08:0f:a1:24:72:ef:d6:a3:86:43:31:86:2e:ca:59:46:03:
d9:4b:46:68:ac:1d:29:92:35:21:6a:63:60:1e:6e:85:54:15:
de:44:56:44:dc:17:73:c5:c8:84:73:48:99:99:01:3c:94:3b:
e7:1f:e3:df:15:23:60:e5:f5:26:02:19:a5:eb:68:21:fe:6a:
f2:ce:91:5a:66:e2:76:89:35:67:c6:8c:52:fa:9d:20:4f:6b:
41:a7:7c:6f:cb:b1:f8:b7:c8:a4:b0:99:81:cf:64:a1:79:b6:
2d:79:99:31:4f:1a:43:26:ca:03:49:c3:a1:11:51:9b:7f:00:
2c:13:27:46:3f:66:1c:c2:34:20:19:b7:41:d2:bd:c5:82:8c:
99:99:76:4f:2e:22:90:58:b2:be:5c:dd:ef:32:2f:14:3f:17:
c8:50:8f:9b:43:c0:99:79:a0:ad:9e:59:6c:87:19:c1:6c:f0:
0d:ff:b0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:51:12 2025 by rpki-client