Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6271cdb9-a1cf-466f-b289-1d6b56a411e5.roa
File: 6271cdb9-a1cf-466f-b289-1d6b56a411e5.roa (raw, json)
Hash identifier: J3xHnjVGZp7XMzKLXqEi2ywhWgl4VxVkDdPA+km2cLw=
Subject key identifier: 3B:48:03:20:48:5B:9A:6F:F1:64:97:0B:12:08:2F:7F:1C:06:A0:F1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 786F1BC63B72E49D22BF6D731951D4A06ABF8890
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6271cdb9-a1cf-466f-b289-1d6b56a411e5.roa
Signing time: Tue 14 Oct 2025 18:02:43 +0000
ROA not before: Tue 14 Oct 2025 18:02:43 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 71.152.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:6f:1b:c6:3b:72:e4:9d:22:bf:6d:73:19:51:d4:a0:6a:bf:88:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 18:02:43 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=6fff388fcafa254f5220fecabe05d05da8d3c4a8f9f979ba99561ef493c046fc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:b0:9d:90:be:b6:8e:bc:2e:73:03:60:2b:
10:55:41:c4:3e:ef:fe:9d:94:5c:f7:0b:05:32:e4:
8a:5f:aa:dc:22:0e:85:d7:65:b5:2c:ff:d7:2d:a8:
a5:a2:4c:c4:50:71:2c:98:8a:66:84:e0:b3:45:bd:
c6:ab:de:25:a6:60:40:d1:c3:eb:05:0e:7c:17:27:
f8:66:2b:f5:e4:37:3b:90:7d:91:af:bf:ba:df:54:
23:6d:e1:f8:e4:ea:be:46:83:d4:2a:c5:7c:2d:8c:
60:6f:93:62:7a:a0:30:38:76:c2:97:6e:a5:83:50:
0d:29:de:e6:e3:38:d0:32:42:58:58:02:7c:f9:7f:
bc:6c:b1:c8:12:09:43:ee:13:39:77:1d:8f:c9:38:
d2:29:8b:0e:d3:97:22:b9:b2:30:58:ad:3a:c5:39:
50:68:36:59:0a:3d:a1:91:9f:62:cd:73:70:96:63:
5a:42:f2:d5:fa:57:67:09:f0:a2:03:1e:e7:4a:9c:
67:7f:75:61:b2:b2:de:88:07:3f:34:58:76:b2:51:
4b:cc:42:81:6e:5d:8e:19:5f:70:fc:e3:e0:8a:7d:
12:42:d7:e6:81:bd:ee:9b:ae:95:95:0d:76:80:ee:
77:61:54:13:1e:8a:d9:8e:2d:9f:d1:64:67:cc:6f:
2a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:48:03:20:48:5B:9A:6F:F1:64:97:0B:12:08:2F:7F:1C:06:A0:F1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6271cdb9-a1cf-466f-b289-1d6b56a411e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.152.92.0/24
Signature Algorithm: sha256WithRSAEncryption
61:9c:4d:65:68:6a:b0:26:a4:ea:34:62:07:b1:36:97:4b:43:
03:8d:17:80:d6:a7:7e:82:73:cd:ca:57:0a:7c:77:1b:5c:82:
63:93:ba:5c:20:76:91:17:cd:95:a8:8b:81:cb:93:d5:62:9b:
6e:98:4c:8d:83:84:0d:e9:53:09:50:d9:f7:53:31:27:eb:40:
66:3a:6a:45:74:50:cf:75:c9:a3:54:c3:4c:ef:67:56:0a:c6:
db:af:f6:b8:f0:bb:53:d0:9e:38:7d:a9:cf:be:66:47:c6:59:
6d:aa:5e:e7:f6:1b:f4:5a:05:16:69:e1:73:ce:f7:2a:67:61:
8e:73:f2:22:90:6f:74:19:e2:a6:0d:33:88:23:f2:18:83:a3:
41:8e:6a:f6:24:d8:e8:73:f5:fb:e4:25:6c:b3:a6:b5:69:11:
26:16:a5:1b:1e:3f:a0:97:5c:fb:ee:31:e9:77:f8:84:57:27:
84:d8:8b:ad:2c:c8:8e:95:63:4a:27:5f:7e:b4:fe:1c:de:72:
af:a6:7c:fa:6f:db:cd:7d:c7:ad:14:7d:53:ed:76:ae:83:5e:
b1:2f:7a:6e:e7:fe:ce:33:48:a4:2f:de:fe:37:53:46:eb:65:
03:bb:bc:ab:9c:84:e9:c5:11:1a:af:ad:89:19:53:f9:71:7a:
2f:75:34:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:49:07 2025 by rpki-client