Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b4994d6-cfd4-4d60-b3ed-f90fbb3bdad8.roa
File: 6b4994d6-cfd4-4d60-b3ed-f90fbb3bdad8.roa (raw, json)
Hash identifier: 37fWH1NO+/sdHlISyTmxQ7blcaFx6QqFYzjbBE8Of+E=
Subject key identifier: AE:7F:94:58:76:BD:8F:E1:72:49:A1:1F:C5:1B:A2:65:36:F6:54:55
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7DE07BA5D7D756E915A549CD902CDE992FBF6DFB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b4994d6-cfd4-4d60-b3ed-f90fbb3bdad8.roa
Signing time: Tue 14 Oct 2025 17:52:34 +0000
ROA not before: Tue 14 Oct 2025 17:52:34 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 71.152.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:e0:7b:a5:d7:d7:56:e9:15:a5:49:cd:90:2c:de:99:2f:bf:6d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 17:52:34 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=a5b532801f1a3f53ea005857016a70a7a21bfad8860bb54a06db3336b5abd9b2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:27:ae:11:49:5c:03:3e:19:56:31:e0:8d:3d:
ae:62:3b:d1:c1:50:dd:a3:c9:64:1b:f0:86:a9:d8:
db:c5:8b:c0:9c:f9:53:b3:05:ba:4f:24:38:48:a4:
68:cd:18:23:3c:56:9d:56:08:dc:1e:c9:63:5d:d9:
53:97:c0:d4:55:95:77:84:dc:be:dc:b6:50:1e:f7:
bd:53:f4:f3:a1:7f:cc:32:c1:92:35:cb:5c:33:90:
74:ad:b5:af:b2:5a:5f:7c:74:40:54:dd:8b:c7:af:
aa:58:f5:0d:2e:b6:23:53:b4:13:27:66:cd:2b:60:
ab:92:11:3f:bd:33:25:3f:68:f2:83:94:ff:d9:dd:
37:38:b1:0a:67:52:21:a3:96:23:84:92:f9:14:3c:
dc:61:c5:3f:eb:b1:31:23:74:a8:e5:b6:fc:6c:de:
a0:d0:4d:00:7a:b1:c9:63:c9:5c:80:5d:10:4f:50:
44:e6:7e:52:27:be:ad:e5:ad:11:ec:52:0f:c2:16:
77:a7:84:58:cf:7c:e8:46:2a:c4:30:ff:e5:d5:a7:
e5:ad:52:d3:81:d8:26:94:99:aa:d3:81:30:f6:22:
6e:39:3d:10:ca:44:1c:43:72:3d:b8:65:26:8c:21:
34:f7:26:32:b2:9e:51:5c:62:46:f8:66:1d:2a:07:
39:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7F:94:58:76:BD:8F:E1:72:49:A1:1F:C5:1B:A2:65:36:F6:54:55
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b4994d6-cfd4-4d60-b3ed-f90fbb3bdad8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.152.126.0/24
Signature Algorithm: sha256WithRSAEncryption
41:6f:56:10:af:d4:06:6c:82:40:d5:6d:a9:5c:e2:ee:4e:42:
0a:80:c4:77:02:10:d1:29:19:a8:94:55:09:88:c4:68:c0:2d:
1a:25:46:dc:7d:43:52:c1:d5:d6:00:71:7d:44:27:3d:97:dc:
c4:3c:24:f1:a5:0d:51:2e:cf:59:a3:7a:00:5b:ce:46:4a:6c:
ea:fa:78:44:2e:32:1f:4f:f0:77:81:f7:76:85:11:84:5e:41:
e3:16:39:4a:57:8d:a7:a9:2f:2c:a5:51:85:f6:bc:c0:75:53:
9a:9c:1a:f3:86:ae:e0:78:6b:3e:e4:db:12:76:c7:b2:5f:af:
17:4f:6f:76:e2:74:16:be:61:66:af:56:cd:41:d9:5b:11:be:
71:a6:a6:4c:ff:dc:24:55:29:c7:35:e4:17:a5:e6:a9:eb:30:
51:14:20:85:b7:89:fd:4f:12:3c:3f:17:f8:9a:ff:53:20:53:
82:3a:be:89:89:0f:0b:d8:94:cd:c8:e2:f3:e1:74:5e:1b:a1:
11:c1:cf:b3:d7:98:5a:2b:29:3c:5e:55:bb:32:22:20:29:66:
2b:08:4c:a8:a1:d3:67:55:83:48:e2:99:f5:d5:a5:b9:7e:3b:
9b:9c:03:fc:44:5a:cf:d3:61:fd:91:26:cb:c8:d0:b8:d1:fe:
4b:23:1f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:49 2025 by rpki-client