Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9583dd8e-25c9-4b6d-9587-c9e8efff593d.roa
File: 9583dd8e-25c9-4b6d-9587-c9e8efff593d.roa (raw, json)
Hash identifier: 8IniGfyvQ6QeLMjzXj2w+9lKiRQpATmT0oPtVQSkH2I=
Subject key identifier: 78:7C:73:04:0B:E7:4E:CC:F8:56:B6:0F:62:3C:0A:21:59:27:6C:23
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 76E31211BBD32E75A0858D0FF79961A3947D86C6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9583dd8e-25c9-4b6d-9587-c9e8efff593d.roa
Signing time: Tue 14 Oct 2025 17:52:38 +0000
ROA not before: Tue 14 Oct 2025 17:52:38 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 71.152.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:e3:12:11:bb:d3:2e:75:a0:85:8d:0f:f7:99:61:a3:94:7d:86:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 17:52:38 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=34f86f079a86c121d7f88ce826eeb7d4085482dbaac6938d44e165cd59aa798b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:95:cd:fa:0b:be:c5:64:c8:44:02:bd:b5:5e:
03:c3:f0:8b:f2:46:88:97:e7:9f:45:6d:69:33:9c:
a3:42:61:76:7c:79:b2:59:6f:c8:55:a4:a3:3b:a6:
70:ec:d5:cf:9d:08:02:ac:8c:3f:e1:18:23:93:e0:
6b:d1:7a:2d:5b:b7:cf:ff:22:e9:c7:af:34:ce:9d:
30:bf:9f:1d:5b:c8:40:4c:f0:21:c7:3c:0b:ef:52:
3b:e3:f2:77:6a:6e:14:63:1f:89:1c:51:4e:fb:99:
6b:76:c6:4f:f2:8b:22:fc:12:4d:45:10:e1:ff:c0:
1f:6e:8f:93:d0:48:9e:a9:ae:7e:24:46:47:a8:3c:
e2:80:48:37:07:1f:40:21:d9:7b:1a:32:bd:9b:d1:
84:26:d6:fe:9d:ce:70:c9:30:41:cb:1e:59:18:b8:
05:05:3f:78:49:cb:d0:80:b9:20:ef:2d:55:07:81:
ad:98:49:56:04:16:02:45:67:bc:99:37:0b:80:86:
71:0e:24:84:ff:86:05:72:77:aa:0f:15:88:f6:5b:
e2:48:5b:b1:d4:5b:fa:7d:e3:3c:19:4f:d9:79:31:
64:6c:c7:4e:1b:24:4f:62:7e:1e:c8:0e:54:3c:ec:
8e:34:3e:2f:13:b0:09:4a:c0:6c:34:ba:f6:07:0d:
87:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7C:73:04:0B:E7:4E:CC:F8:56:B6:0F:62:3C:0A:21:59:27:6C:23
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9583dd8e-25c9-4b6d-9587-c9e8efff593d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.152.25.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:54:cd:4d:55:f6:ce:87:25:df:23:a1:21:7f:e5:76:e9:71:
5d:f3:56:b0:41:32:d5:97:e5:ae:ae:ab:e2:e1:f0:3e:b2:16:
d0:d7:11:95:b4:f2:fa:99:01:41:b3:ae:c7:45:e0:de:36:53:
15:92:ef:c8:27:74:27:e3:98:3d:de:23:60:16:e5:d7:98:97:
ba:bb:cd:ce:11:6d:8b:5b:cc:58:5a:df:c1:83:5d:33:49:bd:
3c:be:3a:e2:01:9f:81:f8:26:23:ae:17:73:ae:cc:21:1e:9f:
8e:25:8b:79:19:59:f7:50:93:63:a4:ea:14:a7:75:73:1e:cd:
81:06:e5:b9:e2:65:15:dc:be:70:f1:ee:0a:ef:63:69:6d:ab:
bc:79:87:f5:97:ae:d1:2f:83:82:8a:c8:1c:14:f5:a8:d0:3a:
88:68:9f:4b:48:24:65:87:9c:a9:09:4a:f0:40:99:7a:8a:fd:
f5:bb:80:f7:9b:b4:69:99:53:6f:8f:c6:f1:da:b2:48:2d:18:
4f:ee:19:08:f4:b8:54:5b:51:74:7a:d1:10:a5:23:b1:ac:79:
77:b8:70:86:7b:c3:80:60:38:81:72:e3:3e:bd:57:8e:1b:ac:
fd:0a:21:79:ed:6e:ec:27:11:2a:2f:10:d4:cf:db:b5:81:58:
90:eb:d7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:30:11 2025 by rpki-client