Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96812483-0dc7-4729-91da-307943a62464.roa
File: 96812483-0dc7-4729-91da-307943a62464.roa (raw, json)
Hash identifier: KFwz/7RXNvMBl3YD8roW/qXCLoSd+sebQ8AMJmY3Gho=
Subject key identifier: FF:95:70:38:EE:9E:79:73:1B:AA:18:0D:3C:87:16:86:1B:50:0C:84
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 75933F4859524BD52C4677F8D631AF57BC72944E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96812483-0dc7-4729-91da-307943a62464.roa
Signing time: Tue 14 Oct 2025 18:02:36 +0000
ROA not before: Tue 14 Oct 2025 18:02:36 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 71.152.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:93:3f:48:59:52:4b:d5:2c:46:77:f8:d6:31:af:57:bc:72:94:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 18:02:36 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=097a2f1840e5d3854a06f1e33a3d08e10bcea89a409d25b3a203c612140221ba, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f5:4c:a9:db:b0:22:e4:55:83:48:4e:11:67:
ec:af:02:91:bd:ce:d0:53:f8:60:8c:e0:f1:4c:48:
bb:fc:96:31:24:3e:f3:bf:9f:6c:4a:bf:7c:54:4a:
ba:41:ef:39:59:0a:c8:e2:07:5b:69:79:79:2c:00:
5d:01:b2:df:9a:e3:07:e2:05:52:11:bb:81:40:51:
d7:c6:f3:64:78:6d:08:f1:90:da:12:5b:49:71:c6:
ce:74:a7:a7:e9:7d:65:b6:fb:aa:28:7b:26:f6:14:
a7:0b:f4:3a:af:b9:21:f7:c7:51:73:08:8e:5e:93:
fb:b7:01:df:66:9a:9a:9b:32:37:e3:01:df:53:a9:
ee:38:d2:bb:40:4a:2f:b9:e0:40:6d:c3:ad:5f:4c:
5b:5f:11:cf:d8:01:83:e5:09:f8:0e:73:c5:29:c5:
a7:11:a7:bd:0b:1e:99:5d:b5:c7:15:a9:11:83:1d:
f0:b2:3d:04:e8:c5:2e:04:fc:de:73:74:bf:77:8b:
75:a3:1c:48:be:63:8f:ff:e5:e0:c9:56:ca:78:3a:
e8:fd:55:a9:5e:3c:8a:c3:d5:d5:a7:40:01:4a:c0:
8c:56:40:7c:e7:9e:c9:79:b4:5e:1a:09:df:49:43:
52:9e:e2:83:20:24:66:4b:80:c6:78:9b:24:50:5a:
d9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:95:70:38:EE:9E:79:73:1B:AA:18:0D:3C:87:16:86:1B:50:0C:84
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96812483-0dc7-4729-91da-307943a62464.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.152.81.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:8d:bc:b3:cb:71:b3:51:21:ac:45:67:5b:db:1a:08:5d:88:
7d:68:bf:93:e7:b2:c1:01:8d:4d:a7:38:ca:41:90:27:c2:8b:
18:8d:66:be:9b:16:b1:99:08:00:75:d8:61:28:8b:ae:53:f3:
c1:a4:f8:1a:ac:d3:d0:fc:10:01:ab:c9:b4:20:6b:3e:8d:bd:
7f:37:9d:38:96:b6:0d:37:a9:13:67:22:da:0e:43:dc:ec:cc:
3d:2d:6a:91:f1:84:a3:cc:17:79:66:f4:cd:8b:2e:b5:e0:c2:
c0:18:85:3b:57:5d:31:44:fc:a9:4c:3d:f3:08:01:6c:01:59:
dd:fa:43:c6:39:56:6d:ab:93:34:85:fa:ba:88:99:58:e3:23:
3f:3f:c9:e3:f3:68:03:f3:de:e8:b9:7f:9b:65:7b:e6:12:a2:
6c:6c:d0:23:5a:59:b0:d9:65:50:1d:a0:79:1d:49:e1:dd:42:
45:26:d2:14:8d:51:42:3c:c2:81:bc:03:ed:e2:1e:1d:85:d4:
91:f9:0a:6f:76:ee:78:e6:03:da:f3:3c:37:68:21:39:28:ef:
4d:3b:fb:29:6f:94:3d:53:6d:64:20:c9:47:f0:8a:87:53:11:
aa:b5:54:ee:0d:a9:f5:a4:75:31:79:00:5a:eb:a4:3a:10:1a:
94:f9:86:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:51:20 2025 by rpki-client