Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d171acb-4771-443c-8957-bd5a0d8091aa.roa
File: 9d171acb-4771-443c-8957-bd5a0d8091aa.roa (raw, json)
Hash identifier: UPKhU6n1jUGMOkQ7NtBaAJ7CMoFG4twjipLDY0ZrV2c=
Subject key identifier: 39:17:6A:A5:EA:BD:DC:0A:32:AB:B5:B9:F8:76:8A:C8:38:87:27:48
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 15F267D4F0490435C89633C5C9F31552A380CF55
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d171acb-4771-443c-8957-bd5a0d8091aa.roa
Signing time: Tue 14 Oct 2025 17:42:06 +0000
ROA not before: Tue 14 Oct 2025 17:42:06 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 71.152.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:f2:67:d4:f0:49:04:35:c8:96:33:c5:c9:f3:15:52:a3:80:cf:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 17:42:06 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=e40ab64b085a1eb8bf9e6b1bb64a7dc99ece27a206de2fee805d1d77d900d1b2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1c:ed:78:46:db:95:a3:b2:56:c0:72:90:88:
99:17:94:11:8b:58:67:11:fc:56:be:7a:b6:90:5f:
da:b1:78:d6:76:09:f2:48:2d:77:57:43:a9:77:0a:
70:71:f9:ec:76:47:e9:c9:cf:35:eb:2f:c2:c4:ac:
a2:31:73:d0:f3:bf:a9:db:54:81:ef:ba:2e:1c:4e:
91:4f:b3:dc:71:99:f0:7c:32:ae:6e:3d:fb:25:49:
15:4e:e9:c4:8f:8c:22:32:e2:42:60:87:1c:62:16:
97:d3:9d:29:b6:17:5b:99:4c:db:0e:35:c7:47:29:
d9:93:8f:82:ce:2d:ff:99:60:39:d9:10:70:8c:30:
66:f4:c1:55:4c:bb:5e:4b:bb:e2:86:ce:c6:71:d4:
29:fc:bb:70:df:b5:2e:98:d1:37:6c:5c:1f:9e:b4:
a2:5a:0e:31:35:07:62:48:22:a6:06:0d:f5:23:a6:
2c:b8:5a:28:20:0b:25:c3:19:80:ca:46:36:59:7e:
4c:02:04:a8:5c:53:00:5f:44:14:58:60:b5:24:2b:
c9:0f:26:de:35:22:af:ca:67:74:47:99:82:31:1a:
08:4d:93:8a:52:14:6c:fa:45:3d:9d:8a:39:b9:8a:
99:9c:5a:48:5e:4b:73:82:5e:ec:7d:a4:fe:5f:10:
77:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:17:6A:A5:EA:BD:DC:0A:32:AB:B5:B9:F8:76:8A:C8:38:87:27:48
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d171acb-4771-443c-8957-bd5a0d8091aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.152.11.0/24
Signature Algorithm: sha256WithRSAEncryption
24:0b:d6:24:04:1a:ae:d8:f8:fa:ac:d0:6b:66:84:90:21:4d:
68:7a:fe:66:48:d5:37:5f:a5:88:4c:ce:5c:08:f5:d2:35:43:
f1:23:cf:3a:ab:99:d0:e5:59:eb:d1:ca:bb:a4:09:e7:08:3b:
9b:5a:ab:91:96:45:76:f1:4b:09:87:72:c6:5d:8f:93:d2:42:
78:72:fe:f0:dc:21:34:94:c8:e6:90:f3:ae:ab:4a:f9:20:7c:
da:4b:55:1c:f3:9e:8e:dc:93:72:84:99:b9:cd:d1:de:b4:71:
4e:ed:3a:bd:ce:64:4b:b1:10:39:a3:a1:82:18:b3:95:15:90:
e0:5e:25:d3:af:b9:5f:84:2a:b1:c2:db:72:1b:e3:36:84:a4:
45:86:df:e2:cb:3f:d9:45:7e:a5:41:4e:fb:b7:9e:66:b9:33:
79:2c:ea:ea:28:4e:34:0c:25:9d:79:07:f0:09:31:10:93:d2:
80:16:22:1a:6d:a8:c1:85:eb:d7:f8:94:c0:04:b0:a6:10:1d:
eb:c6:05:8e:cf:b7:82:5d:c0:af:c3:ab:70:f6:30:22:9f:5a:
e0:2b:1a:7a:f7:a0:e9:2d:5b:0a:ca:5b:ed:8b:58:93:6c:0f:
ea:d4:74:4e:fb:98:d7:9d:28:fc:89:1e:51:28:d0:47:50:c0:
da:59:05:bd
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFfJn1PBJBDXIljPFyfMVUqOAz1UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MTc0MjA2WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BlNDBhYjY0YjA4NWExZWI4YmY5ZTZiMWJiNjRhN2RjOTll
Y2UyN2EyMDZkZTJmZWU4MDVkMWQ3N2Q5MDBkMWIyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDNHO14RtuVo7JWwHKQiJkXlBGLWGcR/Fa+eraQX9qxeNZ2
CfJILXdXQ6l3CnBx+ex2R+nJzzXrL8LErKIxc9Dzv6nbVIHvui4cTpFPs9xxmfB8
Mq5uPfslSRVO6cSPjCIy4kJghxxiFpfTnSm2F1uZTNsONcdHKdmTj4LOLf+ZYDnZ
EHCMMGb0wVVMu15Lu+KGzsZx1Cn8u3DftS6Y0TdsXB+etKJaDjE1B2JIIqYGDfUj
piy4WiggCyXDGYDKRjZZfkwCBKhcUwBfRBRYYLUkK8kPJt41Iq/KZ3RHmYIxGghN
k4pSFGz6RT2dijm5ipmcWkheS3OCXux9pP5fEHdbAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUORdqpeq93Aoyq7W5+HaKyDiHJ0gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzlkMTcxYWNiLTQ3NzEtNDQzYy04OTU3LWJkNWEwZDgwOTFhYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABHmAswDQYJKoZIhvcNAQELBQADggEBACQL1iQEGq7Y+Pqs0GtmhJAhTWh6
/mZI1TdfpYhMzlwI9dI1Q/EjzzqrmdDlWevRyrukCecIO5taq5GWRXbxSwmHcsZd
j5PSQnhy/vDcITSUyOaQ866rSvkgfNpLVRzzno7ck3KEmbnN0d60cU7tOr3OZEux
EDmjoYIYs5UVkOBeJdOvuV+EKrHC23Ib4zaEpEWG3+LLP9lFfqVBTvu3nma5M3ks
6uooTjQMJZ15B/AJMRCT0oAWIhptqMGF69f4lMAEsKYQHevGBY7Pt4JdwK/Dq3D2
MCKfWuArGnr3oOktWwrKW+2LWJNsD+rUdE77mNedKPyJHlEo0EdQwNpZBb0=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:01 2025 by rpki-client