Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f50142f-30d1-46b9-9b4f-e4f3ceb03e3b.roa
File: 9f50142f-30d1-46b9-9b4f-e4f3ceb03e3b.roa (raw, json)
Hash identifier: Qb6vp8KPZiwGen6jEswwDzR7kxe0Xb9iPWnX+rU1DUU=
Subject key identifier: 76:18:5E:26:CA:98:7E:8A:71:43:8E:8A:E8:11:56:60:67:04:A9:8C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5013D98C814908662D6C056FA24C9EA2D2AE1375
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f50142f-30d1-46b9-9b4f-e4f3ceb03e3b.roa
Signing time: Tue 14 Oct 2025 17:51:16 +0000
ROA not before: Tue 14 Oct 2025 17:51:16 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 71.152.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:13:d9:8c:81:49:08:66:2d:6c:05:6f:a2:4c:9e:a2:d2:ae:13:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 17:51:16 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=2aa8c391c3bfb47b202536ec61ad8a3bb954ada7dcea21aef27d487b28f1aca9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e7:88:fa:75:1a:58:18:85:5c:1b:74:73:0b:
f4:9b:f6:94:8d:39:99:24:fc:62:38:1c:4f:24:3e:
bb:da:5b:a8:ee:9b:88:5e:42:8d:7a:ae:98:e5:02:
c0:61:95:3c:b7:2f:bb:df:df:a7:c0:33:70:7a:6e:
e1:1a:17:fd:c9:cd:6f:87:47:a1:e0:22:25:b8:4f:
ad:a1:1d:28:ac:bb:da:69:d7:7c:f5:2f:b5:97:ab:
07:61:5d:6d:ca:c6:e6:38:b9:80:34:46:3c:ae:19:
6d:3c:4e:26:e0:9a:00:f6:32:b2:b8:87:e7:f9:f0:
ab:f8:ea:cb:1a:41:8d:bf:cf:cd:e1:e4:b1:0c:f5:
70:3e:ff:23:9e:49:3c:1c:0f:35:6b:ff:86:3a:ed:
42:d7:c0:7b:ee:57:d7:f2:7c:8c:ed:76:1b:99:ff:
0c:2e:85:0f:da:00:a8:60:9f:8c:e5:cd:5b:82:29:
d5:dc:53:81:1b:de:7a:2c:1d:87:63:8d:df:d8:ac:
f9:6f:fb:43:1f:a4:24:0b:05:4c:e9:70:5d:91:7c:
50:3b:94:b7:4f:ca:df:f6:08:7d:c4:bc:3b:05:2e:
49:de:c7:91:2d:12:81:63:67:dd:50:8d:8f:61:85:
93:b2:3e:86:a1:40:31:0a:d0:cf:d6:9d:80:34:c3:
84:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:18:5E:26:CA:98:7E:8A:71:43:8E:8A:E8:11:56:60:67:04:A9:8C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f50142f-30d1-46b9-9b4f-e4f3ceb03e3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.152.109.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:37:27:08:44:6c:62:00:24:3a:1a:dc:c1:37:8c:f0:83:eb:
34:e6:c4:cc:a1:50:aa:a1:73:f2:89:7c:c8:4a:1a:a4:be:ba:
27:8c:0b:32:5d:d8:a9:42:92:c4:08:58:07:52:da:14:99:2d:
27:7b:9c:e0:a7:46:1b:45:85:ab:57:d2:73:13:8d:91:cd:5c:
e5:d3:fe:2f:db:a0:08:00:46:be:72:53:61:48:f0:4b:de:67:
54:5c:07:70:9d:da:a7:72:e8:4c:0b:c5:69:32:4c:dd:36:76:
2e:06:4f:6d:17:40:6a:b7:4b:0e:1b:71:c1:20:21:2c:f9:bf:
4e:a2:27:89:f9:09:b4:7c:64:bd:5f:04:40:94:8b:07:f3:b7:
a4:0d:c5:d1:1e:cc:57:6f:18:66:93:a5:f7:d6:a0:55:04:05:
cf:fc:4a:59:bc:2c:36:b2:81:a6:44:4a:71:20:c7:e9:6e:c8:
61:08:cb:68:de:f8:3a:59:8c:cc:3d:3a:22:8c:60:af:13:e7:
85:52:7a:3c:1a:56:ac:6d:ff:57:6d:b2:9c:91:c1:ee:cd:0d:
91:37:0d:57:c9:1f:18:5e:f1:83:8d:46:43:e4:a2:8c:d7:fe:
41:51:ce:68:5a:ab:a6:7a:2a:a3:a5:f0:ae:64:9a:ce:f0:26:
62:4e:a4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:49:51 2025 by rpki-client