Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a492550a-f261-47ee-b36a-4a5f62bf818a.roa
File: a492550a-f261-47ee-b36a-4a5f62bf818a.roa (raw, json)
Hash identifier: 9Pi+rV+SbzOcNQLoOGfMEnosZxW/vxIwoZ6l+X9dmYY=
Subject key identifier: DC:28:65:FE:62:2C:7F:F3:1E:C4:96:C2:60:78:0C:77:0D:2B:81:78
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0D467D6CE5907891F648E88DF7503A861A14C075
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a492550a-f261-47ee-b36a-4a5f62bf818a.roa
Signing time: Tue 14 Oct 2025 17:42:42 +0000
ROA not before: Tue 14 Oct 2025 17:42:42 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 71.152.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:46:7d:6c:e5:90:78:91:f6:48:e8:8d:f7:50:3a:86:1a:14:c0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 17:42:42 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=18204040024d3cbb0dccc1d121508beb94e11da5ddabf2bcc9ef09df4a7097c1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6f:7a:8c:ec:14:34:07:da:97:59:c2:b6:c7:
df:a7:85:38:96:e6:5c:ac:2c:3e:21:de:be:43:12:
7b:e3:3d:3d:59:93:84:42:8e:6c:ef:0c:fb:2d:68:
29:70:5e:64:2d:53:93:32:25:8c:1a:7e:38:56:7c:
70:a5:5c:ab:a2:aa:ee:3d:cb:5f:4c:41:26:7c:36:
46:b6:5d:19:19:4f:06:4e:2e:96:b2:7a:fa:ac:4d:
25:f2:fb:03:23:60:8d:c5:20:3e:5c:ae:ca:16:af:
a5:7a:14:3b:8c:8a:88:d6:6a:bd:b1:55:84:f6:51:
c3:8c:71:50:4d:d7:c2:7e:29:8f:b2:43:d2:3d:db:
f5:87:d8:88:5c:db:c8:a7:4e:86:12:87:80:94:fe:
1a:7b:b4:52:d4:64:41:fd:8b:02:17:cf:89:0c:cd:
40:63:ae:6b:c9:b0:75:f2:bb:b5:db:eb:ce:f4:1d:
30:72:e9:6c:a3:2d:f8:7f:ce:df:f1:b1:4b:1c:00:
de:b7:43:f2:c3:bb:92:85:88:1e:ab:fe:d3:50:d0:
fd:a6:09:4b:64:a6:7d:01:b4:b5:ab:5e:a2:40:6a:
42:ea:7c:62:12:80:9e:ef:0e:df:7b:01:ef:de:ab:
5f:19:bf:5e:f7:d7:b9:74:5a:33:ef:26:5d:2c:95:
8c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:28:65:FE:62:2C:7F:F3:1E:C4:96:C2:60:78:0C:77:0D:2B:81:78
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a492550a-f261-47ee-b36a-4a5f62bf818a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.152.124.0/24
Signature Algorithm: sha256WithRSAEncryption
74:15:99:9e:29:8d:77:bc:01:04:2f:a6:c2:22:2d:52:a5:e0:
6f:b0:b3:37:ec:71:ae:c7:ff:37:1c:98:8f:ed:f1:fc:ba:46:
52:d2:a0:ba:f2:00:1f:b6:7d:a6:bf:ea:8b:bc:dc:ce:19:ea:
08:31:78:19:94:2f:28:6f:6d:ed:7d:a4:9d:4b:d7:21:ab:0e:
14:71:1b:45:fe:21:32:40:41:df:7d:4d:c3:c1:54:a3:89:de:
fc:2d:6e:f7:63:a5:af:ca:9e:2d:fb:49:d6:16:b7:80:63:f2:
b3:cc:56:64:46:1b:57:70:62:26:2c:fa:2f:ef:0c:95:56:b1:
b4:b2:06:8c:b3:7c:c1:60:fe:94:23:3b:ed:31:73:93:78:09:
91:d8:96:12:dc:a0:c9:89:09:08:3f:96:ff:b1:7f:63:ab:2f:
c2:4e:99:1f:b4:5a:42:e6:37:4e:60:5a:57:fc:27:68:e5:e0:
82:89:37:13:6a:73:23:95:27:f1:de:8c:f0:76:c9:9f:00:d6:
0d:63:5d:16:af:58:cd:16:98:bc:30:de:0d:e4:8d:8a:8e:b3:
bf:df:04:30:39:54:2c:f9:eb:a3:4f:0c:38:08:38:fc:9b:e9:
69:19:dd:0e:ff:45:b9:e4:20:b7:a2:dc:02:21:42:ab:f9:13:
aa:91:18:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:46:46 2025 by rpki-client