Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3e5c3e9-aa42-4985-be70-fcc8302efb8f.roa
File: b3e5c3e9-aa42-4985-be70-fcc8302efb8f.roa (raw, json)
Hash identifier: 9Ui489fIlVhRx1ZaCydWBp+ayQ+VZrNowGGQGVjYSnU=
Subject key identifier: 90:6C:47:18:D2:67:22:5F:F6:BC:71:AE:D7:57:CB:A7:D6:6E:71:E2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2027009990305699F643E28F9335795948287348
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3e5c3e9-aa42-4985-be70-fcc8302efb8f.roa
Signing time: Tue 14 Oct 2025 17:52:33 +0000
ROA not before: Tue 14 Oct 2025 17:52:33 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 71.152.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:27:00:99:90:30:56:99:f6:43:e2:8f:93:35:79:59:48:28:73:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 17:52:33 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=9472631ab84c2a837f4b08ffda9d5de84088568a7aa4716b048ea4bb77360e97, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ac:a8:a8:cc:09:86:2c:27:c7:6f:0b:1b:2c:
66:63:68:0a:f6:42:67:b0:c0:c7:ef:c5:26:37:cb:
57:61:c6:4b:1e:e2:78:64:6f:31:28:ef:d2:65:9f:
46:37:cd:a9:77:4e:ca:e4:88:2c:31:f9:b7:a3:e6:
77:0a:ef:26:ef:75:77:bf:68:73:96:8b:a0:ac:67:
d3:f8:7c:86:b8:71:5b:2d:7d:d4:b0:64:22:5d:f1:
bc:0d:cb:3f:e4:f5:09:8d:60:5c:ab:b8:17:2f:e3:
81:0a:46:f2:b2:1a:f4:7d:00:a3:c3:24:21:b2:40:
50:fd:23:0a:c2:06:2f:a0:69:43:2d:e0:83:2c:75:
e8:05:3f:39:8d:f5:ef:3c:f2:89:50:19:6f:1d:03:
23:2d:73:de:fd:bf:3e:a5:58:e6:c8:90:40:e4:54:
a0:8d:a1:96:bb:e2:42:7d:d0:25:96:fa:fc:aa:d9:
80:6d:dc:10:97:c6:0b:6d:11:c7:ac:61:f2:57:e5:
38:95:cb:0e:81:8c:7b:d2:42:c5:df:5a:6d:7c:26:
b3:78:47:14:98:e6:2f:60:0f:f1:e5:80:36:34:00:
d5:0d:12:61:d2:85:33:dc:dc:fa:b1:8f:92:a7:6f:
e7:f4:98:07:09:94:8c:61:87:ba:8e:27:db:02:98:
72:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6C:47:18:D2:67:22:5F:F6:BC:71:AE:D7:57:CB:A7:D6:6E:71:E2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3e5c3e9-aa42-4985-be70-fcc8302efb8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.152.24.0/24
Signature Algorithm: sha256WithRSAEncryption
88:fd:a2:f3:db:fc:c9:14:02:fd:f5:40:ca:63:74:c7:0f:6b:
ee:35:54:e2:f5:3f:60:5a:e0:ba:5a:10:14:47:b8:25:5a:d9:
13:30:42:36:e6:f3:3d:c9:80:fa:fe:d1:15:df:00:18:56:b6:
af:4b:90:89:54:be:4c:28:9c:45:69:68:b1:30:11:0e:61:a7:
17:93:a8:9c:b1:72:11:da:81:d1:9b:ae:e4:86:f9:e1:28:d6:
36:77:bb:f8:bc:05:fb:47:4d:b8:e7:c3:c7:f8:0e:f2:4b:6f:
79:8c:de:4d:3e:78:fb:82:1c:2b:01:1b:4b:24:ca:48:24:f5:
4d:c9:3f:11:ff:91:d4:27:2a:37:bd:3e:e5:44:a3:1d:67:53:
02:08:8f:2e:2b:69:4f:07:23:4b:7d:00:90:8e:f6:86:86:96:
ce:44:8e:ea:a7:49:4b:3c:5d:06:76:80:36:be:4b:41:81:73:
36:c4:a6:a3:0a:e5:5d:ec:1c:6e:07:4f:f1:00:33:a4:04:b4:
bb:ee:8f:03:b4:bb:33:f5:34:0b:d8:eb:5d:dd:d9:e8:7b:b9:
50:e6:dc:26:32:29:82:2d:63:ac:71:11:37:10:a2:19:d9:b0:
3b:89:b1:c8:e2:a7:1c:56:c2:51:d1:13:47:87:e1:a7:73:a4:
05:25:50:32
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUICcAmZAwVpn2Q+KPkzV5WUgoc0gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MTc1MjMzWhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A5NDcyNjMxYWI4NGMyYTgzN2Y0YjA4ZmZkYTlkNWRlODQw
ODg1NjhhN2FhNDcxNmIwNDhlYTRiYjc3MzYwZTk3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDbrKiozAmGLCfHbwsbLGZjaAr2QmewwMfvxSY3y1dhxkse
4nhkbzEo79Jln0Y3zal3TsrkiCwx+bej5ncK7ybvdXe/aHOWi6CsZ9P4fIa4cVst
fdSwZCJd8bwNyz/k9QmNYFyruBcv44EKRvKyGvR9AKPDJCGyQFD9IwrCBi+gaUMt
4IMsdegFPzmN9e888olQGW8dAyMtc979vz6lWObIkEDkVKCNoZa74kJ90CWW+vyq
2YBt3BCXxgttEcesYfJX5TiVyw6BjHvSQsXfWm18JrN4RxSY5i9gD/HlgDY0ANUN
EmHShTPc3Pqxj5Knb+f0mAcJlIxhh7qOJ9sCmHKzAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUkGxHGNJnIl/2vHGu11fLp9ZuceIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2IzZTVjM2U5LWFhNDItNDk4NS1iZTcwLWZjYzgzMDJlZmI4Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABHmBgwDQYJKoZIhvcNAQELBQADggEBAIj9ovPb/MkUAv31QMpjdMcPa+41
VOL1P2Ba4LpaEBRHuCVa2RMwQjbm8z3JgPr+0RXfABhWtq9LkIlUvkwonEVpaLEw
EQ5hpxeTqJyxchHagdGbruSG+eEo1jZ3u/i8BftHTbjnw8f4DvJLb3mM3k0+ePuC
HCsBG0skykgk9U3JPxH/kdQnKje9PuVEox1nUwIIjy4raU8HI0t9AJCO9oaGls5E
juqnSUs8XQZ2gDa+S0GBczbEpqMK5V3sHG4HT/EAM6QEtLvujwO0uzP1NAvY613d
2eh7uVDm3CYyKYItY6xxETcQohnZsDuJscjipxxWwlHRE0eH4adzpAUlUDI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:48:44 2025 by rpki-client