Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db110186-751b-4fdf-8129-44030b4f710b.roa
File: db110186-751b-4fdf-8129-44030b4f710b.roa (raw, json)
Hash identifier: aGqHCTtP/hBMGFKN0r2jziRCVmbu+ibKuCDWSV7FNxM=
Subject key identifier: A2:41:74:6C:3F:29:2C:90:F1:0E:1B:C0:96:54:13:66:25:96:A2:83
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5E85EC890A3793394F271625C59E1A836720055E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db110186-751b-4fdf-8129-44030b4f710b.roa
Signing time: Tue 14 Oct 2025 18:01:56 +0000
ROA not before: Tue 14 Oct 2025 18:01:56 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 71.152.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:85:ec:89:0a:37:93:39:4f:27:16:25:c5:9e:1a:83:67:20:05:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 18:01:56 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=7782dee04156cfebd04199b1c4bf64edb750bd1d4e1129da6780189ed2b947b3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:24:08:c1:f5:dd:1e:24:ae:d3:36:d7:25:95:
d2:35:27:60:05:af:56:88:3f:9d:c1:e2:8f:fa:5e:
da:2d:1d:0f:9c:aa:47:8d:4f:2c:03:ed:d5:0c:90:
02:88:32:d0:fc:48:ea:09:10:fd:1b:93:21:c6:b0:
77:b1:e2:36:45:64:a6:63:bf:05:d6:0e:21:b3:ae:
d2:2d:07:bc:df:92:57:86:1d:57:0b:44:68:0e:46:
b4:13:98:43:dd:61:b6:37:6e:37:94:34:e7:a2:75:
cf:0d:7f:ef:83:91:e5:b5:d8:10:57:6b:0f:12:5d:
bf:c9:58:37:e2:a7:da:50:15:40:96:23:c7:20:ef:
82:4a:1c:4d:e2:0c:3a:61:d5:70:a5:5a:02:b8:55:
ec:35:26:dc:32:3d:cb:00:56:3c:00:01:e0:ab:94:
c8:8f:c7:08:cc:87:bb:68:1b:b9:de:9c:9b:b2:a1:
05:b0:e3:02:77:0d:80:88:46:25:84:ef:09:13:3d:
67:c5:25:4c:f4:59:07:52:f2:76:1a:03:1c:db:14:
1a:c6:c6:d1:b3:24:ba:7b:77:7b:c8:76:67:24:19:
86:d5:6d:50:3a:82:a0:dc:0f:5f:18:a3:e3:96:58:
47:4d:65:f1:1a:88:ab:7f:57:f7:5d:97:d9:7c:ae:
2e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:41:74:6C:3F:29:2C:90:F1:0E:1B:C0:96:54:13:66:25:96:A2:83
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db110186-751b-4fdf-8129-44030b4f710b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.152.39.0/24
Signature Algorithm: sha256WithRSAEncryption
89:b0:01:e7:f0:48:0b:61:b3:f0:2b:e4:a2:05:81:fe:b1:5b:
d5:c8:3b:7e:56:a0:63:a4:b5:ee:ff:a8:f9:cb:5c:26:21:db:
86:23:7e:77:b5:7d:db:e1:55:6d:9f:4a:e5:2b:6e:91:70:6f:
eb:95:41:01:d4:72:44:a0:4b:4a:01:14:47:43:65:27:9d:9b:
5f:a0:16:dd:75:db:fa:d0:12:30:31:a0:30:05:d5:d9:fa:07:
26:60:39:b1:31:c3:24:16:af:a6:e1:37:07:2f:91:e3:97:6d:
4a:aa:a4:f3:2a:70:45:3d:bd:07:f9:5a:79:b9:c7:3d:e4:70:
83:8a:04:a4:a0:49:5a:2e:34:34:1b:3d:f3:2e:a1:3b:cd:aa:
4f:5b:2a:be:7b:c5:d1:14:1b:28:91:59:ca:20:fd:76:99:20:
eb:6c:a6:1f:b4:cb:71:c7:e4:c4:39:4e:39:90:42:df:c8:be:
e6:42:45:55:33:5e:da:a7:6d:a8:8e:30:17:20:64:cd:4b:36:
34:03:5b:42:1a:46:92:02:7c:4b:10:f2:09:c2:fb:de:bd:bf:
63:94:b8:4b:42:78:32:5c:67:df:ff:ad:d6:83:5a:bf:e7:06:
7d:9a:9a:49:00:16:91:a7:8b:12:c3:59:03:77:76:67:c8:f2:
71:2c:3d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:51:24 2025 by rpki-client