Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e85856ce-f28e-4b14-a7d8-cc5f087219b3.roa
File: e85856ce-f28e-4b14-a7d8-cc5f087219b3.roa (raw, json)
Hash identifier: lFW9XxsP4GGrVSnLXEsR4mNUnXaZyfgwRRmA46BT24E=
Subject key identifier: EA:74:DF:D2:61:2E:F2:FB:57:EE:E9:D8:8F:8D:33:5A:96:6A:89:C8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7C88FD02165046F21DA1E9D8E7E026C02B69B395
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e85856ce-f28e-4b14-a7d8-cc5f087219b3.roa
Signing time: Tue 14 Oct 2025 18:01:55 +0000
ROA not before: Tue 14 Oct 2025 18:01:55 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 71.152.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:88:fd:02:16:50:46:f2:1d:a1:e9:d8:e7:e0:26:c0:2b:69:b3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 18:01:55 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=b8f52bc436c60547c7fc15feb84a0c3bbf5ab6c7acefa0b00d7ad8eb20e1e3bd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f2:65:78:e8:70:b1:ee:ad:24:40:f0:51:46:
c7:9f:59:3c:f9:11:5e:2d:a4:4b:c7:af:07:d7:db:
a5:1f:3a:a4:47:35:64:07:38:f9:1c:0d:a4:f9:38:
33:86:23:ee:97:59:1b:1e:bc:bf:e5:8a:b6:45:7b:
56:1a:c3:31:48:cd:0b:bd:4b:3c:97:f1:03:03:0b:
c6:56:b7:04:e0:ac:80:4e:5d:46:90:ba:f3:74:3b:
15:d1:3d:7f:c3:3c:47:dd:49:49:54:fe:9e:dd:0d:
19:52:67:92:b5:fc:20:81:5f:ed:09:8a:71:3c:84:
27:6d:b0:8b:cc:a0:c8:4f:c8:c7:f6:c3:81:c0:43:
9d:fe:dc:00:44:fd:67:3e:14:66:d0:9f:d3:1c:a8:
5f:dd:3c:93:b9:fc:8b:f2:6b:9f:0f:91:74:aa:07:
f7:68:5c:ad:b2:da:66:d7:e8:b8:f7:dd:7a:08:43:
07:15:5e:28:e6:e4:73:7d:a9:5d:f1:4b:72:0b:74:
ef:14:57:7b:43:0c:22:20:89:cd:e6:de:1a:0d:9e:
85:1a:35:44:6b:62:e7:c8:6e:b2:21:01:11:13:dc:
b6:7b:76:8e:20:af:5f:64:be:61:a5:d3:c9:4a:bc:
7c:25:ae:a0:a6:f3:96:51:f6:05:84:8b:88:23:19:
6e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:74:DF:D2:61:2E:F2:FB:57:EE:E9:D8:8F:8D:33:5A:96:6A:89:C8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e85856ce-f28e-4b14-a7d8-cc5f087219b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.152.72.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:fa:47:df:b0:a8:6d:9c:ed:60:42:3b:82:7b:d7:68:51:7d:
38:4f:6d:75:df:79:bb:75:c6:8e:7c:92:53:ec:bd:be:4a:66:
e4:73:e8:fe:92:f1:6e:83:b7:d5:1c:33:9f:2d:f5:52:e4:b6:
65:c9:7b:5f:29:1c:c4:dd:32:bb:20:c4:f4:07:b8:d3:72:16:
f1:e9:58:02:0a:31:17:2d:93:96:61:fc:bc:e0:45:c0:d7:72:
c6:f6:b9:f7:c1:26:d3:95:43:7f:3c:75:0f:79:cf:2e:6d:e5:
99:6b:21:61:99:cd:e1:ea:10:64:44:e2:74:75:85:1e:41:c3:
fb:58:42:60:2a:3f:28:1e:40:a2:17:6c:14:49:c2:ed:8b:3c:
81:cb:a3:cb:16:ce:d6:c5:35:72:d8:05:ef:ca:5a:91:a5:bb:
73:84:76:53:f3:89:26:f2:5c:c9:dc:66:84:f5:11:ee:bd:9b:
f2:85:30:2a:ad:bb:a6:74:0b:16:a8:cf:15:7c:9b:4c:ef:c3:
20:14:84:60:63:44:60:0e:27:9d:9e:a2:94:35:fd:33:9f:61:
57:ae:18:2a:d5:05:81:a9:74:f9:05:46:bf:be:48:a4:06:4c:
12:e1:22:e4:92:3e:7d:a7:c2:22:72:14:6d:b2:ca:41:e9:86:
9c:38:69:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:50:08 2025 by rpki-client