Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef318857-8a29-4f7a-ba28-9dc2b503a86f.roa
File: ef318857-8a29-4f7a-ba28-9dc2b503a86f.roa (raw, json)
Hash identifier: pLFqgEL2IaTOkIUFtebj+uzKE2bGI7YDoxgFCnmvvTw=
Subject key identifier: D4:AA:99:50:A4:F9:77:B8:38:13:0B:69:9E:32:7B:11:49:33:8C:99
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 24BFAC7234F3CCA8A8F0FA2A1CFC4A7EA1286B63
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef318857-8a29-4f7a-ba28-9dc2b503a86f.roa
Signing time: Tue 14 Oct 2025 17:52:32 +0000
ROA not before: Tue 14 Oct 2025 17:52:32 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 71.152.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:bf:ac:72:34:f3:cc:a8:a8:f0:fa:2a:1c:fc:4a:7e:a1:28:6b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 17:52:32 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=bd74e5b950f40ba5f60a51a6c0a50b612eaf200e053331d764364223b3cc189a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:42:a4:77:2a:f6:ed:d6:36:ef:a8:c6:2c:54:
ed:ae:7a:52:86:85:52:06:e2:83:b2:25:d5:5f:38:
e4:7e:d2:31:b3:ce:e4:24:5e:06:7c:6e:6c:ea:7c:
2b:c5:7a:47:c3:3d:34:37:0b:29:c3:24:48:e7:93:
9a:dc:5c:64:6a:24:fe:1c:e7:95:70:7d:ae:b7:65:
21:91:20:54:f4:a4:a9:b8:10:7c:e1:27:41:b5:cc:
93:27:8d:54:2a:a2:a5:64:92:78:2e:7f:31:ef:4b:
41:e5:b8:a9:ac:35:49:b6:ae:38:ff:5f:68:ab:c4:
d6:5e:09:a4:e6:dd:58:4d:47:db:b6:f9:89:17:a8:
70:a2:b2:b8:1e:87:7a:05:f6:4d:2e:35:71:83:51:
b3:4c:d4:30:9a:01:ba:c9:33:1f:f5:8e:57:87:95:
47:28:11:5b:e3:5e:9c:8f:b4:9e:31:49:2a:ee:84:
02:41:ad:07:16:81:e8:ac:7f:b8:22:c7:1f:1a:7a:
d3:cf:ab:45:17:d9:15:74:e2:c7:c2:67:d5:a9:fa:
91:f6:7a:16:00:15:65:cb:71:96:a0:dc:fb:8c:12:
fd:29:ed:19:4b:bc:dd:dc:7f:ad:7f:e9:3e:46:27:
23:6c:76:a4:0b:4c:cc:e4:76:23:8f:27:ce:04:5a:
6d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AA:99:50:A4:F9:77:B8:38:13:0B:69:9E:32:7B:11:49:33:8C:99
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef318857-8a29-4f7a-ba28-9dc2b503a86f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.152.33.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:db:12:e7:14:6f:0e:a2:2c:a4:4c:2e:ce:f3:72:06:b7:62:
66:1e:26:b0:0f:0c:c6:19:4c:16:f6:12:b0:68:f0:4e:0f:a2:
7c:ee:84:d2:21:37:26:ea:65:7f:ae:fe:12:ab:34:01:11:50:
90:b5:5c:ac:4a:21:db:dd:6b:d1:5d:cc:8a:2f:20:b6:88:1e:
c6:07:de:1c:60:c5:2e:98:c8:b6:80:f4:0b:08:6c:41:89:0a:
ed:88:d9:52:c2:ac:67:e4:fd:57:51:db:0a:41:e5:b3:15:27:
b4:b4:8b:0d:c7:cb:af:7f:86:68:e9:ad:b7:92:92:f4:2f:7e:
38:e6:eb:e2:4e:d3:af:d8:13:11:d5:a2:f8:08:80:64:76:60:
49:04:b9:ab:3c:5c:30:fe:0d:33:60:57:45:9f:7f:92:2d:ff:
67:8e:25:5c:2b:d8:92:b0:f2:59:42:eb:6e:ce:d6:7a:04:3b:
b2:f6:d0:81:04:10:90:ab:74:3c:f5:ac:8b:36:83:db:bd:5b:
ba:69:9d:d9:1c:5d:8b:b7:6b:07:d9:9e:91:5b:16:68:fe:ee:
2b:51:b6:d6:a4:aa:8a:5d:43:be:a4:54:c8:6b:f5:5e:08:fb:
f1:50:64:25:64:11:fb:2f:c8:b0:03:3f:0f:24:58:9e:df:43:
74:69:6f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:51:23 2025 by rpki-client