Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16db1f58-f0a9-4753-8e7d-67d34cc02fbd.roa
File: 16db1f58-f0a9-4753-8e7d-67d34cc02fbd.roa (raw, json)
Hash identifier: qa29MG1+MTstqhbsQtEcdM0UFeFCf+elnTd3kzVGyf4=
Subject key identifier: E5:CC:DF:8F:EE:A4:A0:26:BD:E8:86:F3:3C:8C:58:6F:5E:41:10:5E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3DE9D37F00F6DE488698D300E208268358B978B3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16db1f58-f0a9-4753-8e7d-67d34cc02fbd.roa
Signing time: Tue 14 Oct 2025 18:02:01 +0000
ROA not before: Tue 14 Oct 2025 18:02:01 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 71.152.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:e9:d3:7f:00:f6:de:48:86:98:d3:00:e2:08:26:83:58:b9:78:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 18:02:01 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=1febc69a140b7c9141646b7cbd164697f2c67e9efe93851f62a4fe8f087fc8d9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8f:a3:b3:8f:17:1b:ff:c0:51:8b:99:c0:b5:
30:cb:b7:ba:27:c6:ee:8d:fd:fb:f5:f1:26:6c:c1:
94:83:50:39:8c:fc:29:a9:21:5b:06:33:b8:82:1d:
e3:10:5d:24:f2:5e:a1:9f:4b:1e:91:7a:2c:66:9c:
11:94:4a:3c:9c:b9:25:21:a0:bb:2c:2e:ad:87:b6:
b2:81:46:cd:03:e8:24:13:de:03:a7:18:6a:5e:04:
75:87:8c:61:9e:f3:28:15:d7:b5:39:86:3f:4b:af:
2d:6a:85:de:33:dc:19:df:53:bf:d5:d5:84:98:50:
24:6a:ef:3d:43:a8:a9:22:22:6a:82:e3:28:ba:f4:
16:85:0d:75:9f:17:3d:08:5d:05:77:c9:60:d8:51:
b5:25:0f:3a:22:c8:3b:b8:e7:38:1c:d2:f6:be:87:
05:55:83:68:19:17:49:fb:50:76:c0:cc:02:6a:ce:
39:5d:5c:22:07:36:5a:ae:b1:05:b8:49:93:60:58:
6c:94:0a:3e:20:fe:a8:a0:94:4a:f9:7e:d2:49:69:
b4:a3:c2:b2:57:a7:45:b3:0f:9c:a3:27:2b:01:f1:
d8:4a:c3:90:7f:1f:b2:32:16:90:fe:db:5e:55:f4:
2b:91:78:95:f4:49:fa:d6:ec:d2:fe:57:74:ad:0c:
55:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CC:DF:8F:EE:A4:A0:26:BD:E8:86:F3:3C:8C:58:6F:5E:41:10:5E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16db1f58-f0a9-4753-8e7d-67d34cc02fbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.152.110.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:47:ca:0e:20:70:11:70:f0:0f:87:80:0c:63:80:ac:0a:e1:
10:56:46:da:5e:09:86:38:c4:d3:2b:04:d7:b0:51:5e:d6:60:
ae:e9:f6:f9:f0:ac:e2:f8:ca:df:c9:cb:77:3f:bc:fd:cb:9e:
f3:bd:67:b3:e7:95:fc:ee:c8:78:29:84:19:ab:86:d2:00:a6:
ee:c6:c2:dd:a2:ea:26:c0:e0:58:4e:55:ad:8d:92:a7:ad:df:
1e:c9:a7:e4:01:90:5f:b4:6f:4b:0f:ee:64:5f:89:68:86:f7:
5f:b9:13:2b:ca:2f:59:c2:92:c1:59:e9:a4:16:63:95:a0:9c:
0c:4f:b4:5b:18:16:99:dd:ea:6c:56:c5:46:4b:1d:42:f1:42:
e7:03:5f:fc:75:af:d0:dd:73:5c:22:4c:03:6d:a4:f3:09:95:
d0:46:60:c9:03:15:38:f3:fd:d7:1a:65:72:99:9e:6d:61:a6:
02:c4:8b:ac:3a:1f:4b:b9:ad:4b:43:5a:e9:1a:33:3b:fa:e1:
95:99:8b:21:de:5b:10:94:45:a5:b5:8b:82:1b:a0:8e:fd:96:
cf:a3:74:c1:45:25:43:f3:e0:17:43:4d:29:6c:a9:24:3a:cd:
b5:af:cc:72:a0:e1:47:45:ff:e3:76:da:a9:0d:b3:c5:7e:35:
10:e3:e3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:49:06 2025 by rpki-client