Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a84a077-4555-4225-8025-37c67be12940.roa
File: 2a84a077-4555-4225-8025-37c67be12940.roa (raw, json)
Hash identifier: NrfSYWmogzsmjTD6KjLLo6MtM34JkardfRpvpnhzGlE=
Subject key identifier: 3D:C7:61:24:02:29:88:19:E6:8A:1D:0E:8F:40:45:58:93:2C:03:22
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 030763B6C977F112A7DCEA7257E71C000271E150
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a84a077-4555-4225-8025-37c67be12940.roa
Signing time: Tue 14 Oct 2025 18:01:54 +0000
ROA not before: Tue 14 Oct 2025 18:01:54 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 71.152.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:07:63:b6:c9:77:f1:12:a7:dc:ea:72:57:e7:1c:00:02:71:e1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 18:01:54 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=aafd81a0ecc46e55858cc1cd38f71764adc19e049ee742f498a49732717ff26f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6f:af:7f:5f:22:8c:20:26:02:7b:da:cc:85:
9b:4e:3a:46:ab:92:07:45:86:8e:b3:d6:da:e2:75:
3f:bd:4b:0a:08:fe:59:a7:f1:a1:0b:f9:fa:89:ad:
8e:0c:06:8a:36:2a:90:33:d4:19:a8:c3:6c:61:52:
5b:f0:5f:3f:3e:ed:5f:fe:a9:bd:cf:70:8e:8f:5d:
50:92:84:01:4c:e6:e7:ab:6b:f0:cf:75:5a:d8:9d:
9d:b5:1d:2d:0d:fe:51:4f:4e:2f:84:6d:e7:c1:fb:
b2:3b:81:ae:b5:4e:c6:f3:3c:e1:6e:ee:fd:d2:c0:
46:e5:4f:35:70:16:0f:60:7d:d5:45:ff:a1:2a:36:
99:d2:7c:07:86:b4:b1:1b:fa:de:3a:f1:f5:82:1d:
42:2b:6b:ce:3e:8a:e0:24:71:dd:d4:b5:15:7d:bd:
9e:3c:0d:44:a5:b6:44:80:25:4b:5a:0a:32:21:bf:
aa:72:19:1c:2a:26:5d:75:98:07:e6:6b:75:c5:18:
93:f8:99:38:2f:b8:ff:b7:c3:04:98:62:d1:56:03:
17:72:8e:3f:a5:6e:e8:45:d1:90:15:a5:f1:6e:58:
23:ba:33:1e:08:86:fd:eb:82:58:35:85:25:e5:6c:
bb:4b:3d:e4:59:8c:6c:09:47:29:de:15:54:73:d6:
b4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C7:61:24:02:29:88:19:E6:8A:1D:0E:8F:40:45:58:93:2C:03:22
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a84a077-4555-4225-8025-37c67be12940.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.152.103.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:47:fc:4d:64:98:bb:50:7f:fa:6c:9e:e8:7d:2d:47:82:cf:
64:34:88:da:24:d6:52:f5:88:aa:16:77:fb:1c:87:89:7f:9d:
2e:67:df:e6:af:e4:83:8e:ea:34:26:ca:87:27:0a:f5:86:53:
49:56:3c:91:79:0d:0a:43:29:55:7f:ac:41:95:2c:8a:6a:59:
a6:b5:4b:6e:46:46:a8:09:8b:b7:5d:17:86:8f:af:db:b2:3a:
20:62:63:85:00:93:f8:e6:1b:2b:47:6e:7b:d6:d4:4e:89:04:
2e:ee:15:bf:0b:4f:14:00:4e:3b:b8:e0:7e:47:8f:23:4b:4c:
49:bf:64:74:4e:30:3e:b0:d5:6f:9a:c5:32:98:7c:bd:17:0c:
91:fc:02:f7:c3:97:a2:10:34:c5:b4:96:2d:1a:be:1e:81:0e:
b4:35:cb:3d:fb:4b:c9:e5:b8:10:7a:67:23:28:bd:0d:6a:27:
f3:bb:50:63:2c:e9:7e:65:3b:38:86:f8:71:c7:66:f9:5a:1f:
9c:e3:9d:ac:b4:c5:3b:d2:23:ce:17:fc:1b:c4:45:50:40:7a:
07:87:0c:07:e2:d9:5f:65:07:e5:0e:d7:0a:c5:c5:82:b9:ab:
9f:04:45:38:91:e2:56:b4:0c:06:6d:20:0a:96:2e:42:a7:bf:
d4:c9:1d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:15 2025 by rpki-client