Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31082079-7d69-4f5f-a9d7-14fc554c6ede.roa
File: 31082079-7d69-4f5f-a9d7-14fc554c6ede.roa (raw, json)
Hash identifier: orNdOhqXq29a8l9Khyj6jcYsk6GM1q2X/t5daZY64k0=
Subject key identifier: E0:50:05:9A:56:8E:D1:2F:D4:DA:9E:22:9A:68:E4:A2:98:FD:2A:24
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0AA36D749267D537B2C1EC5BE3F32BA50D32A418
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31082079-7d69-4f5f-a9d7-14fc554c6ede.roa
Signing time: Tue 14 Oct 2025 17:51:12 +0000
ROA not before: Tue 14 Oct 2025 17:51:12 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 71.152.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:a3:6d:74:92:67:d5:37:b2:c1:ec:5b:e3:f3:2b:a5:0d:32:a4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 17:51:12 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=ca8fed20935d82ca13f75d6f84feba39ddcd9488779a0a1d4a58d77d54d14a4b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:38:f8:64:b0:b0:bc:11:6e:d3:9e:30:bd:ee:
8e:90:1a:6a:71:a7:59:e5:27:dd:58:69:8e:5d:56:
56:aa:80:e4:08:80:d3:6d:1e:f0:65:65:4f:fe:e2:
0f:06:2b:0f:25:9b:8c:af:04:dc:01:3e:0f:f1:39:
d4:ac:6b:00:14:ed:15:c4:af:72:30:0b:dd:0a:f2:
43:7d:cd:c4:39:fd:19:a2:55:19:84:1a:e8:79:18:
7c:33:70:b6:26:fa:9b:e1:4c:91:ba:7b:ba:40:ce:
6f:5c:1b:d0:08:7c:f1:17:42:65:f0:9e:84:5a:41:
3a:ed:08:64:ef:ff:d7:b1:da:96:5a:c7:eb:44:d4:
cc:2f:99:84:21:0e:d7:35:1d:e7:9e:b6:c1:cf:1e:
59:78:76:9c:40:fe:d7:d6:d9:72:b4:10:db:be:15:
36:ae:b4:72:e1:a5:11:f5:8d:16:24:9b:4d:39:e6:
ed:6c:26:4b:d9:5a:a0:19:bf:d1:5d:81:f7:f3:22:
69:35:48:2f:f9:23:c4:be:c2:1e:a8:9e:a2:b6:79:
f5:db:1d:1b:7b:3d:24:bd:8f:11:14:9d:c0:9d:cc:
39:18:6f:0e:1c:f3:88:fc:be:53:6d:19:6d:31:4b:
d0:c7:af:4b:f9:f2:12:ae:2b:2b:0f:96:e5:ed:9f:
f1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:50:05:9A:56:8E:D1:2F:D4:DA:9E:22:9A:68:E4:A2:98:FD:2A:24
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31082079-7d69-4f5f-a9d7-14fc554c6ede.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.152.46.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:ba:4c:99:b4:dc:65:16:b2:b7:0d:35:02:b7:3b:9d:8a:00:
86:ef:4f:f0:2b:1d:ae:d2:8c:a7:e7:0d:57:c5:bc:08:5b:dc:
e2:64:30:a1:3a:b5:3f:4b:cb:fd:33:b7:7e:91:a5:17:44:47:
cd:88:d5:9e:0a:39:49:e4:71:c1:65:ba:d5:ec:48:56:22:d1:
69:0c:9c:68:2e:ea:ce:2f:8e:68:46:9b:a0:c0:5a:15:4e:35:
00:ad:c2:c5:5e:d3:41:19:8f:36:ba:40:33:f6:6a:ca:70:ce:
98:48:21:2e:be:d8:af:73:6c:00:18:7d:1b:26:c9:35:49:33:
4d:85:60:cb:5a:0e:aa:c6:71:4e:15:fd:15:8b:a2:5e:8e:ba:
6d:f1:65:ef:27:5b:69:f0:9d:4d:06:f5:cb:a5:b4:e2:cd:77:
84:de:ec:91:a5:b0:5f:84:0b:1f:be:4e:e4:8c:bd:40:90:ad:
9c:96:8f:be:03:c3:80:30:b2:4a:a2:c3:4f:b3:ab:b6:4a:c6:
71:08:af:e2:5a:ac:d0:f5:60:c8:d9:4e:04:1a:99:6a:6a:eb:
90:da:56:d5:58:d3:d3:d2:aa:1c:3c:14:14:87:d0:41:1a:54:
17:72:7d:0f:62:67:7a:6d:70:55:22:64:f9:1d:f8:86:9c:58:
ea:ff:72:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:42:04 2025 by rpki-client