Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74077f15-8b8a-41fa-95f9-576975b5f72f.roa
File: 74077f15-8b8a-41fa-95f9-576975b5f72f.roa (raw, json)
Hash identifier: 38dyNBL5nvWPeVSpRphv3t8CAtGlGRee7JNq07NMRq8=
Subject key identifier: 5B:46:FE:DA:5B:F1:CC:70:77:7F:70:ED:F2:24:69:E0:2A:C7:EF:78
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3761BD0E4630854343F7EDD5C54D4571E90303CC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74077f15-8b8a-41fa-95f9-576975b5f72f.roa
Signing time: Fri 24 Oct 2025 00:11:27 +0000
ROA not before: Fri 24 Oct 2025 00:11:27 +0000
ROA not after: Fri 28 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 104.153.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:61:bd:0e:46:30:85:43:43:f7:ed:d5:c5:4d:45:71:e9:03:03:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 24 00:11:27 2025 GMT
Not After : Nov 28 23:59:59 2025 GMT
Subject: serialNumber=d27ce7d6c8ab4f3f585f3698b44590ae5198e6ad792786c1bc4cfd94591699a3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:29:f5:52:a7:7b:40:f3:18:41:8b:75:e5:
b2:ef:e9:d4:84:d6:09:0a:e3:49:22:9a:ee:5a:cd:
a6:1e:8f:db:8f:58:77:8b:65:83:27:d9:1e:a0:f1:
3f:99:c4:99:dd:9d:6a:db:d2:61:d1:41:22:1d:44:
1a:f2:0c:58:8d:d4:0b:18:d2:4f:79:7b:3b:2e:e2:
13:16:55:d8:2d:20:21:34:fc:e8:7f:77:84:df:ed:
b6:de:d8:c8:fd:57:50:8d:b2:8b:f4:9d:e6:f8:fb:
6e:41:a9:54:94:b2:a9:ee:9e:1a:97:19:9c:de:aa:
d3:4e:63:06:36:d5:df:68:ef:2e:c8:13:67:7c:68:
60:7b:a2:0f:5a:51:8e:0b:98:50:34:b1:49:81:29:
47:11:8d:ea:b5:92:73:ab:7e:6d:04:6e:fb:0e:3f:
fc:bf:87:51:57:2e:5a:0f:f2:26:be:cd:7e:33:35:
dd:71:a3:3e:23:56:8b:bc:77:1d:6a:4d:8d:86:8c:
8b:69:16:08:aa:96:94:58:5f:09:40:f6:fa:d4:07:
c5:b4:43:a8:9d:fe:ff:88:c7:5c:21:6b:33:a1:d0:
91:1a:73:fe:e1:78:ca:3f:da:52:f3:ca:47:16:4a:
fd:f4:b9:57:42:86:06:54:ff:5f:62:2b:78:fe:d0:
a6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:46:FE:DA:5B:F1:CC:70:77:7F:70:ED:F2:24:69:E0:2A:C7:EF:78
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74077f15-8b8a-41fa-95f9-576975b5f72f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.153.112.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:3a:df:14:80:4a:f1:2a:70:76:b2:37:97:ab:65:01:86:0f:
2c:2f:70:2f:db:f1:4c:61:35:59:09:29:2d:f9:09:95:80:c1:
9b:df:9f:a3:53:6e:e8:21:87:49:9c:13:8d:82:b3:0c:b3:91:
c6:49:15:03:6b:54:b7:05:3a:c2:ee:ad:14:9f:dc:b0:ef:85:
2a:41:9d:7d:15:3e:81:9c:ab:d7:23:16:52:5e:4f:d2:f9:a3:
b6:0a:78:c3:d7:53:3f:61:1a:76:4c:60:bd:34:bf:10:be:f6:
37:7a:46:8f:2a:46:15:49:81:8b:da:a6:62:da:7c:b5:30:85:
db:0d:4e:66:53:01:21:1f:98:f5:32:db:48:a1:e1:13:d0:b9:
b9:41:c5:7b:d1:fb:0a:09:27:75:17:54:1b:38:4c:a4:f6:2f:
a7:53:5a:1c:b0:fc:bb:40:ac:4a:9c:8d:db:87:dc:2f:99:88:
e0:b7:db:a2:6e:10:94:91:d8:5b:a7:b1:58:7f:e4:03:4b:29:
4a:26:44:48:94:e2:09:c5:7b:ac:ad:d7:17:08:e8:44:60:88:
ec:ff:af:1b:6f:e8:14:5f:4b:66:ad:7b:3d:86:13:b1:63:cd:
00:da:39:69:cf:2c:ab:e7:67:8d:68:0c:bb:9d:bd:1b:e1:43:
17:1e:f7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:49:06 2025 by rpki-client