Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a04ceb7-b166-4fbe-abec-eb282d1a60d8.roa
File: 0a04ceb7-b166-4fbe-abec-eb282d1a60d8.roa (raw, json)
Hash identifier: kgc6RcfLKirqoW+NJlB7peHX7VRghgOQX4xerFE6rOk=
Subject key identifier: 29:2A:66:99:06:76:03:7E:21:58:0C:73:1D:D5:5A:67:D2:EA:65:63
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 532027FBEB243F8DBC338384FE928A7065F48812
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a04ceb7-b166-4fbe-abec-eb282d1a60d8.roa
Signing time: Tue 14 Oct 2025 00:40:27 +0000
ROA not before: Tue 14 Oct 2025 00:40:27 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:20:27:fb:eb:24:3f:8d:bc:33:83:84:fe:92:8a:70:65:f4:88:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 00:40:27 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=a9b272aa259c04057292a72a5fa99042041733c84ba88ccf71eee749229edc5b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:6d:56:4a:73:5b:ed:cd:a1:a7:a9:be:d8:
5a:7c:96:1b:c3:2b:c1:95:4d:ab:30:b2:e3:16:c6:
4e:77:66:c7:1d:f3:cd:3c:cb:b4:df:3a:e8:1a:a3:
a8:95:8b:2c:56:fc:88:43:83:7b:03:fc:7e:58:9c:
52:4e:90:b9:1a:f7:52:98:37:2b:5d:82:53:2c:2b:
93:12:c5:1d:ee:0e:40:38:ba:b7:0e:ea:e6:9a:19:
76:e9:42:df:3b:78:78:15:9b:9a:1d:0d:f4:2a:2c:
e6:15:9f:98:51:07:fe:4a:77:59:b3:ee:37:36:5d:
d4:8e:39:36:fd:3d:65:61:29:a3:b6:0e:c1:8d:0f:
1d:e4:7c:fd:3e:70:00:a6:4a:d9:9c:e7:15:65:5d:
9c:01:71:d0:55:6a:e6:4b:43:55:53:dd:fc:78:7b:
04:07:e9:99:47:59:d2:32:df:fe:51:ab:c4:96:e3:
fb:26:5d:2c:95:2b:46:be:d5:e3:da:75:09:38:ea:
60:10:2e:ed:28:f0:74:18:d8:33:a5:9b:67:43:c3:
16:06:a0:23:dd:aa:87:9f:a2:f0:46:9a:74:a9:28:
87:5e:b0:19:87:2b:71:fd:c0:ff:52:b8:62:5d:f0:
d3:9b:e2:45:29:21:e9:92:a6:64:04:90:71:89:4a:
7b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2A:66:99:06:76:03:7E:21:58:0C:73:1D:D5:5A:67:D2:EA:65:63
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a04ceb7-b166-4fbe-abec-eb282d1a60d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.70.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ec:1b:fb:25:3e:70:43:76:7b:06:0c:79:87:16:4f:76:47:
cc:4c:80:26:f1:7a:97:34:d4:2c:34:e4:c2:c4:5f:44:e1:c4:
d0:11:69:ad:ae:67:9b:d0:49:a3:36:7a:95:a4:41:c5:03:b3:
81:f9:fd:d5:6a:9d:ea:92:cd:35:11:a9:b8:01:fd:99:96:68:
c4:49:38:39:d6:2e:b3:fd:0f:07:20:cb:c3:30:d2:f3:dd:ca:
50:8c:52:84:69:d9:0d:cb:3b:11:d1:a3:38:3e:73:90:3a:0d:
de:59:0e:7b:13:df:77:67:2e:80:2c:a7:d1:11:bb:98:23:a2:
26:03:57:db:43:0d:d1:43:45:ac:0d:48:21:b2:61:93:18:d5:
a0:96:a3:52:05:2e:ef:dd:0b:58:aa:8d:6c:8f:8b:ee:4c:97:
2a:49:12:2d:1b:4c:26:34:2c:2a:5e:27:f1:68:40:77:dc:78:
34:0e:d7:9a:45:d8:15:d9:15:1b:46:8a:e9:ae:b0:89:8b:c6:
1f:d3:de:ce:f0:b5:b6:68:64:da:f7:fe:66:58:3e:2a:51:2e:
64:2c:92:e3:4c:01:ba:9c:96:10:fa:4a:2c:f6:29:58:80:48:
7b:f9:4c:16:f8:3c:25:2b:c7:77:0d:54:0c:40:34:2c:99:31:
3f:68:79:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:52:40 2025 by rpki-client