Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1bb02548-0394-4c22-b446-d1d217b919f6.roa
File: 1bb02548-0394-4c22-b446-d1d217b919f6.roa (raw, json)
Hash identifier: e9gcxRbxscoLV9kh8znD37jeGUBBnuOIyvjIj/hX+J4=
Subject key identifier: 82:95:6C:26:51:7F:91:40:E5:1B:31:27:28:D9:92:3E:F9:F8:E8:57
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 755DAA4D64F3BF48560E6A394615992E44721B2C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1bb02548-0394-4c22-b446-d1d217b919f6.roa
Signing time: Tue 07 Oct 2025 00:11:47 +0000
ROA not before: Tue 07 Oct 2025 00:11:47 +0000
ROA not after: Tue 11 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 136.18.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:5d:aa:4d:64:f3:bf:48:56:0e:6a:39:46:15:99:2e:44:72:1b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 7 00:11:47 2025 GMT
Not After : Nov 11 23:59:59 2025 GMT
Subject: serialNumber=8b9e25e04be5fa3683e3c7dc7221543aacc1ad6c2bd0568497f369f53bd7247a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:62:32:d6:57:01:5c:75:e3:a5:6e:9e:46:65:
ce:61:62:d4:23:f8:e7:5a:5d:17:be:e2:e2:82:62:
81:b6:e2:3c:df:a2:2a:cd:f0:e1:bc:0a:da:7e:b7:
6d:97:30:c1:4d:59:54:15:39:3f:3e:0e:d1:2a:7e:
dd:a2:45:5a:f7:71:a7:e8:19:34:74:25:be:f4:0d:
a6:fa:f3:fe:a2:64:8c:66:03:70:39:06:09:49:54:
69:ed:da:26:87:57:f7:e9:40:15:e7:9b:48:92:26:
a1:36:95:68:ff:53:67:58:f5:60:82:61:41:6e:8d:
1f:2e:ec:d8:a5:b0:df:0a:73:76:da:ca:f6:2b:f5:
cd:f7:0f:7a:a7:14:34:b6:07:fe:2e:e7:3f:13:66:
39:2f:ca:d0:31:96:36:6c:3f:bf:b0:47:ed:2e:a8:
50:24:93:19:92:3f:b0:f0:8b:45:f5:fb:90:bb:50:
1b:15:da:3b:56:82:90:85:17:5d:f2:2d:e5:ce:41:
99:db:57:58:92:f8:00:8c:b5:fa:3f:37:33:f4:2b:
21:c0:81:1a:14:f2:29:c7:cb:e8:d3:3f:be:5f:99:
7b:de:95:37:c5:98:c2:29:c6:18:a1:e7:d9:e0:45:
18:17:cd:d3:d5:eb:50:fd:44:c2:ac:a3:35:0e:03:
63:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:95:6C:26:51:7F:91:40:E5:1B:31:27:28:D9:92:3E:F9:F8:E8:57
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1bb02548-0394-4c22-b446-d1d217b919f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.134.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:4c:2e:4a:22:9d:96:60:f1:42:56:ee:1c:95:62:b4:c9:4f:
c6:f1:09:7c:9b:ca:ff:36:53:0b:44:9c:cc:01:1a:0e:dc:11:
3b:c9:98:38:82:d6:1a:b5:cb:30:83:af:0d:ff:46:d0:f4:53:
e0:2f:f4:53:a1:42:20:cb:f6:0b:58:a4:0e:ef:d9:17:23:5a:
b5:57:38:48:b1:f1:a3:a3:a5:e9:93:f0:ba:21:02:d2:0c:c1:
32:54:89:6d:41:a5:0b:c9:10:9c:b7:07:24:02:0a:5d:4f:8e:
eb:f4:13:bf:35:0a:a2:b2:23:5d:3b:74:61:ac:ff:5c:65:3a:
07:e7:70:bc:37:4d:83:82:96:63:1a:c4:1f:5b:38:51:80:fb:
a4:6d:51:13:e7:d5:84:cb:e8:8d:32:10:1d:5c:69:74:7a:92:
a1:ca:04:b3:fd:9e:01:46:5b:61:a6:a7:66:b0:2f:b8:99:a4:
75:ab:3b:b5:00:61:67:95:5f:79:2b:96:f8:c3:56:b5:8d:b6:
62:03:38:51:f0:b6:4d:31:2f:96:10:97:0a:d6:ed:f3:51:75:
c2:44:89:03:16:27:77:7a:89:f6:1c:52:f9:f1:e2:60:de:03:
66:15:b7:5a:84:1d:81:94:db:e0:aa:6a:7b:e6:e5:d7:a8:f3:
a7:5e:99:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:11:38 2025 by rpki-client