Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ca01f12-106c-4b77-b205-6793fb89af13.roa
File: 1ca01f12-106c-4b77-b205-6793fb89af13.roa (raw, json)
Hash identifier: 3OXcZ9SPX7Siqg8C0zpw820oFnd/R9gTXRReT25nFVQ=
Subject key identifier: 4E:2B:AE:75:C0:49:1A:87:4C:FB:75:EE:1E:D7:DE:90:EC:2B:61:03
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 13C061CD3FF6B74E128259703D414EF265A123EC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ca01f12-106c-4b77-b205-6793fb89af13.roa
Signing time: Tue 14 Oct 2025 15:40:07 +0000
ROA not before: Tue 14 Oct 2025 15:40:07 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:c0:61:cd:3f:f6:b7:4e:12:82:59:70:3d:41:4e:f2:65:a1:23:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 15:40:07 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=16c6bfbae6c2bb669ad100687698a5edf301ecfa7e4fcb02be5e5f4914012e9d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:c6:fc:68:6a:cb:95:3d:87:33:72:d6:17:
c3:41:cf:23:1b:ac:9c:c7:6a:7d:00:30:16:a7:e1:
4f:15:c8:69:86:72:fa:a4:a7:4b:bc:f5:57:e4:6b:
1a:0c:2e:83:a4:9e:8d:0a:5b:fa:22:8f:9b:a6:7c:
67:55:92:22:4e:8f:27:e6:3a:9e:65:23:03:83:0b:
3f:61:d9:00:e4:3e:b9:9a:4b:04:3a:e3:69:2c:21:
54:61:8e:0b:73:d5:bc:99:8a:f9:3e:0d:25:2c:25:
c4:bc:b0:4f:bc:ad:2e:fa:6e:d3:57:49:a2:75:e0:
ad:88:21:39:4c:bc:aa:c8:be:71:b7:57:c6:01:0a:
0f:70:26:a9:fb:e1:1f:9f:0d:97:0b:95:5f:c6:7f:
be:2a:34:00:7d:df:99:58:c5:2a:d1:ea:1d:6d:b2:
dc:91:e2:d3:0c:4e:9d:79:0b:c1:17:3a:f1:da:c2:
c8:09:18:20:ed:39:5c:35:bd:f1:dd:44:44:63:0d:
df:21:49:46:a3:e3:1c:40:b0:04:4e:06:fd:0b:cb:
9a:35:0b:29:1e:b1:76:6c:f7:e1:65:0f:48:5c:52:
1c:e5:8b:e2:f0:b9:19:c0:c2:46:d6:95:f7:04:c8:
6f:71:56:09:89:c3:83:be:b3:21:e3:2f:84:bd:b9:
95:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2B:AE:75:C0:49:1A:87:4C:FB:75:EE:1E:D7:DE:90:EC:2B:61:03
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ca01f12-106c-4b77-b205-6793fb89af13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.165.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:5c:ff:c0:00:26:6d:f9:04:9e:17:49:b4:b5:3b:d4:89:2f:
ff:38:f8:11:f2:e4:e2:75:36:8a:23:c0:24:2e:e2:2f:fd:82:
c1:07:42:70:23:44:35:ca:de:a6:c6:9b:57:86:96:06:e8:83:
8c:19:66:7b:89:9f:67:2c:14:41:96:b3:b7:0c:fa:e9:eb:02:
18:34:18:7d:f8:2a:6a:85:c3:e2:93:94:17:e0:46:56:40:c6:
e8:21:77:0f:df:b2:f9:84:72:3e:e6:98:95:1e:2f:4a:e3:e2:
20:1e:b5:f2:db:7b:88:2b:5e:0b:9e:21:25:3f:00:22:4b:60:
07:17:a6:17:6f:e6:86:ba:75:6a:9b:7f:a3:a1:6d:d9:93:dd:
30:28:f3:26:63:a6:87:64:d1:11:f9:69:33:44:1a:43:c7:c2:
71:27:77:b1:04:ee:de:d0:7e:d9:8e:1d:e5:fc:c8:af:28:fd:
16:1b:5f:a3:59:5c:6a:17:48:4e:b4:ed:70:f5:c4:8a:aa:12:
58:c1:6d:ab:ac:28:c5:2a:cb:d4:c9:4b:d8:86:f2:a5:73:ae:
b8:e6:3c:ec:92:50:f8:28:c4:6c:db:46:c2:9d:b8:aa:11:00:
49:7b:e4:bb:74:6d:37:52:74:5a:86:a8:71:6a:0c:e8:7d:db:
5e:34:02:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:17:40 2025 by rpki-client