Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e5768b0-d230-4f28-b5ea-094649f001e8.roa
File: 1e5768b0-d230-4f28-b5ea-094649f001e8.roa (raw, json)
Hash identifier: oqFhQtdOvGGl4+MY2JrYg8m6mYKe8/8Mmx9M8AyMz4c=
Subject key identifier: F5:B6:CC:95:CC:7F:58:98:E6:FF:DE:E8:31:B0:7F:60:F0:4C:82:89
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0BF5108766CDBFB0E9E9B43BA570AB7F50536565
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e5768b0-d230-4f28-b5ea-094649f001e8.roa
Signing time: Tue 14 Oct 2025 00:40:20 +0000
ROA not before: Tue 14 Oct 2025 00:40:20 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:f5:10:87:66:cd:bf:b0:e9:e9:b4:3b:a5:70:ab:7f:50:53:65:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 00:40:20 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=b155890c72be3bf3ecbd1865b2f263b59a14eee00d353623e0ccc35d8700f72c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f0:c5:1e:be:d8:31:0c:ea:73:4a:f1:51:4a:
ad:6e:62:d3:d3:4c:ca:1c:2d:bd:3d:e2:8c:54:c9:
31:00:cc:04:bf:e6:59:0f:a2:a6:72:db:5a:31:83:
e1:8b:26:db:65:85:49:f4:0b:63:18:5b:47:df:5f:
b4:97:99:11:fb:d8:14:48:53:7f:57:a1:59:a3:b1:
84:f5:73:3d:4b:63:b8:fe:ce:ed:62:29:dc:ea:32:
3c:55:d2:49:75:f9:ed:53:3c:dc:21:2d:ed:ba:ef:
e6:5f:c1:75:3b:1d:b2:d3:a4:23:30:25:c5:99:98:
5a:0b:a5:d4:16:83:80:a6:0e:bf:62:d8:96:e4:b6:
fc:b1:fd:ae:24:d3:e4:8b:c1:61:a6:99:2f:d8:e4:
2a:f2:81:76:83:bc:da:42:5a:33:08:83:7a:99:0d:
8f:95:a9:0d:b5:76:c6:0f:bc:58:6c:c1:22:1c:a4:
92:89:6c:64:08:e4:e8:69:ad:96:3f:eb:e3:70:6a:
e5:19:7c:ea:cf:52:e0:ba:2f:b6:d1:39:58:34:6a:
e1:10:75:a3:f3:12:a8:c6:5a:75:61:4e:ab:52:11:
68:18:8a:94:38:97:13:01:ba:35:59:de:d5:ef:c6:
16:4b:5b:2f:7d:85:86:40:53:03:64:e6:c3:70:e9:
6b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B6:CC:95:CC:7F:58:98:E6:FF:DE:E8:31:B0:7F:60:F0:4C:82:89
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e5768b0-d230-4f28-b5ea-094649f001e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.10.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:15:78:4d:44:4f:3f:6c:52:ba:36:86:17:34:df:23:c9:87:
3e:7c:3f:71:da:c3:b6:bd:8e:0d:6f:dd:25:ec:8a:ab:d9:23:
f6:4d:b0:f6:1e:6f:f0:63:f5:8b:93:d7:65:45:16:a3:6d:7f:
37:4f:9e:14:65:ef:ed:ce:55:fa:e1:aa:a2:a5:c1:3e:ea:1f:
50:63:83:56:c2:14:23:62:4c:98:ac:84:d6:53:07:96:99:0f:
d8:fc:4c:7f:85:f4:ec:1c:78:43:ce:e2:49:9c:b8:00:c1:20:
c4:b8:4b:9e:45:75:a2:5c:56:ce:35:69:80:ef:d9:bf:31:6c:
86:60:52:4b:8e:51:64:f8:a8:3a:61:bb:c9:46:20:dd:d0:be:
19:c8:a0:05:32:6b:f3:f6:77:38:25:e0:21:44:74:44:0b:de:
6d:ff:c5:6c:c3:38:7a:26:bb:52:78:3d:75:13:a6:d3:b7:ec:
43:d2:c7:96:92:c0:ed:fb:ba:73:2f:fd:01:1a:19:ea:20:b0:
ad:c5:0d:bf:9b:03:85:39:52:b7:bd:22:33:e9:30:99:88:31:
53:22:2e:d7:0f:4a:4a:5c:4e:12:81:95:1c:04:e9:69:32:18:
ea:08:1e:ca:7d:5a:b0:22:34:26:a1:76:2e:bf:b6:3e:03:cb:
4a:6c:69:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:54 2025 by rpki-client