Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b5d2d8a-3145-4b4b-906c-144a5ea4a08b.roa
File: 2b5d2d8a-3145-4b4b-906c-144a5ea4a08b.roa (raw, json)
Hash identifier: 1eW3SZ7xhFlrdw8cisy29t7Lz6XoLUPZn6rQBLxfM34=
Subject key identifier: EF:30:A1:C4:55:B9:D4:AC:A5:1D:74:14:A3:76:E4:CA:40:0F:4B:74
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 54A0C1E16E41B731DABD498D266A635101471856
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b5d2d8a-3145-4b4b-906c-144a5ea4a08b.roa
Signing time: Tue 14 Oct 2025 00:42:38 +0000
ROA not before: Tue 14 Oct 2025 00:42:38 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:a0:c1:e1:6e:41:b7:31:da:bd:49:8d:26:6a:63:51:01:47:18:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 00:42:38 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=b30cd658f22edc85bbd4b0769755a79ac2a2ee569c0bb4790859c2cb866ca227, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:36:a4:ff:87:12:41:d4:bb:74:6a:93:78:b2:
02:c5:26:1c:6c:16:9e:e5:d9:bf:50:cf:7a:7a:bf:
ab:f2:9d:e7:77:32:21:cd:ad:e7:04:2e:8a:b0:ac:
fc:47:1f:ab:25:2f:ad:a7:c6:a5:07:d8:a3:41:5b:
d3:22:ec:15:8d:0a:c0:a4:76:08:e3:d2:1f:35:a1:
14:b6:45:ca:c3:a5:ce:62:3e:6d:3f:fa:8f:79:a8:
ef:a6:ff:5c:f9:a4:c1:40:7e:ed:09:91:48:b0:2e:
b6:00:36:08:0b:58:a6:8d:96:75:4a:5b:ed:69:28:
c3:6a:21:09:97:31:7f:4c:58:e5:e1:d8:77:89:e7:
6f:e4:47:e0:61:ff:c1:ff:fb:b5:9a:40:08:04:1c:
2d:38:58:0c:e6:eb:7e:76:75:5e:ff:ad:7d:31:18:
f1:a4:b2:ba:04:6b:b6:92:79:ee:08:ae:be:39:bf:
b7:2e:e8:2e:8d:bb:9c:6a:24:ef:3f:94:51:a4:ba:
a6:d5:3c:8f:21:78:ac:ff:54:22:3d:88:08:08:53:
78:c1:e1:65:3e:80:29:26:7b:bc:ea:5c:24:3c:4f:
55:bb:8e:a4:04:77:1c:3e:8a:ba:96:21:2b:00:fc:
bc:61:92:aa:04:62:55:ea:26:bb:35:ee:74:eb:d1:
94:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:30:A1:C4:55:B9:D4:AC:A5:1D:74:14:A3:76:E4:CA:40:0F:4B:74
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b5d2d8a-3145-4b4b-906c-144a5ea4a08b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.210.0/24
Signature Algorithm: sha256WithRSAEncryption
29:10:33:81:9c:bb:43:48:28:2d:03:65:25:ae:24:c2:44:bb:
23:1a:45:fa:3f:3d:7c:ea:88:14:f8:f9:71:f7:b0:b2:83:6c:
a5:66:7e:75:1d:0b:37:8f:86:68:ae:46:44:e6:b3:4a:2b:23:
a7:6a:e3:f0:7b:42:d1:3e:22:c5:51:bd:bc:20:aa:2d:29:5f:
72:b5:85:4e:86:36:d6:d6:05:ed:8e:70:80:a0:46:a8:64:0f:
f3:b9:d1:0a:ed:32:bd:5a:dd:cf:f9:f3:ff:01:0d:9f:73:57:
aa:d6:b1:49:3c:5b:26:d9:8d:d5:11:b2:e8:ce:b5:7c:b8:de:
a4:57:40:b5:3d:ac:d6:77:2f:28:6e:dc:55:16:30:c7:c8:1e:
2c:24:36:ab:a2:99:cd:6a:a0:d8:87:0e:f2:c8:da:fc:9d:d8:
6a:92:35:f6:0b:cc:d0:db:b9:22:fb:cf:fd:b4:3e:b8:2a:0c:
13:81:91:ea:a4:74:0c:aa:1b:d6:42:ee:a5:9e:b1:04:09:50:
cd:9d:c4:1d:d2:55:e8:b2:86:19:1a:9b:51:56:aa:3a:2c:fd:
1b:44:f4:62:eb:95:d7:42:cf:a6:21:4c:21:2d:3d:ab:85:0a:
78:68:19:49:d9:53:34:a1:1c:f9:2d:96:43:0a:09:b3:a1:67:
00:22:88:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:48:33 2025 by rpki-client