Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f2cacca-8156-4e10-90e1-4336b814fdde.roa
File: 3f2cacca-8156-4e10-90e1-4336b814fdde.roa (raw, json)
Hash identifier: EslXFCfeDx1lBZOvNnsBgvR/oMrYeWUPiadd4fJEg+Q=
Subject key identifier: 7D:D2:BF:68:33:80:E5:EC:32:3F:66:A5:C1:83:00:F0:78:FC:F6:B3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 705E0CEBE0CFE72A1E50B3495D9EC9A0F5198D67
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f2cacca-8156-4e10-90e1-4336b814fdde.roa
Signing time: Tue 14 Oct 2025 00:21:19 +0000
ROA not before: Tue 14 Oct 2025 00:21:19 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:5e:0c:eb:e0:cf:e7:2a:1e:50:b3:49:5d:9e:c9:a0:f5:19:8d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 00:21:19 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=ab7ad385f148ff5a89c2101e85815db0832d9bd19abb88a63f1ab2b4f36f8372, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:17:a8:49:6b:33:7c:97:52:b6:ac:1c:be:b6:
b0:2b:de:55:2b:59:cf:1e:8a:25:b2:83:15:ac:33:
90:ab:b4:b1:77:c2:2d:ee:78:91:d8:61:ee:4c:46:
6c:a0:c6:e2:1d:76:ba:67:5c:80:4e:59:7e:5a:94:
35:15:ab:0e:37:9e:1f:be:05:61:ad:ca:1e:72:46:
a4:c2:1c:6d:b2:f5:e4:58:71:50:c4:27:b6:62:8c:
b3:36:8e:71:bc:43:ce:8f:e8:1c:4b:74:9c:92:91:
18:49:4a:23:7a:2a:2e:84:73:7d:f4:a0:78:a7:69:
d5:ef:67:4b:b0:4b:91:ed:0c:a9:d9:99:c5:2f:c8:
e3:ec:ea:a8:ae:84:d1:58:0e:30:79:9c:f0:24:77:
ec:24:9a:1a:03:71:56:f9:8a:59:07:91:fe:bf:9f:
73:6c:a3:5e:57:86:ff:72:61:ba:85:d5:d2:22:3e:
96:3a:e6:a9:06:c9:48:6b:db:88:3c:dc:f5:ed:ef:
c5:f4:f2:fc:b5:f9:e8:a3:99:a5:7f:af:81:81:08:
ec:2e:60:77:87:a4:b8:80:7e:ba:5b:82:0e:3b:dc:
14:84:c9:07:7e:c4:35:3a:bc:06:0d:12:4f:d3:0e:
1a:d4:41:c2:6e:d1:52:50:3d:67:03:47:50:e2:0c:
28:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D2:BF:68:33:80:E5:EC:32:3F:66:A5:C1:83:00:F0:78:FC:F6:B3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f2cacca-8156-4e10-90e1-4336b814fdde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.215.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:47:38:bc:54:65:63:1d:6f:00:d4:9c:6c:f6:a4:ae:1c:d1:
1c:9c:51:cd:4e:1d:76:a8:58:a0:48:e8:a6:f2:54:98:11:e3:
c0:2b:41:45:6e:17:dc:31:5f:21:b9:80:cd:9b:b8:a8:b9:ca:
f3:a3:b7:43:6a:1f:d3:1d:4b:5d:3a:cc:d5:d3:1b:c5:da:44:
d7:6c:e6:42:69:81:00:b7:1d:0a:14:01:b8:56:ab:39:a0:b2:
ab:bb:3b:71:ef:b8:ab:c0:93:88:1b:77:9c:36:fc:04:8b:96:
65:b8:a0:f2:72:66:37:74:26:7e:48:cc:a7:cf:92:cb:86:9a:
a7:36:58:2e:f5:aa:ea:a0:29:08:26:b6:b0:36:dd:86:ab:c9:
cf:c3:27:d0:d8:34:76:b7:e7:57:6b:f9:8b:b7:96:59:1d:20:
35:c4:03:a8:e6:d9:80:bf:74:d2:cf:42:5d:72:c2:df:36:b9:
c6:88:8f:a9:d3:78:ab:09:c5:91:bd:ec:da:a5:6a:94:8e:be:
d0:a7:9f:84:25:ec:5c:ed:f1:8b:45:41:a6:79:be:09:c0:7e:
82:0e:5e:a7:ce:c9:d8:ab:88:bf:93:4d:bc:ad:dd:a3:9d:8e:
3a:23:bf:40:dd:23:4b:3f:bc:ca:a6:c3:6e:91:ba:48:0d:95:
f1:10:b8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:01:58 2025 by rpki-client