Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a2b09e9-4c1a-4003-a624-aae560504741.roa
File: 4a2b09e9-4c1a-4003-a624-aae560504741.roa (raw, json)
Hash identifier: 8rOxhtN9t13DSJewE2sBQq3dU/v3jMDr9znqPwdc1O0=
Subject key identifier: 9E:7C:66:D6:B1:71:C5:84:89:59:51:8F:40:54:F0:B7:40:71:EB:54
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6035FBF6E40B43712F8A0855D3C7BF15CE566690
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a2b09e9-4c1a-4003-a624-aae560504741.roa
Signing time: Tue 14 Oct 2025 15:22:23 +0000
ROA not before: Tue 14 Oct 2025 15:22:23 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:35:fb:f6:e4:0b:43:71:2f:8a:08:55:d3:c7:bf:15:ce:56:66:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 15:22:23 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=41551b2a32d362f7fc855e0458da3e7d42d0efed5c85025c4545bf8018af295c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:e8:97:c2:85:d6:17:3b:1d:24:2c:b3:b6:8e:
31:fd:05:50:e9:13:7d:19:6e:a4:5f:53:fd:06:ab:
36:95:4a:ae:7d:5f:08:ed:bd:42:f9:52:62:34:b5:
a5:90:38:b1:97:48:ab:8b:12:c7:7d:0d:7a:1f:09:
43:4e:2f:1a:b5:2e:96:9a:5c:e7:f5:f4:37:98:4e:
0c:d8:5f:99:6e:07:41:6c:c9:fa:e4:b3:41:fc:b6:
23:17:cf:9f:6b:4e:d5:ca:b0:dc:fb:a4:71:89:3a:
e8:b3:48:52:c0:bc:e8:8d:3e:7d:ef:41:fb:5e:5e:
96:1c:f6:38:e9:db:d0:e0:5c:be:14:eb:a3:92:e5:
69:7b:5c:77:d5:5d:0f:16:2f:ff:e5:71:dd:fc:90:
35:b7:c0:c1:d3:91:76:bf:12:e2:01:79:43:03:11:
a9:09:2e:b4:5d:98:58:75:b0:06:1c:0d:81:bb:b5:
96:57:c1:17:a1:33:c3:11:72:84:0d:61:22:20:52:
19:dd:96:43:be:17:dc:f4:84:8c:a9:26:da:93:06:
e2:f8:91:52:27:48:51:ab:f4:7c:fb:21:b0:a1:37:
3f:43:7a:d7:fc:bf:8c:49:b5:0a:75:73:de:21:cd:
d4:99:69:31:05:12:a9:81:56:dd:5f:56:1a:75:4d:
0a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7C:66:D6:B1:71:C5:84:89:59:51:8F:40:54:F0:B7:40:71:EB:54
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a2b09e9-4c1a-4003-a624-aae560504741.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.247.0/24
Signature Algorithm: sha256WithRSAEncryption
95:f8:bf:fb:30:04:fb:b4:1a:d0:21:a6:2e:8a:ec:6b:43:c8:
e9:77:b2:4c:c6:9a:ed:6e:69:e1:84:a8:ae:78:f9:0b:9f:03:
2b:07:56:a7:a3:2e:5b:49:20:5b:93:6b:20:bb:53:32:8d:7f:
5d:97:4d:a1:88:61:6a:8f:d9:a7:e2:28:97:54:f2:a1:59:ea:
8d:da:61:0b:e5:7a:e4:f2:7c:15:4d:4f:32:d3:b8:1f:59:be:
fc:b7:91:83:44:8f:54:e5:b9:17:f6:9d:8f:aa:c1:0f:f7:06:
8a:af:61:ab:b0:be:dc:24:1e:bb:b6:38:6a:07:4b:36:a6:e7:
ea:49:d9:1a:df:24:9a:b8:44:0e:aa:d5:75:00:b6:e3:1a:db:
e8:5c:b4:27:b8:44:48:0d:18:cc:7b:02:3a:a4:d7:aa:43:13:
88:7e:25:16:66:62:09:60:49:67:d2:66:2a:bc:75:2c:f8:f6:
da:f6:01:38:02:cb:f3:df:e0:bb:9f:a8:ec:e7:74:6a:b0:c5:
d6:49:f0:7c:40:98:55:0a:ad:bb:83:e3:2c:66:0f:e9:09:cf:
1d:3f:ed:f0:2b:33:fe:1a:66:52:cd:c2:2f:5b:39:8e:0e:21:
1a:b1:35:ca:67:6e:50:e0:17:45:07:6a:9b:97:ea:cc:2c:8c:
56:64:cc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:12 2025 by rpki-client