Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62002be7-3643-401f-a14c-bda500967f78.roa
File: 62002be7-3643-401f-a14c-bda500967f78.roa (raw, json)
Hash identifier: xO6GQPTMjvR9Cqk9UR0Psy0Palq2vrrm9VDWV5L1VzE=
Subject key identifier: CE:01:10:60:08:EE:DB:A5:4F:71:1B:59:32:9A:30:6C:32:A0:5D:84
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 221C408B5775EE9753E474DBF5433B1465FB1D50
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62002be7-3643-401f-a14c-bda500967f78.roa
Signing time: Tue 14 Oct 2025 15:39:14 +0000
ROA not before: Tue 14 Oct 2025 15:39:14 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:1c:40:8b:57:75:ee:97:53:e4:74:db:f5:43:3b:14:65:fb:1d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 15:39:14 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=0177a0982a85fb0b43f8abf49c6b224e0387e20106097980f7a5c17901685547, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:57:56:b3:d6:18:7b:64:3f:49:d7:49:53:83:
ec:bb:93:eb:08:11:71:01:78:83:46:c5:53:30:d7:
e6:aa:46:86:6c:84:ad:22:4e:44:a0:11:68:45:9b:
ba:38:14:5f:be:b6:ab:1f:9e:84:9f:14:fa:7a:4a:
91:13:7b:f8:02:1d:05:4d:c8:53:27:ed:d8:b0:01:
3f:8c:c1:99:31:d5:a1:11:5b:22:a2:f4:a8:97:b9:
7b:21:ac:07:7c:dc:18:5a:93:b2:92:10:99:ce:c9:
37:37:07:05:10:e4:ac:bb:1b:d8:88:25:57:f8:77:
24:75:ff:93:34:9c:df:02:6c:9b:be:fa:f7:eb:02:
9f:04:a8:de:75:7d:cc:9b:26:88:c5:cc:78:cd:63:
1e:90:c9:41:c8:24:64:32:e1:64:06:24:0b:ed:fc:
3d:67:2a:6f:02:b6:54:a4:51:b3:71:32:95:14:02:
de:93:1b:19:a2:ab:45:75:74:19:a8:5d:5e:2b:78:
48:39:88:ba:3d:9c:d5:ae:cf:8a:c3:de:38:17:02:
aa:4e:ba:40:5c:6d:63:5c:7b:10:55:f2:3d:9d:48:
50:02:5c:10:e2:07:22:0e:a8:bf:94:e3:86:c9:34:
af:19:00:7b:ce:2b:56:5e:14:3e:87:fe:df:23:0e:
ff:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:01:10:60:08:EE:DB:A5:4F:71:1B:59:32:9A:30:6C:32:A0:5D:84
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62002be7-3643-401f-a14c-bda500967f78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.211.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:49:eb:19:45:7e:39:a6:85:5a:f0:e0:51:87:4f:14:d9:6f:
ef:47:04:8f:f7:5b:a6:93:90:90:18:eb:70:43:d0:73:43:08:
b7:b1:76:e3:60:8e:f1:83:23:0b:22:e2:82:66:f7:b3:e1:62:
dc:ba:f1:08:31:cb:a9:28:b8:36:f7:54:b9:08:0c:0b:dc:98:
82:db:c2:a6:a5:f1:ad:6b:c3:0a:27:a4:f8:22:b1:cd:f9:9c:
de:86:79:bd:c3:58:25:c7:8e:0c:e1:e2:63:9c:b7:5a:42:62:
bb:2a:b6:b9:86:90:76:4c:cc:7b:2c:11:30:d7:c1:4d:9f:33:
c6:c7:8c:36:88:25:c3:ce:57:b0:09:b2:64:62:94:2f:08:eb:
b3:45:58:b8:6a:ca:0f:a4:cd:a2:d8:ac:eb:34:ab:20:c3:38:
37:e9:c4:97:0a:5c:9a:84:83:4a:66:12:8b:96:68:1e:b9:cb:
85:19:64:79:f6:d4:fa:30:b1:5e:74:d9:d3:bd:84:41:75:1f:
1d:8e:56:39:94:05:73:77:91:31:bf:34:f9:c4:7f:d8:3e:95:
bb:b6:82:2f:92:c2:f1:7c:5d:a3:4c:21:09:5a:ce:3e:54:51:
22:6d:b3:4f:b4:5f:31:9d:b3:21:74:af:67:21:cd:a1:fc:ba:
d2:69:5e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:24 2025 by rpki-client