Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7336cad9-8c1c-4cd9-b3f2-01b65f0f6a24.roa
File: 7336cad9-8c1c-4cd9-b3f2-01b65f0f6a24.roa (raw, json)
Hash identifier: gbiHHTNxVSvwuAl/3T/hDOWxn+SixFd8KpPdNsJQaWU=
Subject key identifier: EF:2A:97:B5:38:27:01:E3:30:B6:08:3A:A8:46:7A:88:67:27:74:BE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 52B1C18CAFD3AD920F9607860F28A2D51A52D733
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7336cad9-8c1c-4cd9-b3f2-01b65f0f6a24.roa
Signing time: Tue 14 Oct 2025 00:39:37 +0000
ROA not before: Tue 14 Oct 2025 00:39:37 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:b1:c1:8c:af:d3:ad:92:0f:96:07:86:0f:28:a2:d5:1a:52:d7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 00:39:37 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=a9e87cfa94e93355f9f323fb0cc28ad1afc56b9ba66a5168ac22a6ab2d640635, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:29:ab:0a:53:50:22:8d:3b:fd:df:19:e9:34:
ce:3e:8f:8b:f9:d7:11:de:26:f7:5b:06:86:28:71:
2e:7c:f0:39:d2:59:fd:e8:e0:cf:0b:bc:9c:fd:d7:
ad:14:43:7b:9c:78:6f:d3:4b:f6:b3:78:3d:53:fa:
10:1f:ca:89:1c:b5:16:ff:17:30:25:ac:87:01:2b:
9c:7a:ef:ce:f5:ef:c6:0e:69:f5:df:52:0f:c2:0e:
a3:31:c1:22:94:3b:e9:f5:b0:4e:0b:cb:e6:34:4b:
8d:39:73:5d:f1:34:9e:ae:c9:97:33:26:79:52:eb:
0e:7f:d6:a3:a8:1e:98:41:c3:8b:05:f0:2c:20:fe:
fd:c0:e0:d1:e7:5c:34:f2:e3:ae:dc:e0:6c:8e:31:
6e:04:77:d1:0f:be:1e:15:23:c3:80:e6:93:f7:49:
77:38:50:cf:07:72:35:3f:9d:f5:85:45:a9:a6:27:
1e:25:9f:38:ea:03:ed:c8:44:d3:8b:cf:fb:8d:9c:
95:d9:b0:fa:f3:92:33:27:cd:93:41:dd:02:07:93:
85:26:c1:f8:98:f0:6d:4d:6a:dc:25:29:40:70:9f:
c8:bc:8a:8b:d6:49:ce:82:c0:c2:f4:a6:5a:49:51:
92:89:d7:b3:7a:6f:ad:81:bb:2c:c3:76:a0:ab:7c:
63:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2A:97:B5:38:27:01:E3:30:B6:08:3A:A8:46:7A:88:67:27:74:BE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7336cad9-8c1c-4cd9-b3f2-01b65f0f6a24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.195.0/24
Signature Algorithm: sha256WithRSAEncryption
39:a6:6b:c2:63:53:9a:10:9b:a3:9d:e0:8d:04:11:48:7f:56:
70:1a:90:7c:db:3f:bc:be:b2:a1:b5:62:94:a0:54:46:b6:71:
83:bb:9b:ca:a0:09:dd:d5:b0:cf:7b:8f:72:9b:34:87:cf:36:
3d:40:27:61:78:fb:d8:69:96:33:21:e4:ab:09:e0:43:9c:09:
d1:9c:ea:45:a2:4d:d6:c9:76:34:5e:df:cf:21:90:44:c5:78:
1f:4c:7a:b1:aa:13:5a:81:3b:10:01:62:5f:3e:b1:c4:24:20:
14:ab:3d:80:7e:76:79:ab:10:ee:31:d3:17:38:0d:f6:e9:b2:
b0:f8:ac:f8:0b:b8:83:41:8c:92:23:03:a2:47:df:47:ad:c9:
99:93:09:13:4c:df:4a:2d:9c:4a:16:4d:35:aa:5f:6e:a4:c0:
77:be:c9:d9:d9:02:e3:47:e3:d0:0f:01:71:64:fd:a7:7b:d7:
a0:c5:35:62:9e:03:34:24:af:fc:01:b8:eb:0c:ae:7f:cb:12:
a9:4a:6b:93:00:bb:93:52:5d:5e:93:4b:66:78:fc:1f:11:be:
12:9c:cc:80:81:31:a9:4a:1c:53:5b:09:dc:3c:d3:94:95:45:
89:0c:c6:3f:df:0d:77:b0:ca:86:3e:bd:86:a6:de:09:6c:7f:
cb:98:1a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:49:30 2025 by rpki-client