Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78c3a8cf-7487-4cf8-9634-89e3deedb0dd.roa
File: 78c3a8cf-7487-4cf8-9634-89e3deedb0dd.roa (raw, json)
Hash identifier: L7MldhmluCKf70OsXIPTblMQShP7EOn2/uAeixa/Uws=
Subject key identifier: 0A:74:5A:E7:CB:AF:25:BC:24:CA:A9:A4:CB:10:F4:00:35:55:FF:45
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7A8FA1CA8917082BDEBB25937121EE3E811396ED
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78c3a8cf-7487-4cf8-9634-89e3deedb0dd.roa
Signing time: Tue 14 Oct 2025 00:39:31 +0000
ROA not before: Tue 14 Oct 2025 00:39:31 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:8f:a1:ca:89:17:08:2b:de:bb:25:93:71:21:ee:3e:81:13:96:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 00:39:31 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=64238a04a3510a392e1cf0bea46df56148d7d2d12f213457edc948c8b7a4fee6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0f:0f:84:24:d5:f3:82:38:ca:85:c1:93:af:
1f:1c:33:29:90:7a:9d:5f:9b:5a:30:71:2f:3b:24:
3b:d3:52:3c:b3:f5:db:78:42:30:3b:a1:de:5b:03:
44:28:4e:99:f0:3f:c4:4a:9a:d8:a3:27:e0:cc:bc:
a4:67:d9:06:43:ae:1f:73:5d:2e:69:79:d2:a5:a0:
8f:81:5a:61:ec:84:53:0f:07:c9:ac:2c:15:c7:35:
f8:a8:05:90:b3:77:39:ab:ef:ad:1a:39:82:51:28:
f1:a9:9e:67:9b:2b:5d:18:c6:79:9a:e9:ed:86:6e:
4d:ca:7c:95:59:f1:df:a2:b2:38:a9:b2:bc:52:4b:
b2:e8:e1:ce:5d:e1:b6:6e:77:10:87:57:68:53:f7:
a3:d8:0e:06:06:57:e0:fa:6a:f0:90:95:eb:b8:f0:
d3:2a:f1:7f:84:c9:7a:b1:37:ca:31:c5:f2:29:11:
af:bb:2a:10:98:a5:28:b0:14:7a:a0:0c:c2:db:2e:
c5:a9:6c:5d:c0:4a:c2:40:24:de:bc:98:d9:67:f3:
b1:d2:2c:7b:8e:67:30:66:53:cc:4e:6b:d9:dd:09:
b8:83:2b:ed:68:c9:f1:6e:07:02:49:a9:57:f0:05:
85:9c:1d:a7:af:31:1c:a2:49:5a:0c:95:ad:fe:c4:
fc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:74:5A:E7:CB:AF:25:BC:24:CA:A9:A4:CB:10:F4:00:35:55:FF:45
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78c3a8cf-7487-4cf8-9634-89e3deedb0dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.231.0/24
Signature Algorithm: sha256WithRSAEncryption
04:bb:be:39:83:c6:5a:be:53:ca:06:5b:ee:41:11:db:34:20:
fe:15:ef:d7:3a:9b:54:29:c0:cc:78:c3:f6:cc:f1:da:84:6f:
a1:df:f8:8e:b2:98:61:bf:4d:1e:9c:b7:12:6f:d7:2f:d3:76:
41:e4:a8:1d:9d:53:ad:b5:63:b1:4a:1b:8b:09:fb:e0:8a:43:
14:88:5d:0d:36:a1:05:82:67:55:b8:8f:9e:2f:16:90:e9:2c:
9d:45:47:92:11:69:63:1e:66:19:cb:8b:43:27:da:e2:d5:68:
5d:d6:fc:6e:c2:82:4e:a4:d5:d6:0b:03:02:34:0e:07:2e:14:
a1:e6:9b:2e:d2:8c:3a:4b:0a:b9:61:2a:5c:46:c8:2c:ad:17:
5e:bf:e8:77:2b:41:6d:a5:04:77:74:6f:b1:b9:c0:d5:df:aa:
6c:72:68:70:be:cd:02:e7:2a:c7:0e:a8:80:5c:78:a3:3e:e0:
80:5a:a2:66:df:6b:87:a5:2b:59:95:39:45:be:e5:5d:23:b5:
30:64:c1:30:77:e3:e4:10:da:68:bd:b1:ff:3e:f6:57:35:fe:
6c:3b:06:91:bb:9d:99:1b:92:58:97:8e:88:48:30:a3:91:41:
d8:cb:f3:7c:e6:5b:3c:0e:e9:80:e7:d3:0f:48:fe:ed:fe:ab:
81:99:59:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:17:59 2025 by rpki-client