Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/969e21ef-decc-4042-a086-bf06af10581c.roa
File: 969e21ef-decc-4042-a086-bf06af10581c.roa (raw, json)
Hash identifier: jF1mumN9TVMWliNlHBtj0QMWgERQgq7nz7daa2xVedM=
Subject key identifier: 9F:34:23:2C:B7:02:18:8E:43:A4:38:99:58:95:81:5B:E2:63:40:CB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3520F163C235F908621894088411770045435A49
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/969e21ef-decc-4042-a086-bf06af10581c.roa
Signing time: Tue 07 Oct 2025 00:11:53 +0000
ROA not before: Tue 07 Oct 2025 00:11:53 +0000
ROA not after: Tue 11 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 136.18.136.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:20:f1:63:c2:35:f9:08:62:18:94:08:84:11:77:00:45:43:5a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 7 00:11:53 2025 GMT
Not After : Nov 11 23:59:59 2025 GMT
Subject: serialNumber=862d09bcc06513971feb35dd6d074d77a0205bd34f35be4fc7dcb4124ba34617, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6f:d2:07:ea:a4:d2:3c:00:56:25:e4:a8:62:
82:b8:06:6b:7d:56:20:24:ff:56:79:c4:b3:5e:07:
1e:e6:df:22:fc:df:31:bc:56:0d:f7:d0:15:7e:89:
b4:75:4c:b2:1f:5a:84:65:89:1d:05:5c:1e:74:ee:
6d:bd:e7:b6:37:c2:03:dd:69:82:80:e7:b5:e5:7c:
ba:a8:9d:73:44:5f:8b:b3:88:13:8a:06:22:2f:79:
c9:05:aa:fb:14:30:3d:21:ff:5b:81:76:bd:de:51:
e6:65:08:ed:18:42:32:7e:a9:02:02:63:91:e1:37:
42:d9:25:a2:c8:b4:84:37:07:60:0c:93:84:9b:8e:
1a:0e:55:36:6e:88:19:82:02:d9:48:18:5f:d1:61:
c5:ff:e2:9e:a8:81:ab:b9:3f:ce:b7:d7:66:50:7c:
05:e0:80:8e:61:fc:d0:6a:a1:b9:7a:7f:bf:ec:6b:
a1:8e:d1:72:ec:de:04:66:5c:d3:30:04:53:cf:df:
7e:84:da:cb:9f:97:36:56:e0:14:0e:e5:be:29:89:
b6:c6:04:3e:7d:d8:9f:2a:a2:58:67:7f:d8:c8:9d:
4a:34:8f:a2:aa:c1:a7:67:35:cf:4b:01:b1:4e:a9:
d7:5f:92:0b:0a:87:dc:4b:db:1e:b2:1d:b1:8d:0d:
b5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:34:23:2C:B7:02:18:8E:43:A4:38:99:58:95:81:5B:E2:63:40:CB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/969e21ef-decc-4042-a086-bf06af10581c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.136.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:49:03:1a:ea:4c:4f:32:60:26:2b:13:31:a7:9d:bd:21:61:
2f:77:ee:5b:d6:8c:4b:27:bc:cc:31:fd:13:0b:65:5c:03:9f:
c5:40:69:48:71:5b:55:d3:26:a6:2a:c0:a1:ea:85:4d:0d:4b:
87:8d:26:c6:5b:c3:52:a6:c7:d0:45:ea:f9:77:18:ff:0d:ef:
7f:36:de:33:8b:00:70:53:06:5a:68:c4:ad:f7:24:8b:a5:bf:
92:07:ee:fe:97:01:c9:67:9d:fe:09:b5:83:03:70:3d:ec:c9:
63:b1:be:46:f6:e7:9b:03:e7:3c:74:7f:5d:c7:96:48:c8:4b:
49:65:91:7d:87:c8:38:66:7a:52:7c:46:b3:ab:44:cc:86:7f:
fc:e1:94:f8:1d:14:17:f5:ce:c2:30:d4:e7:72:c6:8d:54:1a:
5b:87:b1:9c:69:ea:e1:76:1b:4e:79:99:98:45:5d:71:6b:f6:
3e:46:71:2d:a8:8f:94:bc:24:71:5f:b9:86:6a:ab:bf:c6:ee:
b0:1c:3a:ff:8f:74:f5:4a:bc:f7:c9:b5:80:32:6a:db:af:4e:
f1:5d:d0:65:06:41:bd:66:fb:07:16:51:9e:7c:d0:79:e1:4e:
72:6b:62:e3:43:b1:fc:6e:e5:2d:74:07:da:4b:cc:1f:03:e5:
7f:c8:27:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:21:04 2025 by rpki-client