Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9940dc82-262d-4754-b3c6-d4ddcd21a9a1.roa
File: 9940dc82-262d-4754-b3c6-d4ddcd21a9a1.roa (raw, json)
Hash identifier: C2lSAvY0EI4DG7EBfYuVhn8lD0xEZK1VuutvyEXHndo=
Subject key identifier: A7:1E:74:6C:12:EC:2C:BE:60:26:D7:47:AF:D9:59:E5:88:B7:5F:E7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 14EC8FFBBB64BCAABB330415806A3D05BCF72C88
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9940dc82-262d-4754-b3c6-d4ddcd21a9a1.roa
Signing time: Tue 14 Oct 2025 00:52:44 +0000
ROA not before: Tue 14 Oct 2025 00:52:44 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:ec:8f:fb:bb:64:bc:aa:bb:33:04:15:80:6a:3d:05:bc:f7:2c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 00:52:44 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=a4b902bc0f46384b81ede49a2be9a3ad0a9432d3f7f1e4eff52ab917bfdd4ddb, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ae:58:78:53:64:4e:f5:95:6a:97:00:3c:02:
33:4b:8a:b5:c0:13:13:82:4c:5d:a2:b5:bc:89:fa:
d8:a4:c9:5d:c3:2a:06:3b:a5:56:5b:71:cf:ef:3d:
4c:cd:f0:3a:bd:3e:16:63:0b:de:03:38:28:9e:14:
ba:6d:1c:b7:32:a8:34:7c:7c:a4:98:65:33:5e:da:
b1:a3:81:a2:c1:ea:36:2d:89:fa:2f:21:7c:64:31:
6e:79:84:a0:85:8c:29:0e:7b:7f:81:78:8a:38:4e:
e3:e6:2e:3d:68:bd:20:c7:18:8c:3b:8d:8e:5c:c6:
c5:61:f4:ed:ef:df:08:9c:fe:ab:b1:d1:76:46:86:
e6:3a:a8:00:77:b7:99:c2:f9:36:d3:14:c1:3e:28:
d3:f3:ce:ff:c5:71:3e:72:ca:e5:51:72:85:17:88:
83:d4:6f:8d:30:06:3c:4b:e3:61:19:6f:cf:20:f1:
42:05:be:45:0f:cb:b3:95:41:c5:8c:3c:0b:d8:8b:
a1:01:f6:c3:ba:2a:bb:59:1e:76:ff:29:62:51:ad:
a0:11:00:2f:c3:23:af:a0:49:d2:09:39:d4:7d:32:
c9:21:c5:00:38:2e:af:54:f1:8a:74:1c:ca:10:23:
be:00:68:a9:0c:cb:e7:f8:5c:f5:fe:1d:6b:8c:04:
8e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1E:74:6C:12:EC:2C:BE:60:26:D7:47:AF:D9:59:E5:88:B7:5F:E7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9940dc82-262d-4754-b3c6-d4ddcd21a9a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:9f:f9:95:dc:4b:9d:0a:f2:b2:6f:f2:e1:f7:8e:24:fa:7c:
9e:c9:dd:eb:ff:a7:bb:ee:fe:fe:43:42:58:f6:a2:8a:b8:3f:
59:a2:07:c6:24:e4:ae:8f:09:91:a1:ba:c7:52:6d:cc:50:a2:
60:e0:f2:a7:0d:5a:eb:5d:f9:cd:bc:9b:04:03:ce:f7:82:69:
11:19:6c:4a:ae:d6:da:0d:a9:fb:80:69:44:e1:85:8c:6b:19:
3e:ce:79:f7:e1:ff:43:9a:8d:37:12:2d:8b:ac:16:0f:73:29:
8a:5a:7f:1a:ad:92:a8:6b:d2:7c:e1:c6:23:84:4d:cc:8b:dd:
92:35:6d:73:52:aa:27:99:ae:25:57:d6:86:79:be:2c:41:93:
9c:d2:2f:db:d0:85:1a:59:f7:aa:ee:37:ff:32:cd:29:63:44:
d2:44:ea:89:d8:8d:db:62:f7:91:14:7f:4f:6d:36:ee:2f:1b:
73:52:89:c8:3b:79:01:2f:9b:4f:25:58:2a:5e:32:23:c5:b0:
87:13:95:0c:84:81:07:fb:a4:23:fd:e9:dd:06:10:ac:ae:75:
70:c8:39:1d:e5:25:cc:35:e3:07:68:eb:1e:0b:b5:77:64:47:
44:d9:83:af:e9:7b:6d:61:81:d0:b4:3f:88:9a:d1:09:55:b6:
85:a2:eb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:21 2025 by rpki-client