Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ada0f91-4f35-4189-b9db-6208680650ff.roa
File: 9ada0f91-4f35-4189-b9db-6208680650ff.roa (raw, json)
Hash identifier: BXK0GFU5Oj3tVE/LFsXwFB8mfn8zbvIHJCQ0+RZoaMk=
Subject key identifier: 48:89:BE:05:2F:8C:5E:89:25:E3:EB:56:A2:D9:82:DE:8D:25:B0:C5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 06A97B49E700FAE004DCA43D951E0E161ABD1435
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ada0f91-4f35-4189-b9db-6208680650ff.roa
Signing time: Fri 03 Oct 2025 00:01:27 +0000
ROA not before: Fri 03 Oct 2025 00:01:27 +0000
ROA not after: Fri 07 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 136.18.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:a9:7b:49:e7:00:fa:e0:04:dc:a4:3d:95:1e:0e:16:1a:bd:14:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 3 00:01:27 2025 GMT
Not After : Nov 7 23:59:59 2025 GMT
Subject: serialNumber=b495375aae330d14a98d4b92b5e477418bff25266df7d7343efc7fe911499d5b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a5:e5:9f:fa:0e:08:3f:89:39:c4:f1:e3:56:
5b:b8:08:15:eb:a2:9d:e7:51:80:13:b4:fc:db:6a:
4d:35:6c:93:60:90:48:9f:52:f7:b8:f9:b1:51:bb:
48:9d:b2:1d:cd:94:d1:34:9a:ac:9d:55:5f:79:08:
a4:01:d8:28:e8:9d:ed:64:36:b6:5b:18:76:30:2d:
19:fe:38:20:52:0c:39:bb:00:75:a9:d8:c4:bf:ea:
25:07:8e:90:d8:d4:5d:c4:bf:63:6f:49:92:33:4b:
39:b2:13:d4:18:25:e8:7b:84:c0:1e:bd:69:d2:a6:
6f:66:04:e5:66:4d:9b:13:dd:90:7c:b5:4b:a8:62:
85:00:6b:9a:2b:9a:f6:5d:39:05:a4:2c:a4:77:05:
cd:dc:b3:df:df:4c:d9:b4:87:f5:eb:16:eb:fd:39:
90:3f:1b:97:56:e9:a0:62:78:7d:c4:54:b5:37:0c:
de:e0:3a:d0:01:5f:b2:a7:bc:0f:e9:17:7d:c4:f3:
be:86:dd:a6:c0:91:76:bb:dc:cb:2f:40:23:e9:c8:
f6:24:2d:69:44:fb:01:fc:29:29:ed:70:be:a2:1a:
98:68:52:72:70:7b:26:2e:86:70:56:77:15:19:9a:
6b:61:03:b2:af:a6:a0:54:63:89:02:09:0f:d7:cd:
88:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:89:BE:05:2F:8C:5E:89:25:E3:EB:56:A2:D9:82:DE:8D:25:B0:C5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ada0f91-4f35-4189-b9db-6208680650ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.2.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:54:0b:c7:49:41:c6:0a:3e:c4:0d:10:74:ab:db:dc:44:04:
2b:1e:32:51:4d:a6:6c:56:e1:06:35:46:c7:ce:91:16:24:d4:
08:4c:b0:18:c3:ca:0c:f3:96:83:32:2c:3c:cc:42:de:d0:ae:
72:9f:ff:12:48:c5:6e:4a:8b:aa:fc:ee:11:30:b9:62:dd:53:
71:e1:b6:b9:b3:83:46:2e:f0:5a:d7:b0:11:8b:5c:5a:6b:64:
d8:30:1c:d2:c0:cf:b2:58:74:df:25:7f:bc:ae:fd:d6:dd:a1:
1c:d5:64:96:c0:f9:b3:e7:46:dd:b6:89:fa:6e:93:80:ec:7c:
f3:a2:74:c5:49:6d:f3:a1:df:3d:b8:3a:b3:b5:55:0b:97:3f:
cb:f4:49:76:d9:bc:46:44:c2:17:bf:9c:b7:88:86:e7:c3:4c:
5b:f7:5b:e4:33:32:d8:c7:68:fe:8d:76:84:7f:99:26:96:02:
08:ed:53:ca:40:b2:06:90:66:df:e8:2c:ce:ca:59:63:22:ba:
6d:0e:6c:15:4a:8a:32:db:5e:6b:43:23:ed:18:5f:bd:98:42:
51:56:f4:ac:b2:8f:81:fc:39:30:c0:63:5c:e4:a4:f7:a4:2d:
ec:73:0e:e5:7e:30:2c:27:5d:38:9a:11:64:8d:18:d2:fc:41:
fe:8a:0b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:07:36 2025 by rpki-client