Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d9f4686-aab6-4c92-a0c6-a8e0598da810.roa
File: 9d9f4686-aab6-4c92-a0c6-a8e0598da810.roa (raw, json)
Hash identifier: M//gfOJHfdAV2vgpKfy1i7BHFO+nYE9Vrx6UIBhfuGQ=
Subject key identifier: AF:85:E6:79:DD:FA:EA:17:C4:8F:D3:05:5C:1B:ED:E6:01:2C:33:DE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 77EFCDB14474A1CADC4103A1F15ED73B497A970D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d9f4686-aab6-4c92-a0c6-a8e0598da810.roa
Signing time: Tue 14 Oct 2025 15:01:15 +0000
ROA not before: Tue 14 Oct 2025 15:01:15 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:ef:cd:b1:44:74:a1:ca:dc:41:03:a1:f1:5e:d7:3b:49:7a:97:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 15:01:15 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=0f27643993a1a8361b11c9d77b9aeb83249e2bcf77d0922e69ce2ca4d0d2622c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6e:78:46:bc:b3:45:44:ed:e7:37:9e:f8:97:
be:ae:eb:1f:cd:8f:25:08:50:36:9c:ef:f9:52:9b:
ac:d1:23:42:48:92:3b:8a:72:52:6f:ca:f6:0d:ce:
6b:db:aa:bd:d1:07:d1:1f:2e:92:13:75:a8:bb:ed:
7b:fb:33:9b:5c:92:7a:fb:e9:cd:4a:b0:57:92:22:
4f:68:be:00:29:d4:fc:cf:34:9b:20:45:a4:72:f9:
3b:03:a4:8b:ce:f0:ab:01:6d:c4:c2:6e:a8:fe:2d:
11:80:27:41:ad:cd:4c:e2:b2:b6:96:d3:70:dd:0b:
3f:ed:94:36:e0:8e:2f:7f:6b:c0:3a:8c:41:52:c3:
0a:ec:d6:96:e4:b3:f4:f8:b4:f7:ee:dd:62:52:cf:
94:8d:bf:42:13:f4:7a:6c:fc:2a:69:21:71:8c:b9:
f7:60:70:96:84:41:24:c1:ef:32:5b:4e:81:bc:28:
c5:03:bf:6f:ef:72:95:bd:59:98:b4:c1:48:4e:0d:
19:9e:6d:fa:13:e4:0a:82:21:d3:cd:63:4f:cb:67:
f3:36:a1:19:d4:3f:62:52:8a:a2:0e:66:dc:12:15:
bc:56:23:e4:e4:41:65:90:13:54:ad:d3:84:ed:82:
44:ac:15:4e:50:21:81:aa:06:84:d7:28:4d:db:c9:
b3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:85:E6:79:DD:FA:EA:17:C4:8F:D3:05:5C:1B:ED:E6:01:2C:33:DE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d9f4686-aab6-4c92-a0c6-a8e0598da810.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.189.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:60:61:f9:a3:82:91:ae:d1:cf:7e:a0:6d:f2:d3:cf:45:cc:
80:3b:23:44:55:4f:1b:fe:97:87:a2:af:ef:27:ef:24:4e:58:
74:c6:81:af:40:8b:0a:71:a7:16:63:33:6d:41:68:b0:4e:6d:
a5:ad:e2:0e:8e:cc:6c:91:28:5f:d2:80:32:b4:39:5d:be:67:
97:1c:07:66:4a:3f:39:e9:67:5e:88:2c:27:11:14:5b:d6:0c:
79:12:79:56:f9:97:dd:c8:50:62:fd:8c:b4:88:6f:30:6c:49:
13:bc:b1:88:d5:b5:bc:da:e1:d6:e1:0e:74:20:82:e9:ad:ca:
30:a8:fc:71:c2:5a:2a:85:89:60:18:2d:d1:f1:98:1c:c3:26:
4a:42:18:f1:52:37:4e:ed:35:e3:64:90:75:8d:0a:82:7e:86:
e6:eb:66:1f:68:f0:eb:e5:3f:b5:60:f1:75:a3:fd:f6:5a:6b:
91:e5:d5:13:61:a4:22:35:49:30:59:4b:04:92:5b:38:20:6c:
a9:bc:25:b1:33:4e:b4:61:22:1d:5c:d0:6d:db:68:8f:73:94:
da:1b:70:12:37:dc:38:eb:9b:05:16:cb:06:9d:f7:18:1f:15:
89:35:ee:22:3c:74:c3:fc:ae:01:f6:fe:07:0a:ad:f0:5e:14:
19:eb:e3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:55 2025 by rpki-client