Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a30d7fd5-5097-4907-a814-840238a9479d.roa
File: a30d7fd5-5097-4907-a814-840238a9479d.roa (raw, json)
Hash identifier: 3fb+f9n8JakpuB68eSt1Q/oxggoGcqrZXsqYEeKNCKU=
Subject key identifier: 65:BB:3F:60:7F:29:A0:F0:F6:1E:68:6D:9B:40:A4:0A:A0:41:FA:B3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4EF0178B7D4588E81A15778164F60C143AC32FF2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a30d7fd5-5097-4907-a814-840238a9479d.roa
Signing time: Tue 14 Oct 2025 00:39:32 +0000
ROA not before: Tue 14 Oct 2025 00:39:32 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:f0:17:8b:7d:45:88:e8:1a:15:77:81:64:f6:0c:14:3a:c3:2f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 00:39:32 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=362e05bbfe5f6a7f14281e5f625fc638bdcacfb90ab2064eeb153867b6df45c0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d1:d6:36:ea:11:01:0b:c5:a3:e8:22:35:a1:
b3:77:32:46:34:59:42:9c:42:fe:38:9f:bd:fc:7c:
43:68:73:68:49:09:48:83:61:4a:65:c6:1f:2b:13:
54:90:b3:62:07:82:92:78:eb:37:a3:1e:2e:dd:01:
76:46:5a:52:8b:ae:87:36:78:42:98:45:9e:94:04:
a6:c8:d4:9f:be:50:52:d4:ca:04:9f:7b:99:3c:5b:
7d:c8:39:c0:f9:1e:d8:19:52:01:72:a3:83:0f:97:
35:c7:29:90:50:76:b2:42:b1:a9:dd:cf:a5:bd:47:
61:0e:68:9b:f5:74:c0:de:92:95:2c:dc:51:f3:3b:
19:4c:17:60:9c:5a:ea:e5:97:6f:ba:fe:7a:81:cf:
37:fc:7a:04:cc:a5:a8:2f:08:38:09:65:f9:87:da:
3a:9f:f3:82:13:dd:37:8f:2a:50:d0:cd:19:7b:b2:
ba:fa:1f:ef:52:1e:83:ef:2b:5e:6e:0b:71:39:72:
9c:d3:45:12:a6:ee:fc:b9:2b:7e:e2:ec:be:59:61:
bd:f6:8d:49:70:b8:99:a0:15:2f:ff:8a:be:e8:9d:
ac:da:1f:f9:1e:42:0e:bb:77:39:1e:18:5c:d0:93:
b3:e9:30:27:c8:f4:c9:5f:9c:65:b6:a2:5c:2f:98:
5b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BB:3F:60:7F:29:A0:F0:F6:1E:68:6D:9B:40:A4:0A:A0:41:FA:B3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a30d7fd5-5097-4907-a814-840238a9479d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.182.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:18:a9:d6:8d:8d:55:3d:e1:26:2d:14:64:25:1b:16:aa:85:
46:aa:cb:79:34:11:ff:08:03:10:c8:76:fa:6e:ee:c7:f6:23:
d1:ad:54:00:42:72:53:80:aa:d5:40:55:42:6d:0d:99:fb:48:
cc:7f:7f:7d:b6:39:e2:16:3e:24:6b:f3:f4:76:a6:b8:f7:bf:
10:44:40:34:84:cc:e7:f9:16:65:e0:01:a5:37:a7:a3:3b:f2:
2e:8d:7d:fb:3c:6e:8a:33:da:e8:b1:18:06:a4:ed:ed:ed:4f:
7b:35:2c:44:b1:8d:db:4c:80:b9:8f:89:4c:84:49:d8:a7:aa:
32:ee:25:17:a2:f1:90:e6:ba:ac:78:83:b4:f1:8a:6d:08:b3:
b3:f9:1f:4d:85:a7:4e:8d:71:a1:a6:9e:df:e3:44:85:8d:ed:
6b:c8:a1:38:a3:59:a8:13:a3:05:46:d7:e0:50:9a:e8:57:2d:
09:48:5f:c8:db:0f:2e:aa:60:30:01:2c:a8:df:04:da:a4:a4:
6b:4b:21:fe:a3:68:2e:57:39:b8:33:ff:16:26:2d:7e:85:a5:
51:79:61:23:80:5f:a8:23:ad:04:26:33:82:6f:81:1c:4e:ba:
b9:57:d2:b7:0b:c8:9e:24:b2:48:cd:af:41:54:62:9a:3d:0c:
9f:f1:09:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:29 2025 by rpki-client