Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8b001d2-db8b-444e-ba53-3f450cffb797.roa
File: a8b001d2-db8b-444e-ba53-3f450cffb797.roa (raw, json)
Hash identifier: mDGZ5VAQhpo1bW5wAxRnIiKl37kYYMjbWcsVcaJWTjI=
Subject key identifier: 4B:2B:4D:F6:99:98:AB:D3:AD:E2:7B:B5:1E:C7:2A:7E:BB:D8:2A:1B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 63D7E3A9022116F79398B808E396F7580807C9EA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8b001d2-db8b-444e-ba53-3f450cffb797.roa
Signing time: Tue 14 Oct 2025 15:02:51 +0000
ROA not before: Tue 14 Oct 2025 15:02:51 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:d7:e3:a9:02:21:16:f7:93:98:b8:08:e3:96:f7:58:08:07:c9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 15:02:51 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=5b058b91747ac5d4ae5b1cd538c1bd93a88334c1d4462fccecfacf871f598030, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:28:21:cf:ca:92:2d:8a:ef:fe:87:bf:ce:a7:
ba:29:44:08:7a:50:f9:c6:e0:17:c0:45:1d:c1:c6:
40:70:76:9a:f1:17:b0:95:25:42:e4:5d:b4:fd:93:
b5:fd:31:e8:bc:47:18:06:22:60:21:c9:d8:8d:f2:
0c:5c:be:79:fd:3a:7a:c7:7a:db:c9:47:56:33:da:
d0:7c:59:3f:3b:55:d7:c4:8b:be:c9:06:08:2b:bb:
b5:2c:0e:8b:15:60:c4:3a:a8:d1:d2:6a:78:5d:7d:
d8:f9:2b:ca:7d:79:22:f8:72:7b:ad:09:88:b7:b7:
37:07:52:66:1c:56:f6:fa:66:c2:51:a9:a8:1b:f2:
ba:a6:49:59:75:2a:c2:91:89:4f:e5:d9:61:5f:35:
fa:cf:40:5c:c7:59:8b:ce:14:c1:99:5c:f1:ad:9d:
dc:af:19:d1:45:a7:87:6e:53:0c:b0:19:51:58:db:
2a:c2:38:c1:c3:94:4d:28:c7:49:c6:db:65:ae:de:
c6:88:58:38:56:95:50:75:64:9c:c3:82:45:d9:d9:
c2:1e:a9:a9:fd:54:3c:b9:7f:ea:0e:03:23:fc:30:
9d:01:a8:8f:2b:8a:c6:70:df:ff:ae:ad:8b:96:9c:
b8:3f:9d:56:09:c4:2d:6f:f6:3a:1f:4b:2f:e2:26:
ca:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2B:4D:F6:99:98:AB:D3:AD:E2:7B:B5:1E:C7:2A:7E:BB:D8:2A:1B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8b001d2-db8b-444e-ba53-3f450cffb797.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.76.0/24
Signature Algorithm: sha256WithRSAEncryption
37:2a:ca:0a:d8:1a:1d:ba:4d:14:e5:67:fa:8e:35:5e:2d:6c:
ca:37:e9:ce:fd:3a:24:da:01:8f:60:da:31:04:06:6c:77:28:
4c:47:a3:fb:2a:55:6a:ac:50:95:69:7b:a9:37:10:d5:b9:4f:
58:3d:65:30:5a:03:e0:11:f0:3f:7b:1c:87:9d:fd:84:ad:ac:
32:c0:d1:96:8b:22:07:a6:d0:16:28:69:cb:03:08:cb:a2:87:
eb:82:b2:b9:12:83:2f:cd:02:21:09:17:ec:65:74:10:22:d3:
b9:8b:94:6c:22:9c:a9:ee:83:81:46:de:2d:31:23:71:df:d6:
c5:f8:38:86:ee:79:11:02:0d:db:91:20:86:d5:71:9e:a9:8b:
6c:a5:7c:1a:b8:83:d5:fd:37:49:82:f9:6d:e4:3c:89:c2:ca:
c7:40:c1:02:53:5e:d6:d4:0a:d2:03:63:38:9a:1b:59:64:4a:
63:d9:2e:f9:66:51:e7:c1:23:28:8a:03:fb:b5:a8:64:00:0a:
d6:dc:e5:97:0c:b3:fe:cd:0f:92:c5:ac:eb:c0:58:48:f6:0a:
12:57:65:54:79:e6:52:d4:74:02:7c:88:16:80:a1:74:0a:2f:
97:eb:aa:d3:69:72:e4:44:04:bd:b9:df:b3:00:dc:a8:2c:fd:
85:eb:27:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:10 2025 by rpki-client