Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9fd0bf6-57b7-4bfb-89fc-f8e9b61bea76.roa
File: a9fd0bf6-57b7-4bfb-89fc-f8e9b61bea76.roa (raw, json)
Hash identifier: jsGdAvXwBT4+rPaWPIGrFcgA9biJ6hcgBdDWhnK3K1A=
Subject key identifier: F7:D0:3D:2E:90:7C:7C:64:CD:8B:17:56:78:5E:59:C7:FA:59:71:47
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 61C133FFFFB5B011777155E98A5C1AF23ED03D1B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9fd0bf6-57b7-4bfb-89fc-f8e9b61bea76.roa
Signing time: Tue 14 Oct 2025 00:39:36 +0000
ROA not before: Tue 14 Oct 2025 00:39:36 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:c1:33:ff:ff:b5:b0:11:77:71:55:e9:8a:5c:1a:f2:3e:d0:3d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 00:39:36 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=c40a0eeefdb8c8d2b3ef6e70cc7372717e716914c1b4b56509fb8ed7771a5183, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:c0:cc:04:24:c0:0d:87:ff:bf:85:70:1e:
b4:43:84:63:c3:53:90:1a:54:a6:91:a4:dc:8c:d7:
e1:df:62:24:8e:48:53:8b:33:cd:e4:ba:c5:16:5f:
dc:48:a1:e5:f6:6e:3e:ad:c5:d9:60:06:b0:ee:26:
bd:5e:4e:97:55:ba:a0:68:da:f3:c5:2f:68:df:05:
92:6c:0d:55:04:af:aa:e5:f8:18:a0:e7:74:d6:42:
c2:16:10:5f:fb:2f:a4:74:5c:ca:27:8b:04:64:94:
a7:6f:95:ed:4a:32:96:ef:07:e5:78:da:8d:4a:fe:
7f:30:87:15:b1:63:7d:11:31:01:c0:fd:72:99:d3:
36:72:c9:0b:17:59:57:b4:b1:0c:f2:5c:ad:ee:a2:
18:b1:a6:8c:76:d7:f2:fa:6b:a6:11:b3:a6:4b:08:
a5:5e:b8:73:27:0a:05:8f:6e:8d:87:98:5f:77:9e:
7c:f3:c9:c8:7a:39:d2:b6:71:c5:2d:9d:64:69:0c:
a7:de:4d:c6:0f:84:56:91:ef:62:a9:3d:27:f6:be:
2a:f4:36:2d:ce:2a:fa:3e:11:67:5b:a9:71:9a:5f:
e5:bf:58:66:74:21:e3:d0:30:58:9a:99:10:23:4d:
d3:f1:39:08:c5:29:97:33:7a:a7:b2:15:90:13:30:
4d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D0:3D:2E:90:7C:7C:64:CD:8B:17:56:78:5E:59:C7:FA:59:71:47
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9fd0bf6-57b7-4bfb-89fc-f8e9b61bea76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.157.0/24
Signature Algorithm: sha256WithRSAEncryption
97:ad:03:ab:16:98:f8:f6:2e:9e:58:c1:97:86:88:29:0b:a9:
6e:37:8f:d7:1a:44:89:d1:9e:b2:97:8d:c4:50:e1:45:f7:e8:
bf:05:59:67:67:79:0d:b7:14:c6:cf:bd:e8:8e:5f:11:e9:8b:
0f:63:88:ca:68:30:f7:58:df:10:a6:12:43:96:33:9e:15:cd:
bf:0b:da:99:95:94:fa:c0:76:0a:a3:e9:69:1a:01:16:02:6e:
47:fc:91:70:ce:7f:99:2e:53:d3:ae:25:a6:52:15:a4:23:e5:
3e:b6:c9:21:e0:ba:d6:69:1a:b0:7f:47:a3:d1:b8:cc:19:a9:
3d:36:92:fb:0a:1b:f8:39:d3:6e:91:ba:32:0c:f7:61:10:aa:
d0:0d:07:0a:9f:a5:a9:e1:b2:bc:83:27:9b:47:fc:cd:97:7b:
89:6b:7a:7e:0d:bf:e5:22:63:51:69:2c:3b:b7:76:7e:ba:de:
a6:36:ca:e7:f0:29:3c:f2:6c:0f:df:94:82:98:26:36:f8:bd:
ad:39:03:a3:7c:19:db:7c:54:2a:90:6a:69:39:82:7d:58:1f:
87:cd:83:80:e4:dc:9e:41:3b:fb:4c:ef:cb:44:b8:64:08:38:
1b:6d:81:8b:72:47:ef:97:42:21:98:25:ac:c2:16:94:0d:4b:
21:c5:28:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:49:18 2025 by rpki-client