Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1797307-04bb-4fa6-ac32-1a5ec61c7605.roa
File: c1797307-04bb-4fa6-ac32-1a5ec61c7605.roa (raw, json)
Hash identifier: cpJmyBRjRiBcl+Llxj7gUYsD4T6e6yq0sj8LlzYMLJE=
Subject key identifier: 4E:9E:44:7D:F8:30:10:61:31:B2:B2:92:20:20:99:D6:EF:11:05:36
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 34938189CAA78D120750CB9769A25C37ADE238F6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1797307-04bb-4fa6-ac32-1a5ec61c7605.roa
Signing time: Tue 14 Oct 2025 00:21:22 +0000
ROA not before: Tue 14 Oct 2025 00:21:22 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:93:81:89:ca:a7:8d:12:07:50:cb:97:69:a2:5c:37:ad:e2:38:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 00:21:22 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=dc1cc520bea37eae7af81cc8b6ce0596fefc41c65e6f8b78cd9c8f498fb3b343, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:3a:ba:0b:3e:06:e8:db:ac:f1:05:e6:df:
90:b1:d5:e4:ad:1d:9a:57:b5:7f:66:a1:06:a4:49:
22:24:5e:f5:ef:0a:3b:42:e9:d9:73:6b:ae:51:a6:
2c:62:56:de:fe:6e:9d:65:0c:6e:f5:41:bb:20:06:
f0:66:a9:8e:8c:6f:b2:bd:33:a5:ff:6f:a1:85:05:
f6:ee:a5:9f:92:ac:23:65:9d:d8:69:d9:a1:c5:34:
c3:17:66:a1:33:51:30:91:fc:08:a1:40:fe:e9:85:
f5:cc:cb:39:1a:ed:a3:a0:84:78:06:28:cb:01:aa:
90:0f:98:2c:16:e9:c1:18:06:3f:6c:4b:89:cf:c2:
28:c9:47:be:21:51:19:7d:87:fe:56:c9:d3:17:46:
19:b8:a4:21:6b:a3:02:68:1e:16:ae:16:88:0d:ab:
49:5c:dc:d8:9c:12:89:9a:5f:9c:7f:9c:22:e0:4e:
04:8a:67:17:59:c7:ee:2e:68:f0:b1:d5:a1:3a:b4:
22:93:b8:21:89:c9:99:3d:27:08:10:02:1f:97:77:
90:e4:26:1a:d1:3f:7f:78:ae:4a:e8:8f:4c:9a:56:
e7:56:21:c7:54:39:73:fa:5f:c2:f1:8e:cc:c7:84:
bc:51:af:1f:ee:d5:a0:75:d8:89:7a:b2:9d:08:1e:
3d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9E:44:7D:F8:30:10:61:31:B2:B2:92:20:20:99:D6:EF:11:05:36
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1797307-04bb-4fa6-ac32-1a5ec61c7605.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.52.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:aa:0c:cd:71:b6:47:16:15:3d:87:49:b8:f7:ab:13:83:76:
7b:fd:43:1c:f2:6a:81:6c:fc:cb:b0:66:26:c7:54:9e:32:84:
98:3b:b2:f5:e6:10:e0:fa:c9:18:1a:de:cb:ff:0a:48:aa:8b:
81:18:9f:a8:d8:1e:5b:ab:62:c5:4b:3a:27:10:ba:9a:91:05:
89:1c:36:fb:4d:6d:f4:b0:72:7b:12:9c:d1:cf:1c:03:1c:5b:
e5:e0:6a:51:b3:e6:34:0e:a5:22:16:49:fe:2f:24:6f:56:07:
20:97:ad:47:89:8b:69:8e:b2:6e:a4:86:fd:da:b0:3c:60:ef:
94:01:88:fb:10:1b:06:00:be:76:3b:cd:40:8a:75:aa:97:57:
16:14:03:98:24:02:d3:78:5f:41:af:9d:bc:5a:eb:13:77:05:
ec:b6:bd:84:1a:e5:85:60:f4:22:e6:8e:9f:97:5a:d6:94:d3:
b4:09:a1:6a:94:13:15:9d:34:48:6d:46:e8:96:7f:57:4c:65:
e6:8d:64:2b:d7:8d:e7:16:16:0e:4f:f5:f0:df:a6:fc:d9:f1:
f5:2b:c5:29:9e:c4:e0:5c:56:57:43:a3:e1:7c:b8:35:f5:b2:
12:56:da:ab:37:99:8c:ea:92:bd:38:bf:8e:18:9e:3c:f6:8c:
4c:ba:96:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:10:57 2025 by rpki-client