Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0dee238-10ea-4c0c-aa38-d5eed40e3845.roa
File: e0dee238-10ea-4c0c-aa38-d5eed40e3845.roa (raw, json)
Hash identifier: ZqfoHrPd8NNV2LIohgP4T7frCHT9yojhCk28DCXV7Xs=
Subject key identifier: 88:40:5F:4C:E3:1B:24:D1:FB:7A:2F:A4:31:8D:D3:D6:2E:81:3F:D0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6BF4252B2B2A0263091498A22596271D5A690D68
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0dee238-10ea-4c0c-aa38-d5eed40e3845.roa
Signing time: Tue 14 Oct 2025 15:12:03 +0000
ROA not before: Tue 14 Oct 2025 15:12:03 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:f4:25:2b:2b:2a:02:63:09:14:98:a2:25:96:27:1d:5a:69:0d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 15:12:03 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=5ea29ebe13d41b0faeb591844bc3d5cf8f4f0d937e75ec280ac6623428fdec80, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dd:21:03:48:03:12:a5:2e:77:47:5e:72:44:
e1:69:32:c4:c4:81:60:a7:30:51:59:dd:cc:55:aa:
0c:46:43:8e:8d:2b:36:40:49:dc:37:20:71:98:c4:
d9:78:ce:41:20:6e:75:0b:30:a6:cf:c1:14:c1:f6:
c3:da:d1:75:19:6c:c4:a0:01:f4:7f:c0:9f:77:be:
0a:75:91:e1:f4:e3:3d:fe:09:22:3d:10:43:12:69:
35:6d:e2:ee:20:c1:9e:2a:fa:78:7b:6a:45:70:3a:
21:5c:1e:a3:ed:af:26:27:b4:24:c2:e8:ab:0d:48:
b5:94:c3:19:61:21:88:bf:8d:71:82:45:f4:21:e6:
c0:79:03:98:5a:37:44:be:e3:ad:65:da:71:92:1f:
35:34:e5:25:99:76:a8:cd:2a:66:04:d4:7d:eb:d8:
09:b4:82:50:49:d2:4e:c6:b0:24:ba:4f:9c:61:be:
17:64:7e:b5:0c:b0:c7:70:1b:de:36:d5:13:41:45:
9a:9d:da:71:4a:27:0e:00:41:bc:e9:2c:d9:78:8a:
7f:d3:92:4a:ee:6a:33:f8:96:79:19:fd:17:9c:fc:
86:27:c5:31:81:77:e5:12:2b:67:48:45:75:16:91:
49:fc:54:f5:ce:8a:d8:7a:ea:81:97:a1:13:d9:fa:
6a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:40:5F:4C:E3:1B:24:D1:FB:7A:2F:A4:31:8D:D3:D6:2E:81:3F:D0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0dee238-10ea-4c0c-aa38-d5eed40e3845.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.142.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:1e:02:52:45:59:a9:ef:5e:b9:4b:1c:0c:d9:be:04:45:a4:
ac:f0:d9:18:29:09:73:83:5c:7d:2b:91:97:09:17:5b:31:41:
07:d8:ae:bb:83:b6:6d:1c:2e:f9:78:ca:d9:5a:f2:c5:b6:8c:
35:1e:82:ed:42:03:d9:c7:d0:8d:c3:af:93:14:32:d8:f7:9e:
f8:70:34:06:a9:c5:46:7b:5e:87:7a:eb:42:69:5b:ce:7c:e8:
99:d0:98:e5:58:f8:9c:d8:0b:e9:42:15:fd:62:44:9c:21:d3:
ce:0b:59:ef:30:a2:c5:48:6f:a4:cc:51:17:76:20:a9:72:df:
1d:ba:23:28:bd:4f:f7:fb:5e:6f:de:06:c7:73:e5:43:37:c7:
6a:46:35:5b:79:4b:54:da:e6:c2:23:59:ec:b6:1b:fa:36:24:
cf:10:2f:27:a5:82:b9:d3:44:77:8e:6b:3f:14:e0:23:db:69:
6c:8b:44:59:8c:39:13:d5:cf:9a:90:e9:c3:37:b3:79:eb:0e:
97:e9:0e:a3:61:ad:7b:73:29:74:96:c5:a1:c5:aa:8a:68:2a:
67:ba:e3:6c:fd:31:29:e7:a4:ab:eb:9c:ad:1b:f7:b3:b3:79:
e4:92:65:54:0e:d2:23:48:32:de:60:cc:f1:c9:47:92:49:ae:
c8:ad:92:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:48:49 2025 by rpki-client