Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fce7010a-00ed-439c-9f98-5ed39e8d10f9.roa
File: fce7010a-00ed-439c-9f98-5ed39e8d10f9.roa (raw, json)
Hash identifier: ASvYfaS3PODGDgcvMqorv08Tk/Q8rv1gqLLyekaeeq4=
Subject key identifier: F5:E3:74:E8:25:A8:CD:D4:CB:C3:6F:5E:8B:28:B4:89:AA:8B:3F:E2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5A6126CCABA1C931DC112762B0946BAE20E8655F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fce7010a-00ed-439c-9f98-5ed39e8d10f9.roa
Signing time: Tue 14 Oct 2025 15:40:10 +0000
ROA not before: Tue 14 Oct 2025 15:40:10 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.192.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:61:26:cc:ab:a1:c9:31:dc:11:27:62:b0:94:6b:ae:20:e8:65:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 15:40:10 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=d21ba339afeb5234fbf560e4adff022dd8f56a862df5448a9a5c118be740f1d1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:23:f8:ea:29:79:0c:6a:40:c9:f2:4a:3e:08:
df:66:8c:93:dc:a0:68:6b:81:95:a9:22:e8:23:f3:
bc:25:39:81:80:a6:2a:0c:c7:92:42:49:44:c7:5e:
47:9e:4f:f5:2a:61:6b:96:32:a5:04:83:ba:04:e7:
cf:c7:ea:b0:96:c4:a1:4e:be:ca:82:f9:7c:dd:ee:
bb:b5:fb:3c:cc:b0:a8:b9:5b:8e:48:b1:76:71:28:
98:60:bb:8b:b0:8a:a2:40:ef:36:5c:12:b0:09:a5:
6e:c7:32:27:ff:e0:47:34:b8:42:4e:e2:e4:cd:44:
35:43:d2:11:44:41:56:a2:66:27:54:c3:fd:19:8a:
d5:b1:54:a2:1a:3d:38:a0:3a:6b:9a:48:18:44:7e:
6f:85:45:b7:96:f0:df:80:9d:64:c2:88:8c:20:4b:
0c:fc:9d:85:4e:2f:3e:f5:cf:10:b5:85:8d:65:79:
86:59:e2:79:48:5d:d6:a3:27:0b:98:fc:e2:0d:94:
c1:83:d7:20:e8:db:4d:cd:61:03:33:3e:96:64:b4:
a8:d6:96:5b:4d:1b:22:ce:f0:a4:0a:68:03:27:cd:
b0:50:34:67:17:5d:fa:aa:1d:4b:de:2c:c0:ef:2a:
d1:fd:10:41:c5:7b:ae:a2:20:c7:be:53:4e:f5:1c:
44:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E3:74:E8:25:A8:CD:D4:CB:C3:6F:5E:8B:28:B4:89:AA:8B:3F:E2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fce7010a-00ed-439c-9f98-5ed39e8d10f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.192.0/21
Signature Algorithm: sha256WithRSAEncryption
c0:d5:90:80:55:23:4e:2c:49:27:53:2a:12:0f:4b:4c:f0:45:
57:42:06:8f:2a:38:f3:28:8b:96:ff:89:38:0d:ac:38:ea:fd:
de:4a:09:fd:e0:0f:30:47:85:41:85:78:3f:2c:54:63:8a:54:
47:55:cc:f9:8e:f6:bd:91:d1:55:cd:83:f2:fc:82:40:e2:2b:
e5:01:8f:90:45:cc:51:0a:fe:2b:3f:a0:a1:7c:77:09:8a:0c:
6f:30:e9:89:db:46:fe:f3:de:5f:52:ef:49:75:f0:59:9a:f0:
fc:b2:a5:15:7f:b9:9e:7e:4c:bf:99:e6:52:26:c5:e2:15:08:
2b:ee:00:c7:54:ef:f2:a4:cf:f0:e3:22:2a:bb:35:c8:ac:36:
d1:f0:9d:1e:a5:70:9f:70:b2:f1:42:45:1f:fd:25:6f:b2:46:
09:93:03:70:a6:fc:dc:4f:0e:84:5a:88:80:47:a4:79:20:a0:
63:a4:4b:09:82:fd:c8:d4:5d:cc:3a:3c:ef:5e:e1:b3:56:9a:
37:41:3b:c2:e2:3e:68:17:a2:e9:e0:d0:15:7e:ad:ef:72:b1:
bb:8e:f6:b9:26:c6:b1:60:63:ed:b8:e5:e0:ca:b2:21:d2:a7:
46:2e:12:9b:d3:bb:92:f9:3e:99:7b:1f:dd:d2:34:ce:a3:b6:
70:b9:9b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:21 2025 by rpki-client