Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05d7f342-6157-48d6-afa9-e8e77d622676.roa
File: 05d7f342-6157-48d6-afa9-e8e77d622676.roa (raw, json)
Hash identifier: 8WSzV3CA2qcIbIi/80NlJdH+Z57x3BNmtymTbfPZ7cU=
Subject key identifier: 1F:23:CD:94:1E:5D:29:BE:71:7E:95:9C:67:D9:4E:7F:92:95:13:FF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7CFBF1B42D49A4D59D27C6C003006B7F60C717CB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05d7f342-6157-48d6-afa9-e8e77d622676.roa
Signing time: Tue 18 Nov 2025 00:10:06 +0000
ROA not before: Tue 18 Nov 2025 00:10:06 +0000
ROA not after: Mon 16 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 136.18.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:fb:f1:b4:2d:49:a4:d5:9d:27:c6:c0:03:00:6b:7f:60:c7:17:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 18 00:10:06 2025 GMT
Not After : Feb 16 23:59:59 2026 GMT
Subject: serialNumber=a89d393aa7f3db5175f42d0104a91f7b7856aaec82741077a0991ba42e3401ca, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:36:50:e0:0f:ff:18:ec:48:01:8e:48:9d:cc:
65:69:2c:3a:46:e7:32:81:67:ec:67:e2:e8:28:fa:
0a:80:43:39:f8:93:2e:9c:c3:5c:8a:17:bf:91:fa:
fb:f5:db:e9:b5:27:31:51:4a:94:41:27:63:3b:6a:
e2:8b:2f:0d:8d:60:4a:19:e5:bc:c0:63:66:ea:d2:
4f:5a:bc:ff:0c:2e:99:e7:c3:03:98:6a:55:2a:52:
97:7f:f3:b0:22:8b:ed:ba:ce:6c:6b:29:2c:88:ad:
7e:c7:7b:0f:03:fe:58:08:f6:21:46:84:a6:83:20:
e2:0e:91:50:66:7d:64:fd:4e:61:56:14:cd:81:61:
ec:35:15:71:44:3a:65:29:0b:1f:a0:18:d9:0d:49:
fd:36:9a:f9:2c:bb:a3:d6:f1:a3:dd:6a:a9:a2:78:
b5:45:73:51:e1:7d:e2:c6:92:bc:fa:62:c6:f9:f0:
55:5c:7e:a9:23:24:9a:cc:0e:53:70:ce:20:2b:11:
d2:d5:10:85:55:f6:4e:ac:89:cf:67:ea:7d:f5:a0:
cd:a5:05:79:be:08:13:22:6f:88:9b:4a:9a:58:8f:
96:29:35:da:47:da:e6:37:93:18:7f:e8:59:0b:35:
09:44:00:90:29:0f:8b:00:f1:23:40:ef:b2:da:cf:
d4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:23:CD:94:1E:5D:29:BE:71:7E:95:9C:67:D9:4E:7F:92:95:13:FF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05d7f342-6157-48d6-afa9-e8e77d622676.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.52.0/22
Signature Algorithm: sha256WithRSAEncryption
30:71:e4:03:fc:55:33:e4:1f:38:9a:e1:00:42:29:80:43:af:
93:84:f7:9a:73:f8:82:e6:fa:a2:81:81:1a:e4:7f:fd:4e:a6:
40:f3:17:77:3d:2d:ae:e8:dd:ce:ef:7c:07:49:67:d7:a7:4e:
af:86:c0:0e:9a:31:3c:59:40:22:19:ca:65:d7:39:92:ee:a0:
6c:2b:5c:52:e0:92:bd:91:1f:a2:e2:eb:4b:ae:9e:7d:43:fb:
66:ca:12:f6:17:57:16:d8:86:d7:68:ee:2a:df:70:f9:78:3d:
0c:ac:be:a3:6f:db:5b:7e:26:38:f0:18:6a:2e:c4:53:12:18:
03:94:63:06:85:2f:20:29:ef:e9:c9:fb:a6:95:c2:80:31:41:
66:77:db:36:41:e5:c9:ca:12:a9:3e:26:e4:f8:88:22:4b:0c:
1a:9b:7a:57:c6:a4:cc:0c:00:56:dc:00:30:ca:61:fe:ca:14:
f3:a7:a4:ec:d3:29:62:0d:4a:31:78:6d:de:6d:88:ae:11:71:
1d:0a:ee:81:40:b3:9c:3d:69:c7:e7:24:ac:05:90:4d:ba:e6:
cf:40:ad:dd:2b:b7:36:42:2e:f5:e9:75:25:9c:0e:3c:45:68:
11:4f:f2:fd:46:f6:56:42:5a:78:cf:df:43:57:41:1d:9b:e5:
af:9a:c5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:52:26 2025 by rpki-client