Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f0bc47b-12d7-4615-81db-4751f9b68409.roa
File: 6f0bc47b-12d7-4615-81db-4751f9b68409.roa (raw, json)
Hash identifier: GbKx0iTSfnbZEwCmYIK+tOJl9mhJGvin0Re85jEO04A=
Subject key identifier: 2D:8B:0D:47:B3:70:8E:08:06:22:7D:C6:5C:DF:34:93:32:7F:56:43
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 31E102EDCF77EC831B2BC092E4DA0C9DC647F655
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f0bc47b-12d7-4615-81db-4751f9b68409.roa
Signing time: Thu 13 Nov 2025 00:10:43 +0000
ROA not before: Thu 13 Nov 2025 00:10:43 +0000
ROA not after: Thu 18 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 136.18.50.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:e1:02:ed:cf:77:ec:83:1b:2b:c0:92:e4:da:0c:9d:c6:47:f6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 13 00:10:43 2025 GMT
Not After : Dec 18 23:59:59 2025 GMT
Subject: serialNumber=88a5d0f738b35355c1c864100a3ab7618efec879a6a9958020b1c0757990f630, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:49:72:21:e4:97:d2:45:dd:d5:7d:eb:e3:f1:
67:74:d8:65:2c:47:60:f6:99:f6:78:a5:17:ef:45:
73:35:ed:1f:9f:f9:3b:e4:16:42:f2:2d:91:19:22:
68:fa:8a:12:d0:af:1a:96:67:c7:b6:f0:d3:59:1f:
19:70:8b:e9:54:7b:39:2e:f9:d1:05:fe:b3:ef:81:
96:8b:d9:fa:c5:d5:58:fe:7e:bf:cf:43:23:1b:e5:
7d:e0:75:87:09:c9:be:df:3f:3f:48:31:a4:cb:27:
74:1f:6b:5d:66:a3:21:95:ff:04:13:00:a8:df:a0:
0f:55:c3:af:ea:d8:4f:0b:03:ab:f7:67:e9:0b:4b:
49:f4:7c:6d:1c:63:d5:00:92:4c:8d:f6:e4:fa:eb:
2f:1c:4d:9e:10:4b:d8:13:13:d5:0e:44:81:4d:3d:
6b:c7:12:ee:05:7c:df:12:19:92:15:12:ec:da:ba:
a4:c5:c9:e4:29:43:b4:22:31:6d:c9:cb:e8:41:f2:
94:e7:dc:ec:74:9e:f0:cd:06:26:b4:ae:65:22:94:
9d:51:2d:29:1f:68:fd:ea:1c:55:5c:4a:96:a3:70:
34:6d:75:c3:e0:b6:a2:4e:40:9f:b3:09:94:dd:99:
27:ce:11:9a:9e:9b:8e:7d:a6:be:05:e2:7f:fc:65:
b7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8B:0D:47:B3:70:8E:08:06:22:7D:C6:5C:DF:34:93:32:7F:56:43
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f0bc47b-12d7-4615-81db-4751f9b68409.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.50.0/23
Signature Algorithm: sha256WithRSAEncryption
37:82:a0:51:30:9d:4a:90:22:67:e6:73:14:0d:69:0c:28:45:
21:af:af:10:05:01:53:56:00:b3:bb:7e:f0:33:8c:55:4f:39:
b3:f4:f6:dc:ab:84:9e:25:f4:bc:02:e1:85:da:ab:ab:5b:a9:
85:c4:69:eb:0e:9d:80:f5:6c:97:dd:0a:0f:d1:f2:98:4b:6f:
53:d2:d9:e3:17:67:f2:d7:03:21:c4:09:ea:1b:bc:9f:79:75:
89:24:20:dd:5a:39:15:f6:4d:e4:c0:e1:25:66:22:33:cf:37:
01:9d:15:71:02:ee:1e:97:fe:1a:a7:7c:be:3a:d4:99:94:aa:
d4:ff:c2:15:95:b9:fc:52:f3:a4:a3:17:24:d6:04:90:f6:c4:
e5:fb:6c:1f:99:b3:d6:6e:02:1d:5b:e9:42:aa:3b:80:6b:9b:
70:02:df:bf:21:6f:47:f2:24:d8:93:39:64:8b:4c:6e:1a:ae:
12:d1:82:06:95:bd:3e:bc:77:69:89:99:ad:fa:2d:ac:08:6d:
91:4d:1b:c3:af:9e:2a:30:af:19:12:97:3a:0d:79:25:31:ce:
25:77:80:1e:8c:67:17:aa:3d:9b:27:23:b6:56:a1:90:11:50:
39:7f:5d:ad:2c:00:60:2d:a1:ef:bf:af:f1:68:73:d4:a7:b1:
59:71:82:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:49:48 2025 by rpki-client