Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b6a0087-8215-41fd-9d51-e12ca97333fd.roa
File: 8b6a0087-8215-41fd-9d51-e12ca97333fd.roa (raw, json)
Hash identifier: jF8miA4woyvo4MQVOQPPwnso1usvEJ0Lf7xwIHKaUQ8=
Subject key identifier: 27:57:CF:E4:FC:9F:E7:39:43:63:EC:9A:01:3E:7D:D5:61:9A:AC:A3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0B46D344B4C54C5CD7C855B43D4B450FA9DFE9AC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b6a0087-8215-41fd-9d51-e12ca97333fd.roa
Signing time: Tue 07 Oct 2025 00:12:38 +0000
ROA not before: Tue 07 Oct 2025 00:12:38 +0000
ROA not after: Tue 11 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 136.18.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:46:d3:44:b4:c5:4c:5c:d7:c8:55:b4:3d:4b:45:0f:a9:df:e9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 7 00:12:38 2025 GMT
Not After : Nov 11 23:59:59 2025 GMT
Subject: serialNumber=adf2afe278eaccd555e1715990cab94c511ea6e58422a2cf4e8fa173272cc0a8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0e:b7:fa:4b:8f:59:9f:94:73:b6:68:0c:3e:
e1:b8:74:29:16:f8:de:64:6b:52:e2:cb:d2:48:95:
dc:6c:f2:19:39:91:31:e5:fe:4f:8d:f7:a0:af:51:
19:f3:2c:7a:cd:4d:42:e5:ce:83:d6:78:e4:50:39:
68:dd:1c:42:3f:b6:5a:9c:9d:d2:80:4d:5e:00:eb:
38:e6:2b:02:2a:34:06:15:ef:9e:b3:b4:cd:53:26:
04:a1:86:c2:aa:91:f1:28:52:64:53:58:bb:bf:8a:
ef:0a:8a:5c:e4:37:04:4c:a1:98:91:a9:92:8d:1f:
00:b2:2b:26:64:bf:7d:87:ae:a3:5c:2b:0b:c4:a5:
85:5f:a8:70:6d:8e:dc:36:9c:87:09:c0:c5:6b:1d:
36:29:18:db:4d:9a:39:5f:03:30:04:45:20:43:04:
8d:18:d6:35:0e:e7:15:8e:9b:43:37:53:ab:23:29:
be:8a:8a:46:a3:fb:fe:93:b2:48:6b:b8:2d:49:b7:
41:ce:6c:75:d1:7d:8e:8d:c6:e1:f8:1c:0a:03:95:
58:c6:07:29:b4:06:91:4a:82:3c:77:5a:0c:12:54:
02:3f:b5:50:c0:bf:8e:51:6c:77:ad:35:7d:2e:db:
cb:44:9a:0a:e3:89:74:5e:f0:7e:0a:1f:44:d3:3c:
07:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:57:CF:E4:FC:9F:E7:39:43:63:EC:9A:01:3E:7D:D5:61:9A:AC:A3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b6a0087-8215-41fd-9d51-e12ca97333fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.131.0/24
Signature Algorithm: sha256WithRSAEncryption
51:eb:50:69:1c:cd:3f:58:00:ae:53:fb:b6:fa:ce:84:d8:84:
5a:18:21:01:0e:34:34:99:6c:a2:c9:6c:e9:2c:41:71:a6:c0:
f9:eb:35:13:2b:4f:54:26:a9:d8:0d:3b:c8:7e:ea:2a:f3:a0:
37:21:6e:1a:09:96:ef:c9:dc:dd:9f:0e:d7:cc:8e:09:d2:fc:
c4:97:0e:49:e1:67:82:0c:c9:c0:e6:bd:82:41:3b:d5:14:3e:
45:e9:c3:2e:56:53:21:0c:bc:88:af:55:28:cd:04:de:ff:68:
bf:aa:a5:a5:61:55:05:e3:14:a4:b8:a9:0f:8e:b2:a0:9a:32:
c1:66:8e:29:b2:be:ae:bf:00:b6:e3:99:b6:06:72:92:5d:78:
d4:5c:84:dd:ce:20:f9:34:9d:34:62:ef:58:58:51:43:bd:27:
24:25:81:b6:02:6e:eb:c7:0c:ca:dc:aa:c2:96:66:f8:46:a7:
ee:c7:31:12:b2:8f:0a:2c:7b:da:cb:9a:75:a0:6d:fc:8a:dd:
34:80:b2:c1:62:c1:e7:e5:11:51:8c:1c:b7:c9:fb:e4:40:6d:
91:33:f9:3b:83:39:5f:16:57:f4:54:ea:0e:cc:20:63:10:38:
6d:81:5f:3a:b0:b8:7d:11:c8:9e:9c:f5:18:3b:59:35:0d:94:
75:1b:79:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:19:54 2025 by rpki-client