Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e166912b-dd9f-4b3d-a824-0883fcf4dc9c.roa
File: e166912b-dd9f-4b3d-a824-0883fcf4dc9c.roa (raw, json)
Hash identifier: VlysOPGTxnkk1hz43bxaxHLVQgsGaInyvO3x5wAQDH4=
Subject key identifier: 28:8B:6A:E0:C0:EF:CB:06:E4:85:39:1F:B6:89:98:F3:75:C5:CF:9A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 53BF7612CC89B707F272FC230EA655A7CAB8D3F8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e166912b-dd9f-4b3d-a824-0883fcf4dc9c.roa
Signing time: Tue 11 Nov 2025 01:20:09 +0000
ROA not before: Tue 11 Nov 2025 01:20:09 +0000
ROA not after: Tue 16 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 136.18.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:bf:76:12:cc:89:b7:07:f2:72:fc:23:0e:a6:55:a7:ca:b8:d3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 11 01:20:09 2025 GMT
Not After : Dec 16 23:59:59 2025 GMT
Subject: serialNumber=38425a7eb4cf07de3b78dcbcfced48a048c397b57dc486f1ec6b6cc3be386899, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:62:89:a2:e7:5d:e4:37:ee:f2:fd:46:ce:
de:87:2b:8c:66:7c:5e:b4:91:19:9c:b3:90:72:11:
8b:cd:d0:09:9c:fe:75:b7:65:41:4f:db:99:fb:a9:
ea:45:42:c8:a5:50:79:01:a1:7a:03:65:ca:18:b1:
47:bd:9e:6d:8d:7c:49:8c:ef:4a:5d:5f:0d:16:98:
c8:08:df:38:bc:40:31:c4:27:02:0c:f2:09:ec:08:
02:d9:72:3b:0b:b9:30:03:a6:7b:7a:74:46:13:a6:
ba:8c:a8:ae:e9:49:21:09:6e:e0:21:d6:2d:d2:8c:
69:5e:f6:e9:34:bc:51:9e:00:76:0d:0a:4f:31:e4:
ff:60:93:9c:5e:cf:48:02:69:ae:be:e4:d7:83:64:
05:56:c7:8f:38:0a:6c:1f:3a:3e:d3:e3:32:d9:dd:
ef:d4:45:0f:99:d2:87:02:04:5d:92:21:db:ac:1d:
bb:09:9b:a3:b2:dd:57:6b:6c:f0:7b:13:f2:65:ee:
2f:a1:8b:da:d8:b0:8e:77:ed:88:78:1b:cc:0a:29:
6a:a2:c8:a4:bd:c0:3e:1f:f6:3c:43:06:5f:b4:d6:
9c:fb:b5:38:d8:a2:b2:ed:e4:02:81:8e:45:79:44:
e8:3d:b1:e9:16:96:2c:7b:6c:86:10:b0:d9:6c:5e:
c6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8B:6A:E0:C0:EF:CB:06:E4:85:39:1F:B6:89:98:F3:75:C5:CF:9A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e166912b-dd9f-4b3d-a824-0883fcf4dc9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.0.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:db:8b:d4:a8:d7:ee:d8:72:85:d3:8d:f8:0d:62:b6:bb:fb:
07:83:58:37:32:48:30:e3:22:9d:e0:cb:28:bd:39:00:46:3d:
68:5c:a6:ef:28:0f:07:27:36:8c:73:fa:4d:cd:6f:ee:cd:5d:
ed:0b:ef:0d:98:06:68:5c:47:50:43:46:85:d2:b0:bb:ee:a4:
50:66:1c:de:bc:76:44:20:74:65:90:c0:29:a8:9e:9f:a2:f5:
6a:a4:9c:59:c1:e8:4c:71:43:df:0a:c8:90:46:30:23:9e:70:
4a:df:db:68:ae:24:91:7b:0a:14:b6:e5:55:92:51:d7:c1:3d:
79:7b:3e:27:c2:af:2d:6d:93:00:26:cc:04:b3:86:f2:3d:e4:
74:9c:64:58:cb:2a:a2:70:4b:4e:49:82:27:08:1c:3e:3c:bc:
90:d3:31:d0:37:33:10:cd:05:86:cd:69:fb:e6:fe:c5:e2:54:
e3:bb:2f:5e:de:68:fd:62:97:64:f0:7e:59:2c:fd:18:d8:f5:
26:55:bf:3a:22:0d:4f:25:b9:54:ea:46:bb:81:dd:87:2f:23:
76:9c:1e:94:64:80:91:33:67:cd:ba:48:b2:65:fa:ce:73:1a:
71:8d:3d:36:5b:a5:dd:8c:36:60:20:48:15:5d:96:1d:e3:8e:
d5:80:c3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 10:40:20 2025 by rpki-client