Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4258e311-9b75-4255-ac58-cec214c3902f.roa
File: 4258e311-9b75-4255-ac58-cec214c3902f.roa (raw, json)
Hash identifier: LBDRtXKvSPgQieosJbbGs1EuNduCyiShIwr6IaVKsg8=
Subject key identifier: 9F:CC:30:D9:2E:0E:88:71:47:99:25:6F:1B:08:59:24:ED:22:BF:9F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1F0A2F28D114305FA42760852805231A9B075509
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4258e311-9b75-4255-ac58-cec214c3902f.roa
Signing time: Tue 14 Oct 2025 15:21:17 +0000
ROA not before: Tue 14 Oct 2025 15:21:17 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:0a:2f:28:d1:14:30:5f:a4:27:60:85:28:05:23:1a:9b:07:55:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 15:21:17 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=c20a616eb903e6daf46d6ef0eead3f4d948c14ac2047617c5e2687c8eddceeee, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:21:c9:24:8f:73:2f:bc:0a:86:c2:7b:1b:56:
2f:7d:22:94:0e:ce:0f:44:f8:dd:00:ac:1d:af:80:
4e:8e:68:a5:e4:fc:10:40:0a:9f:04:13:0f:c2:96:
54:85:b5:48:50:30:49:bb:69:c2:d3:6c:09:b0:a2:
c0:8b:78:fe:2c:b3:1d:a8:00:ab:ff:2f:0d:c1:37:
f2:54:2e:78:44:a7:8f:77:be:9d:23:ec:34:be:f4:
4f:76:f7:ac:be:b9:61:4c:87:7b:2f:9b:55:a0:6b:
ca:fe:ab:94:55:8d:1f:dd:e8:32:f7:5d:1e:54:37:
81:f9:f0:4e:5d:3b:4e:8b:e1:88:85:43:02:30:55:
f2:22:ce:19:80:51:81:96:ad:d2:66:4a:96:df:b8:
5d:7a:5a:b7:26:65:da:64:32:a9:72:c1:32:8b:90:
92:08:e0:67:19:e3:80:30:0b:41:fb:6c:0e:d1:30:
48:ad:8d:83:aa:e0:16:bf:74:af:0e:af:21:71:7c:
23:c5:2a:80:97:95:10:c5:b6:ec:11:94:49:66:e0:
ed:69:ff:69:93:63:b4:00:ba:62:cf:2e:34:3e:d8:
4f:9f:7a:a5:1a:84:41:aa:10:b9:05:65:29:89:bf:
59:ca:cb:df:29:48:46:a4:78:c7:73:10:a2:6d:d4:
1d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CC:30:D9:2E:0E:88:71:47:99:25:6F:1B:08:59:24:ED:22:BF:9F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4258e311-9b75-4255-ac58-cec214c3902f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.20.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:8e:59:72:34:13:cf:12:3f:80:c7:a9:b5:65:91:4c:91:fa:
81:4c:ee:a2:a4:3e:2d:bc:85:2b:9e:6d:6e:14:cb:6e:13:17:
f8:f2:6b:ae:bd:39:01:10:b7:59:85:4f:71:db:02:a5:ab:ca:
58:2c:b8:5f:ce:8f:6b:3c:97:0b:80:6b:b7:2a:91:f0:66:2b:
61:a3:58:83:f0:cf:bc:53:97:6e:3a:22:7d:38:5f:b4:65:44:
07:3c:d6:4e:ad:62:fc:79:14:5e:cc:64:83:99:d1:27:ee:4d:
02:10:e0:f2:3c:99:b4:d1:fd:4c:3d:bc:f6:a9:00:08:b5:be:
e3:fb:ad:26:8b:f9:60:08:e9:c9:67:82:75:00:d4:f8:dd:61:
9e:9a:16:51:ed:6c:eb:6e:7d:03:62:33:26:37:dd:09:01:73:
2f:a1:9c:58:f3:0a:3e:a5:9a:a2:2c:c5:ba:da:fc:e4:ee:51:
de:4f:a9:b2:18:1e:f1:62:71:96:89:e2:00:04:b8:e1:ef:75:
5e:70:4f:a4:c3:02:11:fb:49:b5:b7:23:af:ee:e9:d0:70:0b:
86:43:9a:a4:82:af:f2:1e:c0:0c:07:4d:ad:29:26:f3:67:b4:
c0:cb:1c:d0:f4:6f:ce:64:86:1a:92:3e:38:58:7c:91:7e:f6:
77:c6:51:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:10:29 2025 by rpki-client