Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88f8555d-e852-43d0-8ac6-4b7164b510c9.roa
File: 88f8555d-e852-43d0-8ac6-4b7164b510c9.roa (raw, json)
Hash identifier: PGLwRx3JsvpCzSVNTLahy6/1p5f1ij6rDUbdezgzO4o=
Subject key identifier: 7F:FC:62:79:36:93:1F:8D:F5:29:7F:75:71:09:34:2B:6D:1C:85:3D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 07363D41EEDFFB214EF6904621B70478B8EBA607
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88f8555d-e852-43d0-8ac6-4b7164b510c9.roa
Signing time: Tue 14 Oct 2025 00:42:47 +0000
ROA not before: Tue 14 Oct 2025 00:42:47 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:36:3d:41:ee:df:fb:21:4e:f6:90:46:21:b7:04:78:b8:eb:a6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 00:42:47 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=9fbbd9d96cbeaae4a8c92c8a50a39cd23e5cfc2c9dddcd59cea047dbfc3aa95b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b3:bf:a9:ba:7d:a8:43:1c:eb:ba:c2:37:e8:
3f:bd:30:61:22:cc:ab:f2:58:07:8a:ec:ed:15:28:
6a:1a:2b:be:b5:52:3f:8d:7d:0e:12:8f:01:e2:ea:
d1:51:fe:7d:80:ba:84:ea:24:2d:00:e0:c3:20:a1:
fc:00:17:72:c0:c2:c3:7a:63:59:77:23:b7:49:34:
6e:84:ff:1b:40:ef:99:7f:07:67:2b:32:6a:af:c4:
f6:aa:d4:01:7e:ae:cf:f9:eb:38:26:77:67:ea:71:
60:94:18:2a:41:7a:ac:dc:f2:21:1f:80:65:34:2e:
72:7c:de:e3:f5:eb:b4:0d:4b:71:e0:2d:25:af:3e:
70:2b:ba:36:1e:66:88:85:23:e6:34:73:a4:2a:9e:
26:b8:7c:2e:21:a7:b7:12:67:af:5f:2f:4d:59:6b:
5a:4b:d2:fe:1c:a3:45:c3:30:4a:a1:42:86:dc:77:
32:24:cc:7d:ee:d6:67:6c:39:a0:17:4e:4a:26:4a:
7b:1e:4b:4a:b7:fb:8e:1e:dd:cb:96:44:1e:cd:0c:
28:f5:55:37:30:fb:6d:64:9d:96:9b:ad:77:a7:21:
3a:16:73:40:5e:c4:3b:bc:94:08:e2:bd:0e:d6:e3:
df:e5:82:9a:05:42:c0:28:19:e4:53:2b:e1:42:dd:
cf:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FC:62:79:36:93:1F:8D:F5:29:7F:75:71:09:34:2B:6D:1C:85:3D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88f8555d-e852-43d0-8ac6-4b7164b510c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.66.0/24
Signature Algorithm: sha256WithRSAEncryption
09:06:a6:7a:fb:f7:7b:e4:fd:64:52:cf:c5:20:f4:fa:86:78:
90:4b:78:9b:0d:09:22:d1:fd:50:c8:21:a2:c3:32:ed:3b:13:
9e:f5:12:28:8b:1e:cc:be:21:b9:b7:f8:a7:ed:82:83:25:8b:
a3:bf:9a:4c:11:6f:23:55:8e:05:e8:6b:49:82:58:fa:55:1b:
e5:12:dc:89:97:1f:dd:bb:ab:16:3b:3f:f9:41:37:6b:21:da:
af:70:e1:f3:88:d8:f9:75:e4:a3:fd:9b:e0:a1:55:f9:e7:f7:
be:b4:eb:c5:14:9c:37:7d:f7:d9:e9:8c:89:a4:80:19:c6:29:
73:d3:66:91:d6:08:40:0a:a0:3a:ad:4a:4a:cb:d7:fb:8d:6a:
4e:e4:72:65:de:7b:c3:a1:0a:40:ed:71:7b:f1:7c:e4:27:35:
8b:b3:d9:3c:a0:82:20:c8:fa:21:3c:87:55:7a:75:b8:c2:92:
d0:51:01:96:d9:02:fa:20:c7:cd:94:4c:69:5d:90:e3:d6:4b:
4e:b6:fc:40:3f:31:63:fc:f6:84:b1:27:3c:f7:f3:80:f9:86:
0b:15:60:25:83:34:d9:3d:6b:c3:f5:96:0b:12:47:50:1c:5b:
43:c5:02:2f:57:2d:e2:06:03:e1:52:50:f7:da:df:54:79:36:
52:d9:af:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:49:11 2025 by rpki-client