Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5d3964e-016a-4ff4-8797-0547a260e2f3.roa
File: b5d3964e-016a-4ff4-8797-0547a260e2f3.roa (raw, json)
Hash identifier: xztuodE9EDaJwTx9N9X4L8SARSsT0AcwWiR/rQA8FyY=
Subject key identifier: 2D:42:F5:AA:8F:E6:64:DE:C1:BE:21:6B:1F:74:4A:EB:1B:B4:AD:D3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 08B4DCF74638AD490883F18A20B3604799BAEA2A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5d3964e-016a-4ff4-8797-0547a260e2f3.roa
Signing time: Tue 14 Oct 2025 15:01:12 +0000
ROA not before: Tue 14 Oct 2025 15:01:12 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:b4:dc:f7:46:38:ad:49:08:83:f1:8a:20:b3:60:47:99:ba:ea:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 15:01:12 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=755fda186ac6e170dafcd17fa7233b792d99be37c13a4b7fe77ac61d3e9eb21c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bd:f7:63:39:9d:0e:0e:a8:2c:8f:a3:6e:f8:
7e:ef:91:99:48:af:93:97:37:ff:14:a6:bf:a3:17:
dd:58:c1:63:dd:65:22:05:14:28:cd:06:b6:5b:6a:
76:f0:92:5a:2c:ee:cb:93:ef:3e:20:ee:41:32:86:
4c:5a:48:b2:d6:b0:03:41:27:1b:ba:e1:74:c7:ed:
a7:e4:9b:08:f0:7e:7e:17:9a:72:4d:2b:b4:c4:5f:
09:fc:d1:ce:ab:f0:e9:d8:60:22:81:de:2d:ad:6d:
27:19:3d:8a:a8:ba:68:af:24:a2:c4:51:21:e4:34:
05:c5:0c:c2:2f:f8:f1:3f:ea:1c:52:17:c0:90:d0:
1d:a7:85:59:8b:de:06:f8:68:a1:6c:58:30:b8:86:
cb:a0:1b:01:1d:74:27:23:39:2c:8f:dd:26:a3:d2:
60:e3:64:23:fb:bd:90:38:bb:1b:cc:93:00:f0:0a:
d5:fd:85:1d:7d:6a:58:68:a2:98:a8:2d:ef:95:a0:
1c:ab:74:ac:69:25:f3:16:e9:7e:dc:95:52:8f:c3:
ba:a6:ab:c0:24:e8:08:c6:85:f8:6e:a4:0f:e2:09:
93:7e:e5:68:83:f0:41:c7:c2:ee:87:71:55:e3:f2:
5d:1e:0e:15:bb:0f:ee:0b:04:c8:3b:30:35:a2:f9:
39:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:42:F5:AA:8F:E6:64:DE:C1:BE:21:6B:1F:74:4A:EB:1B:B4:AD:D3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5d3964e-016a-4ff4-8797-0547a260e2f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.217.0/24
Signature Algorithm: sha256WithRSAEncryption
35:86:7f:4d:e3:68:ab:06:1a:f9:38:86:9b:90:00:d6:91:69:
71:90:de:e0:51:86:dc:9c:d0:1a:3c:97:99:2e:1f:3b:5b:74:
65:a6:8a:51:36:bd:f7:09:ac:95:77:a2:9a:62:e8:22:39:3e:
d7:46:9d:26:df:fc:0b:27:3a:c3:0c:69:7a:3d:ce:13:4e:12:
cd:18:e1:94:5b:d1:0b:33:79:77:e4:b9:24:18:5c:db:86:01:
66:89:9e:b0:c0:4a:91:f0:09:8f:6b:0a:6d:25:ba:5e:a3:5b:
cf:e1:eb:f5:32:17:31:ba:22:97:98:06:43:9e:c5:98:b9:23:
15:b5:1a:c3:4d:f1:02:96:7d:b1:46:27:18:72:e7:d1:0b:8f:
62:a8:b0:74:c1:65:1c:ad:66:89:d3:f5:65:b3:20:20:90:80:
7d:66:c1:02:0d:dd:4e:d4:a2:63:7b:ec:09:af:00:b1:da:91:
60:ce:1d:21:a6:db:60:1a:08:80:d3:70:4b:2f:0c:f7:20:e7:
53:c5:12:ff:67:2a:80:04:05:4d:46:48:43:c5:bc:11:4b:95:
d9:67:09:30:f2:6a:25:1f:63:24:22:7f:2a:34:cb:6f:b7:df:
79:3c:3a:f8:75:46:e2:ef:4f:bb:d5:07:d5:13:45:94:89:40:
7b:a2:3b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:04:39 2025 by rpki-client