Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e53a4705-0491-4612-b621-bfe5105c80e0.roa
File: e53a4705-0491-4612-b621-bfe5105c80e0.roa (raw, json)
Hash identifier: VKNknUUGscG0hiboX6sR/rcJDHloNSzq3MZkmkg2vJM=
Subject key identifier: 66:23:82:65:77:AD:33:13:68:7D:87:3F:A6:B1:6D:16:4B:3A:CA:5D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6B9AAED3D3388AD9C929BFA3E024E70FE17A5E33
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e53a4705-0491-4612-b621-bfe5105c80e0.roa
Signing time: Tue 14 Oct 2025 00:41:53 +0000
ROA not before: Tue 14 Oct 2025 00:41:53 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:9a:ae:d3:d3:38:8a:d9:c9:29:bf:a3:e0:24:e7:0f:e1:7a:5e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 00:41:53 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=cf0777bea0a5b62405d9fa3fefc745fda91b6f26571d2ff2839892ab682d71e8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:4d:24:19:e6:86:34:75:f4:c2:ec:3e:91:
66:a1:c2:b3:0e:46:9b:3e:90:96:a6:d9:fd:be:01:
b6:af:99:80:1e:72:5f:14:31:4f:d6:ab:d7:38:f8:
22:a7:99:93:fe:fb:ad:32:dc:94:d4:4a:8a:c8:5d:
05:e9:d3:66:ba:2a:78:48:ee:3b:fc:d1:8e:91:13:
6f:6a:42:25:7a:5a:81:d8:a6:15:14:46:b7:ae:0a:
34:76:94:97:e2:ba:c7:23:24:cb:5d:db:93:d1:84:
26:77:27:19:99:de:e1:fd:b0:00:ec:d7:29:b2:14:
4d:87:d4:f5:e8:0b:3a:a9:1f:8b:15:dc:86:ce:36:
6b:82:0c:90:9f:6e:d1:35:f8:c7:a5:01:89:33:a0:
f5:5b:cd:80:fa:29:c8:66:5d:29:15:ab:32:25:d3:
2f:6f:08:43:e8:4f:60:88:5e:8e:f2:42:5f:48:a6:
5a:2c:94:65:fb:d1:fe:23:c1:bd:79:b3:ce:29:2b:
8d:f7:6b:ad:cb:75:d1:4b:9b:6b:37:ee:b4:9d:e0:
e5:0c:eb:e5:9f:ed:b5:83:af:10:be:a9:78:08:42:
6b:c8:fe:4a:81:5c:ba:f7:51:0d:92:ab:c0:36:a2:
1e:9a:a7:d1:7f:32:61:1b:63:2e:10:69:d3:0e:a6:
a0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:23:82:65:77:AD:33:13:68:7D:87:3F:A6:B1:6D:16:4B:3A:CA:5D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e53a4705-0491-4612-b621-bfe5105c80e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.175.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:35:9d:40:f8:12:b1:85:b3:c4:77:5d:d6:99:a3:69:be:41:
2e:5c:ca:7e:a1:ea:e0:96:02:94:08:c4:0f:79:d2:56:9c:5d:
11:10:4d:af:8b:7c:4c:30:62:8c:70:41:2e:f3:d6:06:e8:a3:
31:ba:c9:14:4a:8e:09:69:89:e2:ef:52:22:b4:4d:39:30:dc:
d1:67:ae:22:bb:c1:5f:80:d8:9b:10:7e:4c:02:96:a9:61:60:
ca:c5:6e:38:f6:ad:f0:37:17:f6:4c:54:7c:e0:6f:90:3a:b2:
b5:91:3a:ce:fa:90:45:cb:20:e9:39:24:e5:8e:e1:13:6a:00:
cf:c0:75:61:13:a3:7c:3d:8d:4d:44:52:fc:ed:ed:a9:16:6b:
1d:f6:0c:d1:32:27:93:5c:dc:90:76:34:44:0b:5e:4c:6a:2b:
3f:e3:23:f0:ef:b0:56:6e:29:d8:9d:b8:62:30:b1:7e:e7:bc:
2d:57:62:73:31:3b:99:9f:45:ca:39:d4:7d:b9:cd:d6:39:db:
11:c8:14:ef:9d:dc:ff:b0:55:8c:70:a2:e5:d7:3c:76:c5:2b:
05:3b:4a:06:e8:d9:ae:02:b5:32:53:cf:05:81:fc:92:fe:54:
89:5f:30:32:fb:54:37:9d:b5:e5:27:be:1c:27:a8:7e:0f:9e:
1b:44:ff:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:04:44 2025 by rpki-client