Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e636b9a6-8c3a-4152-a2ee-bedae8e5b813.roa
File: e636b9a6-8c3a-4152-a2ee-bedae8e5b813.roa (raw, json)
Hash identifier: POVHJnGk1T6YtHLElOFI9AKocgPyE7fHaQZ4woCiw5M=
Subject key identifier: F9:82:B0:45:97:55:2B:35:AE:ED:13:14:94:00:FA:FB:13:22:3B:D0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 38B1023EF2EA399F1CA2E2C1EE91EED5D5FF75DD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e636b9a6-8c3a-4152-a2ee-bedae8e5b813.roa
Signing time: Tue 11 Nov 2025 01:20:09 +0000
ROA not before: Tue 11 Nov 2025 01:20:09 +0000
ROA not after: Tue 16 Dec 2025 23:59:59 +0000
asID: 8987
IP address blocks: 136.18.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:b1:02:3e:f2:ea:39:9f:1c:a2:e2:c1:ee:91:ee:d5:d5:ff:75:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 11 01:20:09 2025 GMT
Not After : Dec 16 23:59:59 2025 GMT
Subject: serialNumber=993e4e847a4b34afebad19206ac27fb8954fd450c9600b167d1f14f567f3ae60, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:35:8f:7b:70:02:e4:e6:56:97:e1:92:fc:cf:
7c:fa:9c:ce:d3:4a:d2:5a:d4:d4:aa:cb:07:62:f8:
7c:fa:d7:b5:d0:e5:3f:27:48:d1:7a:49:42:59:2c:
ca:17:6c:ec:ac:4c:67:7d:a0:15:10:f1:7a:f8:ab:
db:28:e9:e0:84:58:7a:4a:94:27:4c:4b:6f:cc:7e:
f2:34:b6:41:2c:3f:83:99:93:e0:e5:37:bc:2b:81:
0b:32:51:92:8c:be:a9:9a:32:f2:bc:20:79:5f:e7:
b1:14:86:10:b7:ab:59:0f:a1:84:ef:1b:a6:86:eb:
16:d4:e1:5b:69:28:41:0e:82:7e:59:f3:69:a2:4a:
de:41:b9:8b:1d:e6:81:95:c4:f1:ff:56:6e:ff:18:
18:8c:54:bf:ce:6e:9a:78:93:29:8a:81:72:99:9f:
35:54:61:eb:0a:43:f8:b7:7d:3d:9c:3e:31:f3:0f:
18:fb:b7:3f:45:8b:93:05:b0:4c:1e:c2:14:59:f2:
34:49:61:31:06:ab:ea:87:8c:15:a6:44:6b:21:df:
24:5f:16:f9:27:a3:54:60:af:e3:21:e2:8a:e3:b0:
d7:8f:fd:68:62:88:cc:40:d7:a1:02:05:39:7d:01:
01:53:91:a1:05:6b:df:a2:91:c9:3d:db:d5:ef:98:
2c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:82:B0:45:97:55:2B:35:AE:ED:13:14:94:00:FA:FB:13:22:3B:D0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e636b9a6-8c3a-4152-a2ee-bedae8e5b813.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.0.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:e9:3a:14:40:72:de:f5:af:fd:82:ae:22:15:89:e3:fd:ed:
d7:2c:63:24:36:e7:be:c9:c9:3b:7b:87:a5:ef:a5:6f:cb:9f:
a7:e2:66:c4:5a:a6:b5:e2:ef:13:d6:7d:85:35:b6:90:e8:64:
29:5c:b8:c3:f4:6d:f1:c1:87:57:14:ed:e3:d8:86:19:3b:91:
6f:b7:1a:70:d3:db:f4:c6:f9:c9:fe:d0:73:2b:ab:16:e3:78:
de:69:19:2f:18:e0:9d:26:b5:c6:ab:55:51:a7:13:4a:af:c2:
76:f4:ca:29:82:46:c0:0c:05:b9:bd:66:95:0a:83:cb:7b:16:
9f:d6:b9:27:15:8a:d2:53:14:2c:70:f2:16:57:cf:50:52:63:
d2:3f:d3:21:47:ea:b1:62:47:9a:8d:77:6e:07:5f:f3:c7:64:
a2:1b:9f:37:21:17:59:6e:8a:17:88:5d:54:75:d8:6f:4a:df:
36:27:3e:c2:13:61:98:f1:80:99:8c:72:c5:d1:6c:c4:9e:67:
76:0d:6a:f6:05:da:12:86:ab:42:75:64:5d:ac:cf:c6:f4:ea:
d9:bd:11:bd:08:27:7e:3f:18:58:fa:ac:30:cc:75:ef:ed:8f:
f5:36:5a:74:cd:7f:85:11:b9:4d:9e:68:0b:46:a5:fd:b1:8a:
fe:7e:cb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 13 06:17:46 2025 by rpki-client