Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8419442-0aa9-4459-b5f1-134a3a97de62.roa
File: e8419442-0aa9-4459-b5f1-134a3a97de62.roa (raw, json)
Hash identifier: or3S9LL55ZfWWClm4C76WAxylG0oEmNFOaTp9dTTLeM=
Subject key identifier: 45:F0:12:A9:99:FE:5C:9A:49:60:B3:FA:2C:A5:F3:40:DE:E4:C2:F5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2A692ACBDCEF6A97DEEF77652F7EFFBA212ED27C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8419442-0aa9-4459-b5f1-134a3a97de62.roa
Signing time: Tue 14 Oct 2025 00:52:49 +0000
ROA not before: Tue 14 Oct 2025 00:52:49 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:69:2a:cb:dc:ef:6a:97:de:ef:77:65:2f:7e:ff:ba:21:2e:d2:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 00:52:49 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=08404394131b7c8450357264ca5e6cd0bb78123d866a349061ad0dcd97029205, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:07:df:22:b4:75:43:59:ba:c5:f7:b6:c2:a3:
9f:d9:2c:0e:c5:44:f0:3c:4c:93:26:8a:7d:36:27:
e5:bd:e8:68:33:35:cb:1b:46:85:d0:ee:27:ed:b8:
48:03:58:1e:04:09:f5:91:e4:1b:53:69:1c:a2:56:
2c:37:7c:1e:48:1b:8c:85:db:7a:fa:91:01:2b:0d:
bf:16:df:fd:b3:ee:ac:7c:cc:a6:fb:16:9c:2d:92:
a2:28:f2:06:e4:07:32:30:e3:cc:5a:e8:b2:6f:5f:
67:0f:8b:25:7d:9a:8f:98:36:4d:f1:f0:ed:8d:75:
87:bc:bb:d2:64:90:83:85:99:a6:01:e6:93:1d:e7:
84:1f:57:e3:8b:5b:2f:43:fc:14:c6:23:af:4d:a9:
2b:4a:2f:ae:92:91:8d:8f:94:d3:f2:f4:e2:fe:7d:
d7:17:af:29:f4:4e:dc:c5:13:15:b0:64:cc:0a:c5:
c5:79:61:93:12:8a:ff:3b:b9:6d:d4:c0:c6:fb:30:
d9:b0:fc:f5:32:db:cb:a0:09:02:0c:42:e0:da:a2:
6f:bd:f0:64:a8:d5:76:89:e5:31:8b:7b:19:13:03:
49:ff:e9:8d:c7:0b:90:a5:09:62:65:5d:46:f9:ce:
f8:db:55:9a:41:0d:13:5c:cd:43:55:b9:78:aa:6f:
e1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F0:12:A9:99:FE:5C:9A:49:60:B3:FA:2C:A5:F3:40:DE:E4:C2:F5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8419442-0aa9-4459-b5f1-134a3a97de62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.126.0/24
Signature Algorithm: sha256WithRSAEncryption
32:9b:2a:e3:7d:ed:f0:54:88:29:aa:f7:0a:5d:67:34:fd:2c:
11:a5:ca:f0:f3:12:29:d6:5a:0c:1c:89:e7:76:49:5f:1f:3b:
02:84:53:4b:bf:17:9b:dd:be:9a:07:1c:a2:c6:e9:cd:4f:0a:
cd:d2:59:96:e6:84:a8:ce:83:75:1e:72:13:80:12:04:52:21:
db:f6:50:23:37:30:8d:6b:54:83:3f:41:60:ef:39:14:33:6c:
3e:81:af:77:06:77:31:df:50:e2:a5:29:32:29:ab:ee:66:a7:
1c:91:ee:b6:4f:77:df:d1:0f:5f:6b:3d:42:96:74:cc:de:d7:
92:c8:51:a1:e6:72:0a:5e:5e:c5:4e:80:69:75:4d:14:bb:26:
ed:8b:80:ef:7f:b0:5d:a8:20:33:9f:24:d4:35:9e:2b:8e:53:
c6:ca:34:70:06:12:7b:c2:9f:54:1c:e1:2a:11:a6:6b:e6:1d:
64:c4:b1:1c:0d:c7:cb:14:36:11:2c:47:63:e3:a0:81:df:1e:
2d:fe:54:cb:f8:3a:65:b5:6e:91:1d:a7:47:95:ea:3c:42:b0:
6b:be:b5:53:33:01:62:1b:11:18:6e:0e:ce:80:04:f0:ab:f0:
c3:2a:ed:df:c3:09:fd:24:70:f1:78:ad:52:d3:2a:67:5e:45:
a0:83:06:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:34 2025 by rpki-client