Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18a602e8-2bc6-42f9-be5d-6d763a3ca04e.roa
File: 18a602e8-2bc6-42f9-be5d-6d763a3ca04e.roa (raw, json)
Hash identifier: FlXUFkxkZQsBEV3jLu92HxYpfZmx6zu3oGuoBtk7S68=
Subject key identifier: 12:62:79:B3:C5:FD:85:6C:23:BF:19:87:5E:D5:84:08:91:C6:FD:51
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 28A67460BE71155F25443C0D47B51DCD9A7DF344
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18a602e8-2bc6-42f9-be5d-6d763a3ca04e.roa
Signing time: Sat 01 Nov 2025 00:10:35 +0000
ROA not before: Sat 01 Nov 2025 00:10:35 +0000
ROA not after: Sat 06 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 136.18.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:a6:74:60:be:71:15:5f:25:44:3c:0d:47:b5:1d:cd:9a:7d:f3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 1 00:10:35 2025 GMT
Not After : Dec 6 23:59:59 2025 GMT
Subject: serialNumber=2e8f643bb85c55b9a9391ad23e375b59071544afdd3b54ac8ab359728bbdc15c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:11:63:1a:bc:0b:1d:84:47:7e:b6:e1:06:93:
5e:63:1b:92:99:c7:37:ec:e1:25:31:df:38:0f:a9:
9b:dc:19:b5:7d:59:25:da:46:69:12:d7:58:e8:a9:
6d:89:0e:87:5a:79:07:f0:64:a3:6e:71:ef:d3:97:
1b:db:c5:3e:ed:ad:75:aa:07:3f:32:fc:1d:70:32:
47:3b:68:ee:94:e8:83:c3:f5:cc:c2:73:72:f6:7c:
70:5e:28:cc:0b:c6:68:47:d3:7a:cb:33:ec:35:e8:
18:11:3b:f7:49:73:f4:b1:aa:1f:72:3d:6f:3e:a4:
a8:69:91:c8:4f:6b:f8:34:0d:0c:77:6b:a7:f8:96:
b1:87:d1:0f:88:98:2a:2a:3c:fe:0b:88:41:a9:0b:
d7:27:41:19:8e:14:04:f7:20:b4:1d:7e:52:ed:b5:
8b:9f:15:91:61:55:b6:5a:bb:46:00:b9:ec:16:01:
90:5c:03:8a:4b:0c:17:ba:4d:8e:b1:76:da:8e:12:
eb:c1:be:6b:88:e5:ec:b3:7d:ed:5d:e4:fb:5f:b7:
28:4c:84:13:ce:38:ce:2f:2b:a0:87:d1:3b:1c:44:
bb:24:6b:4c:d6:a5:15:af:a5:95:4a:ff:cc:22:21:
3e:86:8b:a2:df:e8:8e:90:e4:dc:8c:d1:9b:d5:1c:
79:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:62:79:B3:C5:FD:85:6C:23:BF:19:87:5E:D5:84:08:91:C6:FD:51
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18a602e8-2bc6-42f9-be5d-6d763a3ca04e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.254.0/24
Signature Algorithm: sha256WithRSAEncryption
64:99:27:bd:4c:1a:28:2c:67:df:1b:24:95:99:e2:fe:63:34:
65:cf:f4:c6:3a:3c:45:80:66:f9:d8:ad:59:db:cf:bf:ee:2f:
df:e6:db:2c:69:9d:bc:f3:d6:42:a2:d9:9d:55:b7:73:c5:4a:
3c:02:dc:26:f9:35:e9:c6:d5:73:54:9a:af:a2:d7:8c:35:9e:
44:65:a8:74:21:69:ca:2d:dd:7c:fe:b8:3b:b8:80:5b:56:07:
66:f8:24:02:b3:51:16:19:60:24:4c:27:74:f6:03:49:a4:4c:
54:84:cb:31:3f:c4:f2:f0:72:6b:3c:66:99:02:94:5f:14:81:
0f:21:d5:17:44:4e:1a:9c:96:21:a3:92:66:89:c5:8e:a8:6b:
c0:5c:e4:2d:44:95:68:2a:29:a3:85:25:a8:1e:c6:34:5b:80:
5b:ce:58:cb:3d:d3:fb:81:d7:55:c1:2e:34:de:6f:8d:c3:00:
3d:0c:a5:40:9a:95:73:c3:3f:c5:4b:66:82:40:5e:b2:20:33:
76:4e:55:b5:13:25:9c:47:66:13:2c:dc:5d:cc:31:1a:e7:aa:
aa:74:e0:e7:7d:45:1e:08:ad:5b:ba:c4:7c:4e:e5:9a:90:f8:
73:fe:08:74:25:55:7b:59:c7:fb:79:c8:97:d1:f0:84:f2:c2:
de:02:40:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:43:26 2025 by rpki-client