Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1bb02548-0394-4c22-b446-d1d217b919f6.roa
File: 1bb02548-0394-4c22-b446-d1d217b919f6.roa (raw, json)
Hash identifier: 0fy/tbfKfcoa3K7mtdJWSny5k3mY1LzBLEaFO05aNFA=
Subject key identifier: 93:B3:28:EF:67:E6:5B:D9:A2:70:E2:E1:EE:4D:95:8F:53:3D:2A:33
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: B2FFE27F2C61060269332A5E299375D2BBACC6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1bb02548-0394-4c22-b446-d1d217b919f6.roa
Signing time: Sat 01 Nov 2025 00:30:50 +0000
ROA not before: Sat 01 Nov 2025 00:30:50 +0000
ROA not after: Sat 06 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 136.18.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
b2:ff:e2:7f:2c:61:06:02:69:33:2a:5e:29:93:75:d2:bb:ac:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 1 00:30:50 2025 GMT
Not After : Dec 6 23:59:59 2025 GMT
Subject: serialNumber=1d7e45f7ad4523be3244622275289bca7216472d745965ce68ab26251e526696, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:85:12:59:a7:d8:70:04:f0:1d:40:6d:b9:ad:
75:fb:c7:39:54:44:64:a1:e6:57:c9:de:0f:96:37:
13:dc:f2:05:af:e0:ac:15:e3:49:25:8d:6b:3e:7b:
18:b2:92:d8:73:09:ea:9e:be:43:17:c2:85:15:cd:
bc:e9:32:9f:73:77:3c:a5:3c:1e:1d:d8:17:4c:5a:
7d:14:2c:a5:3f:aa:89:b9:9f:7c:6a:89:db:20:30:
41:59:ff:af:d3:88:33:bf:b5:d3:6d:7f:03:dc:f2:
c3:b2:61:dd:df:6f:63:ec:28:c2:33:61:18:d3:7e:
c0:5d:b7:30:07:43:ec:be:63:54:66:d3:a1:24:53:
4f:00:55:a7:d7:c7:8c:48:83:bf:0e:af:b2:81:b0:
af:f0:36:27:89:1c:a0:3f:5a:e5:10:04:7a:8c:69:
bf:5e:48:ee:b9:85:dd:5b:bb:33:1d:e2:33:d6:4b:
b0:00:e5:8c:99:e2:d6:89:92:3d:1e:07:d4:6e:22:
85:9d:c4:ad:b8:d8:42:70:81:4e:30:ee:9e:03:c0:
17:84:54:9b:01:ff:5e:78:9d:d2:0e:2b:c5:69:d4:
3b:d0:e0:51:34:7b:68:77:e1:66:14:85:a8:33:05:
bd:21:dc:1e:2c:d6:66:46:87:f2:1c:f5:ad:93:29:
5f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B3:28:EF:67:E6:5B:D9:A2:70:E2:E1:EE:4D:95:8F:53:3D:2A:33
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1bb02548-0394-4c22-b446-d1d217b919f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.134.0/24
Signature Algorithm: sha256WithRSAEncryption
46:b6:66:08:f0:64:78:95:c2:77:05:86:63:bb:78:74:80:13:
d8:61:bc:29:52:4f:23:37:0d:2a:a4:9a:c5:01:d0:0f:ce:30:
58:d2:4a:7a:c7:a4:33:20:7c:25:b5:30:38:52:c4:d8:62:47:
5b:75:22:41:87:0d:c9:5c:c1:cc:95:d0:c5:0c:73:1a:52:ad:
c7:f0:df:a6:ab:e6:ee:bc:07:0b:9c:68:6b:9a:ee:c7:45:69:
07:1e:3f:c8:06:38:2f:60:70:bb:97:66:ce:9d:d6:cb:80:bd:
f7:b3:a4:bd:a9:57:f3:ae:6d:74:c9:2d:c7:cd:dc:99:97:d6:
19:3b:cf:48:58:62:db:33:40:ce:47:64:14:e0:a5:ee:cd:b5:
04:0a:3d:4e:43:f1:f8:26:d4:0c:c2:d1:aa:08:b2:b4:6a:99:
65:11:0e:d3:b6:e4:f1:e2:1e:24:fd:e6:8f:27:d5:34:e0:61:
08:a9:b2:e4:4a:c1:70:6c:39:12:d7:a9:43:bf:ad:64:54:d4:
31:23:69:12:18:a5:72:f8:c3:6a:2a:3c:da:82:60:58:66:c9:
22:5d:ee:91:af:27:5e:49:3c:bd:88:fe:75:7f:14:0b:44:82:
0f:09:29:56:0c:d8:14:12:da:23:da:b2:e5:19:51:b1:0f:46:
ef:24:b5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:49:03 2025 by rpki-client