Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e970a30-4bdf-4f59-aa7c-ff6fd581ba68.roa
File: 5e970a30-4bdf-4f59-aa7c-ff6fd581ba68.roa (raw, json)
Hash identifier: xzZCi8EemUmZGDodug/9aDOL2JCKE01TlttUbrQCXP4=
Subject key identifier: 7B:83:2F:2C:8D:FB:A1:27:C9:B5:9D:12:CC:48:B9:5C:08:23:BE:50
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 112E3124A896CEC75BEC94C0E39EBBC1DF126654
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e970a30-4bdf-4f59-aa7c-ff6fd581ba68.roa
Signing time: Fri 31 Oct 2025 00:30:46 +0000
ROA not before: Fri 31 Oct 2025 00:30:46 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 13.130.16.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:2e:31:24:a8:96:ce:c7:5b:ec:94:c0:e3:9e:bb:c1:df:12:66:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 31 00:30:46 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=26f72e3f8f820024458cd8b900dd8f2f81c98b5e832a3854f6cd66292d6e5f30, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:78:b8:73:90:13:99:7e:6c:a7:2c:86:59:75:
35:cb:1d:91:ca:a8:c2:e4:00:ee:0a:65:ff:17:9e:
39:9a:29:33:fd:4d:a0:c9:27:64:11:57:c2:b7:6f:
24:d8:be:d1:8d:2a:f5:b5:56:45:33:e6:3e:d2:bf:
6e:99:f1:95:5c:78:d1:fc:0c:b7:af:60:b2:a5:d7:
6e:44:fe:b3:07:2a:10:fd:79:72:cf:16:fc:14:d2:
71:c0:74:fa:77:9f:ca:c2:c6:d6:3c:b8:6b:20:72:
de:ac:b8:fd:ae:a4:37:b1:50:3d:8f:d5:fb:e2:90:
af:78:5f:d6:19:67:10:94:6e:5b:e7:b9:ab:aa:94:
16:72:50:f5:c3:32:1b:17:79:72:31:93:93:59:0b:
78:1e:f2:86:e6:03:10:2d:37:73:ac:11:59:de:83:
bf:81:52:3b:b7:71:01:fd:9a:66:b5:f4:b9:c4:fc:
0f:d0:21:65:78:ad:4c:56:0a:2e:c1:91:c8:d5:a8:
b7:9a:ac:53:99:51:3f:d4:9d:62:62:39:72:1c:ba:
47:f9:b7:31:76:b3:ca:09:40:01:bc:18:0f:6d:1b:
ab:3e:46:57:87:fb:61:95:c2:08:6a:e7:96:33:69:
dd:45:e6:e9:40:9c:5a:03:23:69:b8:f6:5b:56:da:
be:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:83:2F:2C:8D:FB:A1:27:C9:B5:9D:12:CC:48:B9:5C:08:23:BE:50
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e970a30-4bdf-4f59-aa7c-ff6fd581ba68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.130.16.0/21
Signature Algorithm: sha256WithRSAEncryption
24:96:c1:69:cf:5b:69:4a:11:36:18:e1:06:65:5f:cb:24:ad:
e8:40:5a:b2:61:dc:a3:af:cf:a5:cf:6d:ce:1a:e7:3d:7a:a6:
b3:6e:dc:af:c8:93:25:2a:4d:ae:93:47:00:8c:15:da:55:47:
6d:27:85:97:72:28:66:eb:6d:c0:ee:24:fe:51:2c:77:60:fc:
dc:e9:cb:82:90:5e:43:e2:55:c4:45:95:cb:89:e2:4c:10:2f:
72:a1:31:88:98:05:6c:47:1a:54:16:fc:d1:dd:23:47:6b:24:
b9:cb:5f:23:4c:59:88:a8:fe:0d:63:43:51:64:df:1f:39:16:
dd:ce:90:1a:74:26:d2:62:fa:45:f7:fd:fd:05:3b:1f:5d:cd:
42:44:e2:a0:45:fd:74:0b:bf:18:3a:b1:b9:64:e6:2f:4d:d4:
b7:51:48:23:ac:b2:4c:33:3c:14:83:30:e3:14:f2:44:02:a6:
88:26:a7:cf:28:4a:bf:50:92:f8:24:39:b2:39:3a:bc:e8:1d:
9f:e5:7b:7b:ee:f4:15:e2:71:93:a3:d2:21:ec:ea:b9:28:8e:
92:86:7c:c3:9a:32:2e:c9:72:9e:68:a6:c2:21:8f:c3:a2:a7:
8e:45:74:4b:d8:79:e3:61:7e:75:e5:9f:61:bc:14:eb:22:23:
0d:7c:9b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:36:06 2025 by rpki-client