Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/636f0aff-2d9b-4b43-bcc7-bc2ff0faf16e.roa
File: 636f0aff-2d9b-4b43-bcc7-bc2ff0faf16e.roa (raw, json)
Hash identifier: PfCRpHwPjfAclWnOYlsmfVdZwuqNscmbpGt4+ZBlTTo=
Subject key identifier: D4:48:61:3D:F9:15:71:89:2E:98:54:73:1B:92:08:EA:DC:D0:D6:62
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 669B4E355FDAFCC741ACB1A8D941CFCEFFB963
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/636f0aff-2d9b-4b43-bcc7-bc2ff0faf16e.roa
Signing time: Fri 31 Oct 2025 21:21:53 +0000
ROA not before: Fri 31 Oct 2025 21:21:53 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 93.77.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:9b:4e:35:5f:da:fc:c7:41:ac:b1:a8:d9:41:cf:ce:ff:b9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 31 21:21:53 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=35594ad59c3bdff1bad3e1a1c463ef060cfeefd458fb188e7cc4560532142556, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:46:ae:b2:98:68:e3:75:66:b8:27:f4:08:12:
8e:87:b2:57:bf:3d:44:1c:64:70:33:dd:66:88:6a:
0d:11:7e:80:2e:1d:fb:ef:05:71:21:fc:f0:26:f3:
fb:f9:a8:5d:2a:0c:45:4d:6b:ea:58:45:b1:7c:41:
ab:19:14:1a:fc:87:cc:65:6f:cf:d2:32:d3:b9:7a:
a8:56:a8:fe:b7:a0:41:be:8a:b5:9b:ac:56:52:1e:
d4:bb:60:48:4e:4d:d0:22:40:07:22:c8:19:5a:ec:
48:2d:ed:0f:91:86:91:8e:7c:d1:b9:1a:bc:78:c4:
b0:8f:0e:a3:a8:09:35:5d:f6:34:e9:23:21:96:a4:
14:c1:62:a7:9e:3e:e3:ac:cf:49:cb:da:4a:a9:51:
fe:97:97:7e:7e:9b:5f:63:83:0d:c6:7c:d4:ee:1d:
2f:e7:2f:97:ac:34:7c:c4:e1:4e:7a:20:6d:21:a7:
f2:72:a5:97:08:3f:4d:de:eb:b2:34:18:8f:29:78:
36:5a:03:ab:3d:5a:be:52:2b:24:d6:65:a9:44:16:
1d:37:da:fa:0d:bf:aa:bb:43:7a:78:00:d6:95:30:
b9:ce:b1:8c:79:66:36:2c:d1:c7:92:54:77:7a:8f:
b9:8b:4a:45:15:a7:99:6f:8e:f9:71:82:72:e7:77:
9c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:48:61:3D:F9:15:71:89:2E:98:54:73:1B:92:08:EA:DC:D0:D6:62
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/636f0aff-2d9b-4b43-bcc7-bc2ff0faf16e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.77.130.0/24
Signature Algorithm: sha256WithRSAEncryption
86:45:52:d9:b8:0d:e5:7e:ce:4b:4a:9b:a1:de:fd:ca:e5:c4:
d9:e8:24:0a:3e:ed:32:53:e3:d8:22:33:dd:de:fb:e6:fe:8d:
24:d1:e1:7b:51:23:41:f2:52:f2:28:55:6e:a6:ba:b5:61:86:
57:fd:17:57:04:dd:66:6b:e5:4c:67:a9:f7:d4:18:7a:2f:87:
f1:ca:ff:ae:29:05:f2:6e:cc:50:4f:8e:2b:3d:e6:6f:e1:77:
fd:db:d8:c8:8d:97:d4:d5:2a:03:f4:6c:75:55:54:4b:5e:48:
d5:3a:5a:d8:a7:5a:63:ba:27:4d:d4:e6:14:b7:bb:48:92:0e:
ae:0d:26:ae:bf:37:91:c4:79:c7:da:e0:6c:de:6d:82:9a:ca:
0f:55:dd:10:5c:73:65:56:da:01:f8:08:13:77:97:5e:20:12:
2a:51:c0:06:c3:83:49:2e:86:6a:d5:e2:f4:e6:8c:93:ae:a7:
b9:dd:d5:95:11:b3:c6:ed:47:b0:fa:b4:6f:0b:4e:88:75:55:
64:ce:13:0f:fc:b3:cc:68:b3:39:11:47:57:53:d8:bf:b5:e2:
b6:e5:6f:40:59:da:f0:e7:e4:52:cb:9f:98:f3:20:74:f2:e6:
bb:89:c5:74:02:5a:37:4e:20:6c:51:a3:76:d3:46:61:8c:4e:
a7:06:ee:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:27:11 2025 by rpki-client