Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d46976e-8b32-4128-9dbc-b4133373826c.roa
File: 8d46976e-8b32-4128-9dbc-b4133373826c.roa (raw, json)
Hash identifier: C+canVSj/wEh6vR4/SBED5McBomR1YXdlflRcjphA+k=
Subject key identifier: 73:B8:26:A7:6E:37:C5:38:29:36:E4:39:B4:38:23:A6:1F:74:9F:EA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0D483ACC3A09BE06EE9FD454F2DF4B1CBBD76A05
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d46976e-8b32-4128-9dbc-b4133373826c.roa
Signing time: Wed 29 Oct 2025 21:21:51 +0000
ROA not before: Wed 29 Oct 2025 21:21:51 +0000
ROA not after: Wed 03 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 136.18.132.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:48:3a:cc:3a:09:be:06:ee:9f:d4:54:f2:df:4b:1c:bb:d7:6a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 29 21:21:51 2025 GMT
Not After : Dec 3 23:59:59 2025 GMT
Subject: serialNumber=0557f08184e14292fefd6ca8f49eaece76947741e96695ad3104ea152152ea45, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d3:fd:b0:db:9b:cc:e5:33:d4:6a:a3:1f:0d:
47:b5:9e:89:2e:9c:3e:ee:11:f9:7c:f4:ec:32:06:
32:cd:84:e7:f4:4f:00:3f:36:54:84:5a:f7:6d:60:
b6:38:49:f1:83:a3:97:09:5a:40:65:de:82:23:1c:
15:97:1f:97:90:43:67:cd:c1:09:ad:6e:da:6d:86:
b6:95:08:53:1b:9a:0a:33:8b:1d:67:2a:28:f8:af:
12:f7:a8:aa:45:8b:50:7a:53:fd:a2:d5:91:35:9e:
e6:10:59:89:bd:a7:c0:19:15:8b:60:6b:f9:20:66:
1f:f9:c7:1f:d1:58:3f:0b:47:41:a9:87:6c:98:cd:
b4:09:25:ef:e6:9c:aa:b9:94:0b:c1:5e:f5:80:c5:
b1:63:77:98:ac:b4:0d:46:cf:e2:bf:e6:ee:e5:19:
2f:39:b5:4c:98:e5:96:03:a2:07:96:c8:de:83:98:
4d:e9:dd:a5:b4:85:8a:df:47:1d:25:55:5d:02:3c:
74:50:0f:9b:22:ab:c6:93:9c:41:5c:17:8b:50:ff:
cc:58:f4:20:e1:c4:42:66:6e:6d:c4:9b:d0:4a:65:
7f:5e:f6:a0:a1:2c:c6:df:31:ca:3f:08:02:3e:67:
67:10:76:8c:a0:4c:6c:85:ce:75:b3:f9:85:e4:6d:
c8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B8:26:A7:6E:37:C5:38:29:36:E4:39:B4:38:23:A6:1F:74:9F:EA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d46976e-8b32-4128-9dbc-b4133373826c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.132.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:0a:aa:6e:e2:8c:24:cd:39:cc:03:cb:52:5d:f8:cb:46:a6:
9e:2c:1e:51:06:33:63:7e:be:8c:7b:bb:b4:30:66:9b:63:ef:
b4:33:e0:b5:ec:32:92:4f:5a:f6:67:81:4f:4c:07:43:d8:60:
04:a9:23:3b:cd:6e:3a:5a:8d:02:8d:cf:1b:ab:f6:c1:8a:b6:
b1:5a:c1:18:3a:b8:27:7c:3b:94:fc:f5:7c:46:5f:b2:7d:6e:
ce:94:c2:74:60:84:e7:9d:48:58:36:7a:c6:7e:af:da:58:0d:
7c:cf:d7:6b:35:d6:76:d2:6e:29:25:8e:5d:bd:96:36:e5:21:
6b:5a:c5:44:6f:de:72:d0:58:fc:3a:30:d1:1a:e7:a1:c2:dc:
fa:04:74:a2:d7:70:44:00:d8:50:e2:96:0d:1b:fa:78:79:3f:
a4:ef:8f:42:00:8c:8b:80:fc:2e:fc:6d:8e:11:49:e0:25:22:
3c:5b:f9:73:28:e3:d2:03:9e:92:bb:03:06:60:b2:1e:1a:fd:
a6:c2:43:6a:1a:39:c4:70:71:d3:66:8e:35:f7:92:de:de:56:
5d:42:41:df:1f:f6:ac:64:38:3c:8a:92:99:f9:d1:37:44:08:
0f:b1:85:68:a4:81:a3:ea:e9:4f:3c:89:21:37:3d:3e:a0:cc:
22:cf:08:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:41:25 2025 by rpki-client