Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7e48273-d97f-45e2-9820-48c08d0db4f5.roa
File: c7e48273-d97f-45e2-9820-48c08d0db4f5.roa (raw, json)
Hash identifier: RLZcE6Cax3ThRwThCYOlor5mfFL+Dn6rTLXGUxpkrhQ=
Subject key identifier: 9E:4B:E3:28:1A:38:4F:F1:43:E4:E4:99:2E:62:62:0A:13:18:AA:06
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3B099A50B9EA8CA76F9322CFE56B5E486906C337
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7e48273-d97f-45e2-9820-48c08d0db4f5.roa
Signing time: Sat 01 Nov 2025 00:10:36 +0000
ROA not before: Sat 01 Nov 2025 00:10:36 +0000
ROA not after: Sat 06 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 136.18.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:09:9a:50:b9:ea:8c:a7:6f:93:22:cf:e5:6b:5e:48:69:06:c3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 1 00:10:36 2025 GMT
Not After : Dec 6 23:59:59 2025 GMT
Subject: serialNumber=ab5060f957a60c1cfaeb45958cc559c0cd8a07d8db3ed248ada71c144aa44f30, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:03:06:69:7a:c4:07:ab:ce:33:7b:b4:05:41:
48:17:38:d1:63:a7:5d:09:8e:4b:eb:76:21:43:0e:
d2:d4:c4:b7:40:ab:e6:71:2b:fa:81:e9:2c:7e:95:
54:8c:59:d9:67:e0:f7:bb:8f:d1:a2:0f:cd:d8:cd:
f8:5e:00:bb:69:14:f6:b0:38:82:7e:2f:8f:a5:70:
66:78:c6:45:52:2e:f6:6a:90:c9:9a:5b:c6:0e:45:
e5:50:60:0e:00:d9:9f:15:1a:54:bb:08:7b:6a:7a:
b5:97:17:82:99:ba:9e:3f:53:28:d5:de:0d:6d:4a:
26:c9:1d:b8:09:1d:02:6c:bc:a0:82:57:7b:90:db:
98:63:4b:bb:40:69:47:2d:7d:db:61:d4:db:21:07:
78:7c:2e:0b:50:7a:e2:24:2d:e6:2b:e6:40:ab:5e:
7a:f2:5f:08:9f:67:3d:9d:29:4b:f3:bf:59:60:2b:
c8:91:31:5d:44:d0:40:0e:f7:68:d2:92:d2:db:e7:
3b:e7:e3:1a:65:94:b5:83:7a:b6:14:53:97:bd:b9:
8c:d7:92:e7:a0:76:70:99:15:ce:27:e1:92:4f:47:
7c:fe:3c:a3:8c:d8:6b:75:c6:70:25:7a:7a:24:b9:
d2:7f:bf:c1:49:f5:d9:d4:0a:62:62:2f:ba:52:ae:
6d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4B:E3:28:1A:38:4F:F1:43:E4:E4:99:2E:62:62:0A:13:18:AA:06
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7e48273-d97f-45e2-9820-48c08d0db4f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.254.0/24
Signature Algorithm: sha256WithRSAEncryption
52:08:dd:bc:1c:40:4c:17:b7:4b:79:78:6d:67:fe:b8:34:0a:
97:ed:25:be:68:d7:6a:d8:ec:92:af:36:66:45:e1:e9:b0:06:
47:d1:64:02:b8:d7:b0:fa:56:0d:98:47:40:ba:9f:77:2b:3e:
9f:d8:74:10:36:eb:7c:92:1d:32:24:1a:12:d0:fe:50:d5:bf:
01:92:50:8e:ee:73:8b:4c:1d:af:d4:f7:f3:08:b1:a3:13:53:
50:cd:43:f4:a0:2b:b3:11:65:dd:0e:21:de:60:81:1c:5a:e3:
b3:e9:32:89:0b:1c:10:ef:3d:09:12:82:fb:5d:1f:67:2f:52:
4e:af:b3:3a:2b:2e:e2:aa:09:44:58:f7:7f:3c:97:26:8e:8f:
30:99:ea:8c:eb:2e:82:57:b8:12:f8:4c:e5:cd:ca:d8:8b:38:
05:5e:3d:ef:e2:82:6d:6d:aa:10:db:5a:81:b9:1f:fe:f2:97:
0d:2e:8a:28:34:3d:f4:8e:02:2d:a6:94:87:7f:19:04:0a:f8:
f8:18:b9:9f:33:96:51:e8:c5:79:c0:db:92:12:3f:5a:ac:ce:
84:61:50:40:37:b9:1a:03:f9:3d:50:81:a1:a6:dc:96:83:76:
a4:34:a0:b3:fc:ff:4d:87:a6:69:7b:a5:76:d6:b9:f6:7a:ea:
fa:60:85:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:33:46 2025 by rpki-client