Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c977a0d3-92fd-44ae-90a6-a6ccf49130b8.roa
File: c977a0d3-92fd-44ae-90a6-a6ccf49130b8.roa (raw, json)
Hash identifier: pVsQxc9AilT7SE3Yr6ss/uDFiK1zK2inLQ0VIoL9bbQ=
Subject key identifier: 64:98:54:88:06:A1:08:DF:47:D1:D7:43:E6:07:8F:CF:FB:44:34:B0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 31ED3E0DE48ABDA66D2A87F664318769F750BEA0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c977a0d3-92fd-44ae-90a6-a6ccf49130b8.roa
Signing time: Tue 28 Oct 2025 00:30:40 +0000
ROA not before: Tue 28 Oct 2025 00:30:40 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 136.18.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:ed:3e:0d:e4:8a:bd:a6:6d:2a:87:f6:64:31:87:69:f7:50:be:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 00:30:40 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=4d8f5e4b65186a8b948e84054c63d761ddb947ff3e634d4dee359c55bcd57357, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:da:d9:a6:4e:b5:1b:ac:ba:9a:75:8e:b8:dc:
31:3f:99:c4:08:5f:be:62:5b:2b:7a:d7:ba:9f:5e:
67:43:8e:61:fd:f8:a5:a1:e3:79:cc:16:85:cb:ec:
2b:3c:a4:f9:be:83:91:6d:ce:ff:3b:aa:ea:53:00:
1f:ef:81:5a:0f:af:46:ec:df:98:d3:c3:23:e2:f8:
36:a4:18:02:74:9c:7f:95:51:36:db:c7:13:b9:9c:
dc:d0:e0:55:db:47:4b:6e:de:68:f6:d7:03:0f:27:
10:eb:56:ef:4c:d3:96:46:15:93:2c:c1:3b:5e:44:
40:d9:0f:e8:4f:a9:dd:92:1f:e1:0e:62:76:2d:d6:
bf:06:ec:d4:13:a7:18:2c:ee:ec:73:25:87:cd:ef:
71:37:04:ff:1c:de:a4:05:ec:5b:53:97:31:d3:82:
89:eb:a0:7d:8f:2d:a5:55:2f:7c:aa:f5:ce:e3:d0:
d6:f5:67:01:d9:9b:82:4c:ee:1a:ab:fd:ca:4d:07:
0f:98:96:40:ba:1f:32:0b:d5:93:73:f1:72:6d:89:
fb:b1:1a:6d:0e:23:ee:91:3c:5a:0c:0f:d1:82:dd:
26:6e:14:98:98:51:09:05:1b:a5:f7:7c:61:87:42:
2b:c2:37:44:db:28:76:81:94:5a:38:f4:08:13:e1:
90:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:98:54:88:06:A1:08:DF:47:D1:D7:43:E6:07:8F:CF:FB:44:34:B0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c977a0d3-92fd-44ae-90a6-a6ccf49130b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.20.0/22
Signature Algorithm: sha256WithRSAEncryption
85:2b:a5:0d:d4:c7:f8:f4:5d:35:31:5a:f6:04:1d:cc:e0:e5:
93:de:f3:bf:ca:0d:40:be:4b:d5:88:16:b7:c3:5d:9b:98:5f:
df:05:30:74:db:b7:ca:91:57:68:76:0c:13:ba:96:4a:a1:08:
af:38:15:55:f5:f4:f8:e6:eb:72:ad:ed:4e:d4:b6:4c:15:53:
85:73:87:41:63:cb:af:3a:4f:15:f2:e9:8c:9d:e2:ab:fd:b4:
02:9a:56:20:f5:ef:e7:d9:1a:22:e5:02:b1:d6:e7:98:d6:b4:
41:2b:be:1c:48:a7:c7:56:aa:aa:da:44:fd:80:e9:a0:0c:45:
55:ac:dc:79:50:55:dc:17:71:cb:04:02:02:2f:c5:85:90:28:
71:fe:77:9c:86:27:76:69:0e:ce:d2:4c:9b:67:5c:bb:c7:f7:
bf:aa:29:6a:a4:69:c8:0e:63:66:62:a1:e5:76:90:a9:41:28:
ba:77:d5:38:15:a3:07:6e:41:99:cb:2e:10:a2:9d:10:62:2a:
42:e3:f0:ef:bd:a4:35:c1:55:44:88:9b:c5:9d:77:1a:bb:84:
dc:f4:7d:79:d1:ff:d6:6f:f0:a0:f0:80:43:5f:1a:07:61:27:
3c:b0:fc:e2:70:90:80:94:39:05:0f:d3:96:d4:49:80:bc:d6:
cd:de:07:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:04:11 2025 by rpki-client