Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9c4410d-8877-4112-baca-e054d7596057.roa
File: e9c4410d-8877-4112-baca-e054d7596057.roa (raw, json)
Hash identifier: PduQ262WxAZvFffDgsVYBu76Jgmum35H6UJRSyStrFc=
Subject key identifier: B1:41:B1:3F:BA:86:82:CD:28:5F:4E:9E:D5:4D:A3:9C:08:C0:4F:67
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1A14D42956516C1AF0749F84AB9619F85DBD9B4C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9c4410d-8877-4112-baca-e054d7596057.roa
Signing time: Sat 01 Nov 2025 01:00:05 +0000
ROA not before: Sat 01 Nov 2025 01:00:05 +0000
ROA not after: Sat 06 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 136.18.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:14:d4:29:56:51:6c:1a:f0:74:9f:84:ab:96:19:f8:5d:bd:9b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 1 01:00:05 2025 GMT
Not After : Dec 6 23:59:59 2025 GMT
Subject: serialNumber=e92791c6f2fe2fc524297786afd82176aff9b38af15a84d1d2d8085b809d6a4a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4e:99:06:e2:fa:4c:6b:74:2a:a0:a7:ce:0f:
55:d7:0a:83:51:35:f6:f2:a1:9c:33:ba:96:67:03:
4c:85:de:b2:52:e5:61:bb:44:cb:69:88:02:62:8b:
80:9d:c7:86:b1:6b:c6:f9:87:71:32:e0:32:22:de:
9d:ec:84:a1:d9:57:4e:76:60:5e:90:63:47:fe:44:
53:42:a8:b6:ed:f9:ce:56:1c:17:8b:84:4e:ff:5d:
3d:df:6d:a8:7a:5a:6e:ef:0b:36:fa:62:61:6a:ca:
ae:9e:9f:b0:86:9e:97:05:6d:23:29:25:72:1f:67:
eb:4c:69:7a:1e:85:a9:2a:67:0c:cc:47:e0:57:af:
0c:97:b3:bc:07:e0:21:49:d5:79:16:1b:9d:b9:be:
de:fb:e3:3c:8e:22:a8:f0:39:50:c0:04:4f:d6:0a:
ed:ec:39:c9:63:60:c5:5d:03:d6:d2:29:1e:c2:b2:
e1:96:72:c2:66:16:ea:0c:91:4f:e5:f0:22:86:5e:
78:3b:96:dc:2b:fa:37:5a:38:68:11:ff:7b:8c:12:
b7:84:3a:7d:90:61:dd:e5:39:a8:29:62:4a:be:bd:
ce:e0:6d:c7:59:bb:df:14:d3:7a:13:f5:77:26:ac:
db:43:b0:51:71:09:57:25:aa:06:5f:43:88:1d:bd:
6d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:41:B1:3F:BA:86:82:CD:28:5F:4E:9E:D5:4D:A3:9C:08:C0:4F:67
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9c4410d-8877-4112-baca-e054d7596057.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.151.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:c2:b9:57:58:27:56:e2:9c:f3:bf:25:5f:47:bc:60:e2:f3:
d0:be:12:b6:f4:a3:62:f8:b4:75:a7:70:60:70:eb:6d:3c:5a:
c5:d6:dc:6d:83:82:1c:d2:58:eb:71:2a:c1:17:5f:db:d4:b1:
f9:8d:78:cb:09:de:c2:33:75:b3:42:91:a7:74:26:d2:bb:69:
7b:7f:77:f7:a7:f6:64:3b:8b:f5:ff:59:25:2a:1c:a3:fa:6e:
c8:1f:73:75:d4:84:ba:c7:ed:64:e5:d6:1a:80:2d:9b:fc:3e:
bd:23:fa:3e:46:5c:9e:86:5a:1f:35:68:c6:22:55:c8:11:b4:
25:d6:4d:81:36:71:e8:76:76:8d:fb:01:f2:f4:49:15:63:0b:
eb:df:1f:1d:c2:98:63:f6:c8:24:81:b8:67:fc:b4:1f:d7:71:
b8:c2:37:c9:e8:2b:dc:22:d0:8b:56:26:1a:61:7b:c8:d0:78:
54:b9:1a:dc:f3:84:64:4f:21:e9:b0:e7:37:39:aa:1b:9d:5c:
24:02:b4:f8:aa:67:cc:67:0e:59:09:81:5f:e5:46:cb:5d:d8:
33:ce:78:07:f8:05:97:b4:14:d8:12:13:8d:92:27:4f:d8:fc:
fe:9d:6f:d1:31:10:63:b3:60:53:26:85:40:45:af:18:cb:3e:
6f:0d:87:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:28:36 2025 by rpki-client