Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b2f3095-813c-4aa6-ad8f-5cfe7b34fd26.roa
File: 6b2f3095-813c-4aa6-ad8f-5cfe7b34fd26.roa (raw, json)
Hash identifier: kSpK6kSWSwz+bzrqWMfQj0vGdwtdV8qvWTyXmkFZcTg=
Subject key identifier: 1A:68:DF:CF:55:9A:5B:6A:1A:0F:2A:65:DD:D2:AC:E4:D7:04:F3:42
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0F1E382183712ACC93D71D82A1237F37D31F85A5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b2f3095-813c-4aa6-ad8f-5cfe7b34fd26.roa
Signing time: Fri 10 Oct 2025 00:12:06 +0000
ROA not before: Fri 10 Oct 2025 00:12:06 +0000
ROA not after: Fri 14 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 78.12.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:1e:38:21:83:71:2a:cc:93:d7:1d:82:a1:23:7f:37:d3:1f:85:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 10 00:12:06 2025 GMT
Not After : Nov 14 23:59:59 2025 GMT
Subject: serialNumber=ef2dccdea86f4aa2af81a8c79233e90a7ff7874cc6b3b1504ec2673e3f6bd1e7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:49:3e:f0:d0:7a:fc:45:0b:1d:78:1a:03:54:
e4:27:70:b6:04:df:89:28:a6:42:83:a4:a9:b3:20:
f3:41:1e:de:d3:23:0b:bb:b8:85:4e:d9:f8:95:a9:
f9:80:29:db:86:ec:0b:76:af:12:09:8e:b3:fc:f7:
6f:f3:e5:6f:e9:41:00:39:1d:45:c0:0f:ad:5f:eb:
72:fd:40:27:af:bc:37:52:2e:c8:6b:e7:80:19:73:
07:a9:8c:95:46:df:f8:14:96:fc:06:c8:06:ea:52:
04:6c:3b:d2:b7:fc:8a:c0:cb:ae:ee:fd:f0:e4:e9:
9b:55:9c:89:0a:3a:e7:5c:33:a8:9a:08:3b:72:3b:
78:4d:ac:66:95:81:fb:5e:87:c4:1d:fb:25:c5:60:
ce:26:8e:3e:83:3f:23:7c:d2:01:53:1b:44:3d:2c:
6c:4f:a6:23:eb:99:ed:78:0e:24:b1:c8:31:c0:d5:
b8:84:17:92:30:b8:a7:b4:9f:31:67:ef:d2:2e:97:
83:67:71:72:75:da:51:ac:fc:99:d6:32:0f:e7:a5:
c7:1a:db:7d:d5:2a:7b:9c:2a:1f:0f:97:1b:55:ed:
07:8a:81:05:b2:17:cc:d4:56:d1:63:27:b0:b0:f9:
55:b5:90:ba:e7:76:f8:23:7d:d0:9d:76:46:fe:c9:
f4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:68:DF:CF:55:9A:5B:6A:1A:0F:2A:65:DD:D2:AC:E4:D7:04:F3:42
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b2f3095-813c-4aa6-ad8f-5cfe7b34fd26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.12.63.0/24
Signature Algorithm: sha256WithRSAEncryption
69:c0:39:bc:cb:79:35:ff:34:e0:b5:dc:fe:c7:7a:92:e4:71:
ce:11:6c:78:d9:75:e8:dd:7f:4c:d5:42:13:8d:67:9a:9d:cf:
a2:f3:7c:a3:1d:2c:04:f4:f3:97:38:39:bd:af:43:a9:da:b8:
26:f8:ff:b5:d4:21:18:1f:24:cb:4e:e9:4f:b0:98:83:35:fa:
41:62:23:ad:34:f7:ee:c2:90:51:e1:4c:d1:18:68:68:bc:de:
5d:1f:2c:58:0f:4e:4c:0c:22:4b:2b:f6:e8:5f:85:63:e2:45:
9a:55:9a:71:43:e2:5c:d3:ee:b9:36:4b:18:ae:2f:58:54:62:
00:a5:16:16:98:f1:f3:03:eb:52:fe:72:58:29:5c:5a:4d:51:
b0:34:53:1e:93:aa:9c:16:3a:dc:db:3f:f1:94:77:10:d7:28:
57:a0:30:f2:b3:df:7c:fe:63:bf:a7:b6:72:78:1b:f9:56:bf:
3a:47:c5:38:d1:c1:94:23:70:42:0b:e5:5e:62:c1:5f:48:e7:
b0:54:23:1b:08:00:3a:3b:31:88:a0:c8:12:5b:ac:2f:ed:be:
20:ad:92:d4:f2:c7:b5:88:7a:27:20:f9:4d:14:51:c2:c5:4a:
a9:7d:2a:d0:d6:af:b6:eb:7b:3e:02:0d:5c:0d:26:c8:9c:bd:
3c:5f:0e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:19:34 2025 by rpki-client