Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b78a6ff8-e82a-426b-83f9-bea867aa6269.roa
File: b78a6ff8-e82a-426b-83f9-bea867aa6269.roa (raw, json)
Hash identifier: zpO3b8NL63X5BECpBttOmuP7Ers09DaM3quGNPGB+Y4=
Subject key identifier: 56:B9:F8:1C:8A:AE:4A:9A:14:92:CD:66:0D:F5:5F:1E:95:2C:34:A3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7EE6FAAF378DDA4557CA1C2DAA7B22384EE59561
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b78a6ff8-e82a-426b-83f9-bea867aa6269.roa
Signing time: Wed 15 Oct 2025 15:52:56 +0000
ROA not before: Wed 15 Oct 2025 15:52:56 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.138.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:e6:fa:af:37:8d:da:45:57:ca:1c:2d:aa:7b:22:38:4e:e5:95:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 15:52:56 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=9029da9b1d17913d815b79bfa15323e31d6d6b562f7130c0079d4a647b74f430, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:74:32:70:8c:71:65:a4:f8:ef:ad:67:f8:34:
11:5f:5f:44:5e:31:9f:6f:08:8a:3d:eb:67:b1:6b:
46:2e:ea:80:5e:cd:35:9c:ca:eb:af:01:1b:8d:fc:
d9:23:2f:92:0e:b5:75:81:78:d9:4a:2d:58:25:0a:
de:1d:14:ac:00:a6:b8:4c:2f:2c:20:80:a2:85:27:
ec:39:66:fa:42:42:db:81:76:6e:35:44:8a:b0:f5:
cd:70:ed:fc:6c:61:de:d2:4c:54:b0:72:6d:ab:01:
7a:bd:38:b1:15:25:45:a1:68:11:5d:16:c2:be:32:
85:3f:e9:2c:53:56:0c:96:47:03:f0:53:a6:d9:d0:
3f:bd:28:5b:8e:29:99:10:c0:dc:31:f7:0d:83:1b:
dd:9a:29:b0:3d:0b:c5:aa:dc:0f:3c:ad:92:dd:31:
74:54:69:63:13:20:fe:f2:f1:1c:df:38:d5:50:ff:
d0:bb:da:2f:d3:39:e2:1b:0f:66:52:87:fa:0d:e1:
d7:4b:f3:79:43:ef:60:45:b7:a5:84:b9:71:89:ac:
c1:13:53:71:62:73:86:31:43:e8:e5:57:9d:43:a5:
8c:8c:29:20:73:3a:84:0f:dc:f9:6f:85:a7:03:94:
bc:8a:0e:7d:f2:54:7e:6e:aa:c2:50:e1:00:81:12:
98:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B9:F8:1C:8A:AE:4A:9A:14:92:CD:66:0D:F5:5F:1E:95:2C:34:A3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b78a6ff8-e82a-426b-83f9-bea867aa6269.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.138.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:39:6c:b7:41:4f:40:1d:d3:2c:0f:95:7e:13:09:8a:bf:f5:
b4:62:e7:f9:83:6b:19:61:d1:ea:6a:2e:fa:81:eb:3e:55:7c:
1f:4b:84:a9:87:31:b9:c3:fb:c3:8a:fe:64:2a:9e:b6:1a:2a:
68:3b:a3:91:67:c1:b4:20:32:d5:90:f1:58:0e:d1:de:6d:95:
11:cf:b7:7e:2c:9c:d6:18:26:42:ac:7f:be:77:60:ac:be:63:
3d:26:b8:84:3d:b4:75:18:75:ab:d3:02:28:3e:4e:62:1f:dd:
84:08:6e:3b:f3:fa:3e:bc:98:9e:f0:3a:b4:ef:09:93:df:48:
5b:98:77:9a:8e:3e:a1:5d:1d:71:7e:49:37:79:7d:71:30:69:
41:bf:fd:1a:27:82:ae:05:9b:4c:1e:a1:79:ce:bc:6f:e0:53:
58:20:67:9c:1a:16:38:5f:9f:3a:ef:d1:1c:4d:ce:a5:85:85:
e1:e2:f5:68:65:8d:b3:e3:70:f0:de:e5:54:bc:fc:88:d9:e3:
c4:72:5e:c1:c0:ba:bc:a0:69:60:ac:4f:14:d5:11:ef:5f:e3:
e7:e8:69:52:36:35:60:0c:d4:02:0f:de:00:d4:03:60:fa:68:
60:a7:27:a3:c9:38:b7:ee:af:5c:31:7f:67:c9:86:5d:8a:7a:
85:d7:a4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:12 2025 by rpki-client