Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b686aa2-54bd-4401-b362-571c7282451f.roa
File: 4b686aa2-54bd-4401-b362-571c7282451f.roa (raw, json)
Hash identifier: 1uzdX+5cdzVnSAWOK7Ql5AflXwZzI/C2rG/B1MnTlSY=
Subject key identifier: 33:F9:A1:AC:87:24:C8:7D:FC:C3:6E:FC:9F:DB:E8:9C:3B:EB:AE:82
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 591E4604B3F056C3AD8B3BD64F22CD700DF69D24
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b686aa2-54bd-4401-b362-571c7282451f.roa
Signing time: Tue 28 Oct 2025 00:01:09 +0000
ROA not before: Tue 28 Oct 2025 00:01:09 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.78.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:1e:46:04:b3:f0:56:c3:ad:8b:3b:d6:4f:22:cd:70:0d:f6:9d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 00:01:09 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=4526b219491feaee1a6d91dac45010905881c57c856d54550974714a6b593026, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d7:c6:5b:6d:71:71:c8:1e:9e:66:6f:15:ad:
2b:56:54:36:89:67:79:39:c4:a1:3a:56:40:81:f7:
91:35:0f:ac:f8:4d:d2:5e:f5:65:69:cd:19:0b:6d:
73:5f:6b:8f:50:a0:56:90:64:48:c0:43:ca:de:14:
a9:5a:08:a9:5a:67:d5:c1:0b:8b:51:8b:eb:74:07:
5e:4a:ae:d3:e3:1f:2c:16:76:dd:87:cc:8c:bd:a3:
67:f0:54:66:2f:ee:f5:5e:23:dd:16:c5:1b:90:2a:
43:4d:ec:d5:9f:11:16:10:17:cd:33:28:0b:fd:33:
67:a7:ea:4f:e6:0b:d6:83:08:20:9c:b7:8d:d5:53:
eb:a9:ab:dd:49:97:8b:96:55:bc:77:fd:b6:38:59:
2d:40:4b:f3:87:8c:0a:6d:cd:ee:ec:7a:64:53:9c:
33:a8:d3:6e:57:46:57:26:7e:d7:a1:b3:f9:13:8e:
9d:72:e5:56:ed:50:52:d9:7c:f3:ec:98:6a:3e:eb:
80:d7:28:03:78:48:b9:cd:79:3c:84:b4:20:bd:66:
c9:ae:1e:99:8c:37:30:ac:dd:76:fb:5d:64:e4:e8:
b8:47:12:97:76:c6:6d:ba:27:fb:32:a0:c1:b0:16:
f7:f6:14:86:61:c8:0b:dd:02:cf:f9:96:16:f2:94:
34:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F9:A1:AC:87:24:C8:7D:FC:C3:6E:FC:9F:DB:E8:9C:3B:EB:AE:82
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b686aa2-54bd-4401-b362-571c7282451f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.78.192.0/22
Signature Algorithm: sha256WithRSAEncryption
75:97:72:f6:89:db:f0:2c:c8:dd:df:4b:5b:0e:43:c0:bc:b5:
3b:7d:47:3b:0c:0d:f4:88:a6:d0:24:13:c1:3c:c1:00:3b:39:
bd:93:67:97:95:d7:87:1e:8d:cd:ff:66:44:03:f4:30:e0:ee:
62:c4:3f:1e:26:89:e3:13:cf:0d:02:7b:40:83:3d:52:80:d7:
c8:f2:ba:f3:17:ad:8d:60:40:bb:fa:72:ce:47:33:8d:e3:9f:
f8:4f:ca:08:4e:43:59:60:15:03:5f:ce:24:be:9e:80:e1:ff:
f4:10:da:12:ee:35:d4:df:94:ca:41:7b:2f:fb:65:87:b6:53:
7b:0f:ac:91:50:c9:a8:be:91:ec:31:39:2b:fa:dd:d6:95:7b:
a5:e0:a2:0e:b3:94:5b:5d:68:44:38:f3:cf:6d:8c:b6:cf:53:
53:41:94:dc:6e:c1:5f:e1:7f:43:6f:8d:4a:8e:ed:fe:2e:6d:
f9:50:45:7b:84:0f:dc:54:06:14:17:97:76:81:73:0c:a8:72:
29:86:1e:6d:0d:f7:8d:b0:76:9a:d1:1f:21:6b:54:9b:01:ce:
2b:03:5a:0d:35:e6:b8:e7:ff:b3:e1:b8:39:2a:07:36:a7:d5:
5e:12:25:1c:64:ef:5c:de:8e:df:83:8b:9e:24:dd:c4:35:1a:
2b:0f:93:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 07:03:03 2025 by rpki-client