Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cf541f1-60a9-4165-a1ba-527339f40010.roa
File: 8cf541f1-60a9-4165-a1ba-527339f40010.roa (raw, json)
Hash identifier: l+RO1iI1Ns7BzpwVm98tgCN5//JksbT5kMjGTr9cD1g=
Subject key identifier: D6:CD:85:23:5F:A1:DB:A4:2F:51:4C:44:F6:CE:BE:30:FA:B2:6C:B7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 52F922C6317DEABC227C492CAF4EF76FC80DA096
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cf541f1-60a9-4165-a1ba-527339f40010.roa
Signing time: Wed 12 Nov 2025 02:10:56 +0000
ROA not before: Wed 12 Nov 2025 02:10:56 +0000
ROA not after: Wed 17 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 1.178.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:f9:22:c6:31:7d:ea:bc:22:7c:49:2c:af:4e:f7:6f:c8:0d:a0:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 12 02:10:56 2025 GMT
Not After : Dec 17 23:59:59 2025 GMT
Subject: serialNumber=519fa16a130b50338b5017be715322a0d9f61f59b7a4873b0624fd3862a3f8bf, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2f:18:0a:15:a4:70:2f:d5:07:76:af:f1:85:
65:e9:90:0c:6a:f5:e9:9c:e5:b2:16:bd:cb:6b:1c:
58:11:42:94:6d:82:e3:0e:ab:6e:a5:af:10:58:3c:
f0:e3:3b:ab:be:96:6d:c0:79:b0:8b:47:a7:e7:e5:
f3:6e:2b:72:26:7c:05:d8:da:b1:53:0f:3b:99:b2:
66:ac:21:e5:a6:9a:85:47:1e:5e:a0:24:08:30:d3:
fe:3c:4a:17:c7:e9:d2:83:9a:37:74:b4:f2:ca:92:
d7:93:0f:4d:57:be:41:1a:0f:f2:5a:58:71:6c:c3:
7e:46:c5:a5:00:8c:09:1b:a6:b0:3b:6b:a8:4e:9f:
1c:9a:34:5d:79:f8:82:f0:de:b7:be:66:17:ed:6a:
43:01:ba:20:24:b6:a0:a9:76:71:a9:bd:29:d4:bb:
40:50:88:e4:4c:3d:6d:83:f9:15:21:b7:4b:0e:17:
20:60:83:ca:38:4c:b0:c0:a0:ee:b4:89:32:60:59:
c3:fe:f7:bf:b6:72:65:29:1a:56:21:89:91:bc:37:
8c:cb:68:54:58:c9:a6:82:82:5e:21:0d:ab:fb:63:
7e:35:1e:13:5f:23:57:e7:d1:5a:6c:aa:34:da:2d:
f0:a7:c5:fd:60:ba:93:3c:59:77:7a:09:58:c3:40:
b3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CD:85:23:5F:A1:DB:A4:2F:51:4C:44:F6:CE:BE:30:FA:B2:6C:B7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cf541f1-60a9-4165-a1ba-527339f40010.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.178.1.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:f7:50:d6:f6:cd:f1:29:09:20:46:f8:3e:14:9d:e9:35:43:
2c:26:77:3f:bc:81:e6:5f:5a:7b:91:c4:70:ad:74:c0:77:62:
fe:7f:07:73:3c:d1:d1:2d:3d:72:44:cf:e7:bf:da:0f:db:39:
2d:a5:c9:76:9f:b2:92:7d:07:1a:43:2c:69:b9:34:13:32:5b:
78:f5:1d:29:c0:1b:b0:60:f3:b5:33:1e:37:13:ad:b9:f0:f2:
6c:d3:d5:76:79:e1:5c:5c:8c:32:26:63:98:78:ba:86:90:da:
02:03:fc:dd:cd:1b:7d:b0:01:55:02:59:52:2d:41:f1:d7:72:
ec:dc:8d:a4:ce:e1:77:cc:4b:fa:c9:f1:2d:3c:6e:8e:37:8d:
a0:41:f1:26:c3:a5:d2:37:07:b2:3e:8d:87:a3:db:e6:30:0d:
36:aa:41:53:5f:a5:74:ec:e8:2c:77:7c:04:71:3f:da:c1:05:
05:82:d8:6f:63:ba:62:de:24:9c:34:58:3b:80:d3:12:71:ce:
39:d8:a9:2d:95:58:f8:c6:8d:c2:97:2d:80:d1:62:02:aa:f9:
12:b6:bb:0d:b6:a0:39:16:0b:29:bb:69:cf:7f:6d:1e:ab:7d:
ba:80:f2:73:fc:4f:09:9b:00:26:cb:53:d8:46:fb:f6:e2:c2:
6e:ab:fa:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:52:25 2025 by rpki-client