Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2b14584-beb1-4be9-ba33-b2dbc4ebb1a1.roa
File: d2b14584-beb1-4be9-ba33-b2dbc4ebb1a1.roa (raw, json)
Hash identifier: xesA0t3Mq5XxvvsFZw1wFQ8PMi3LQ7ye79SENq6BCbs=
Subject key identifier: D8:39:8A:6F:C7:94:14:63:EC:B9:A3:FB:27:87:C4:AC:1A:BD:80:26
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 31B8BD220E58B9D486E46C476835B695FD81E854
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2b14584-beb1-4be9-ba33-b2dbc4ebb1a1.roa
Signing time: Tue 21 Oct 2025 00:50:09 +0000
ROA not before: Tue 21 Oct 2025 00:50:09 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 78.12.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:b8:bd:22:0e:58:b9:d4:86:e4:6c:47:68:35:b6:95:fd:81:e8:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 21 00:50:09 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=0109108474b81a8443b2d30f640aabacf05b0de5e0a9822f511c47a2d210c89a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d4:c7:0b:7b:a4:ca:d4:30:e3:d7:51:76:d8:
43:5e:b7:5a:a2:5f:da:99:e7:17:fb:77:f1:8b:6a:
29:8d:74:05:67:6b:d2:cf:ad:73:75:a6:f2:55:07:
a6:30:cd:36:c1:b6:dd:de:07:c4:1b:e4:40:3c:1d:
d8:b6:74:e5:f3:19:48:9f:f0:04:61:25:e9:6f:3b:
ee:85:79:17:e4:b5:4f:ce:dd:a8:0e:d7:30:94:80:
b2:32:82:b5:4f:74:ce:88:c3:0c:27:63:30:ff:f4:
d9:38:59:a6:99:34:d3:1f:90:f9:55:23:f8:15:7e:
c0:ac:58:a1:ae:3f:ae:a5:0a:11:1d:d0:4a:e1:44:
28:92:2f:94:94:25:08:44:f3:4f:9a:e6:e9:1c:f8:
d8:15:0f:e3:0f:75:65:5d:d7:61:88:be:55:41:62:
ff:46:36:b7:72:fe:1a:e2:24:ae:2b:0d:ac:81:c1:
45:d7:ed:ad:9a:f1:0c:9c:f4:bb:d8:81:11:83:ab:
fd:db:cb:9b:2f:a2:e2:8c:e5:22:f4:7b:71:dd:b2:
4c:dc:80:45:4a:45:d5:fa:a3:5d:94:80:02:b2:f0:
14:83:88:87:c1:6b:d3:bf:b4:2e:71:b4:4c:34:da:
fa:a6:d1:8f:08:69:00:4f:f7:38:5d:ad:ee:87:b9:
5d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:39:8A:6F:C7:94:14:63:EC:B9:A3:FB:27:87:C4:AC:1A:BD:80:26
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2b14584-beb1-4be9-ba33-b2dbc4ebb1a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.12.60.0/24
Signature Algorithm: sha256WithRSAEncryption
07:a1:69:63:39:75:f6:00:05:3d:35:c5:bd:a0:01:5a:af:32:
2f:7c:e2:75:0c:33:10:0c:4f:2f:75:b0:ac:e6:20:38:67:c4:
24:ed:27:15:6b:ac:a8:c4:a1:70:78:7c:56:3b:80:de:ed:47:
50:e9:1d:d4:04:1e:e5:2e:26:08:62:c0:22:8c:a3:69:15:1c:
f6:86:c2:29:7c:6d:1e:b8:be:11:02:4c:3c:6c:8f:b2:ac:5e:
1a:aa:91:70:b2:e3:1e:1c:b9:2f:ac:13:44:1e:98:73:91:e1:
80:4b:7c:27:55:fa:ab:95:fc:38:bd:85:d7:26:0f:7b:18:2d:
0e:97:a0:ea:ab:0d:b8:61:87:06:7d:ce:38:b0:91:92:37:a2:
8b:a7:3b:af:cf:94:a7:a6:35:2e:de:7f:49:44:e2:de:f9:fe:
00:32:5a:b1:68:cd:d7:32:5f:fb:5b:a4:30:a5:ab:a1:60:c5:
54:18:0f:8a:a4:e2:4e:3c:fc:b0:2c:35:44:75:88:e5:6c:6b:
ce:69:f6:d4:b1:12:ab:f5:11:61:21:18:78:86:84:9d:2d:c6:
2f:32:8e:1f:e8:3f:3e:7d:10:25:b0:1e:2a:86:d2:53:e3:74:
2a:64:67:11:9d:bd:d0:f5:83:69:e6:28:c3:52:0f:1c:ff:a5:
5c:7f:c9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:49:00 2025 by rpki-client