Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03f1ec6c-4fea-4ff6-bbae-ac1ab1c9e722.roa
File: 03f1ec6c-4fea-4ff6-bbae-ac1ab1c9e722.roa (raw, json)
Hash identifier: WqHD8gZxQdgf0FopIy6lqpGs9P1GJbLNxYFeYefOCWw=
Subject key identifier: 8A:89:9B:B2:19:92:7D:83:DC:9A:36:B4:BC:4B:07:14:CF:B7:6A:19
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1B3D10F9EBA42D0E6A4BA578002031407A25AC49
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03f1ec6c-4fea-4ff6-bbae-ac1ab1c9e722.roa
Signing time: Fri 17 Oct 2025 20:00:18 +0000
ROA not before: Fri 17 Oct 2025 20:00:18 +0000
ROA not after: Fri 21 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f00:81a0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:3d:10:f9:eb:a4:2d:0e:6a:4b:a5:78:00:20:31:40:7a:25:ac:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 17 20:00:18 2025 GMT
Not After : Nov 21 23:59:59 2025 GMT
Subject: serialNumber=88b6cd6d356a704f34ee8a48d456731212946e65926ebad607af9f26034f087f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2f:3b:af:8e:86:72:03:2e:5b:89:1f:87:43:
3e:1e:40:e8:d9:1f:a6:6d:cc:ec:16:27:76:c5:35:
07:fe:1b:d6:c4:6d:09:75:55:4d:26:41:11:f3:f0:
59:92:5b:21:2a:2b:db:73:40:90:4e:83:9f:46:71:
61:d6:fd:30:57:03:6d:90:ec:78:83:ba:fc:1e:9d:
26:44:aa:8c:85:bf:6b:1e:d3:48:c6:89:fe:b4:fa:
25:ee:22:dd:41:25:ac:bd:03:9a:d8:74:2d:2c:85:
cd:a3:30:69:d7:89:03:9a:dd:77:38:c6:0d:99:c2:
b7:39:64:7b:f9:78:39:84:a2:b1:94:c8:1d:10:7a:
6e:4c:e6:de:61:20:6e:21:8b:d9:1f:b1:d9:94:ef:
13:e1:14:91:db:6f:f2:5f:58:b6:10:04:2e:a3:75:
8d:8c:66:42:53:98:59:ad:d0:17:e1:d6:56:c7:19:
70:e1:41:28:e3:1d:41:8a:98:dc:78:53:0e:22:db:
a8:e0:09:27:6c:58:97:d0:c8:31:94:0a:25:03:28:
90:a9:f8:82:14:83:b6:8c:36:a1:23:e9:c7:ce:d4:
ce:99:56:94:04:63:fe:e3:cb:85:c7:41:15:85:05:
6f:b6:03:b4:f4:55:93:a9:2b:73:00:b5:2d:bc:8a:
79:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:89:9B:B2:19:92:7D:83:DC:9A:36:B4:BC:4B:07:14:CF:B7:6A:19
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03f1ec6c-4fea-4ff6-bbae-ac1ab1c9e722.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f00:81a0::/48
Signature Algorithm: sha256WithRSAEncryption
b6:e8:11:9a:5a:95:0c:13:2a:a3:37:e5:cc:46:d1:5f:21:99:
41:6f:e2:49:13:3d:d0:a4:56:df:da:21:77:e0:76:8e:c7:1d:
34:7a:72:ad:30:59:bc:88:6c:3d:81:9e:5c:4e:f6:31:d9:66:
83:e3:8c:3c:90:54:26:71:ee:2f:24:15:2e:4f:a6:2a:dd:c9:
91:15:06:0f:66:1d:d8:e4:18:51:ed:bd:a1:cf:21:77:97:69:
fc:69:25:29:b6:79:6c:a7:e2:d2:21:49:25:d7:1a:17:97:b2:
a0:ba:45:87:7a:c4:de:a7:f3:db:c0:ae:2d:4b:15:b3:20:cf:
69:67:9e:34:48:08:10:c9:76:ec:58:b6:74:3e:5d:ff:1c:24:
a7:a0:d0:f4:27:4e:3e:fc:eb:47:2a:0c:e6:3e:5d:17:df:20:
2c:50:62:74:b4:11:3b:9a:1f:87:ee:e5:c6:32:fc:0b:73:40:
c5:6c:cc:7e:08:f3:26:b6:8d:8a:a2:2f:07:f3:e1:60:9f:58:
b9:d0:78:70:41:d4:e4:ca:28:4a:52:5d:a7:80:9b:f6:d0:79:
b9:8e:06:e6:51:6e:c2:75:be:45:8a:b2:0c:d9:43:7c:9d:8d:
d2:d9:12:80:14:17:4b:03:b2:cc:ff:39:66:1b:6d:f6:eb:83:
46:74:d9:a3
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUGz0Q+eukLQ5qS6V4ACAxQHolrEkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE3MjAwMDE4WhcNMjUxMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A4OGI2Y2Q2ZDM1NmE3MDRmMzRlZThhNDhkNDU2NzMxMjEy
OTQ2ZTY1OTI2ZWJhZDYwN2FmOWYyNjAzNGYwODdmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC+LzuvjoZyAy5biR+HQz4eQOjZH6ZtzOwWJ3bFNQf+G9bE
bQl1VU0mQRHz8FmSWyEqK9tzQJBOg59GcWHW/TBXA22Q7HiDuvwenSZEqoyFv2se
00jGif60+iXuIt1BJay9A5rYdC0shc2jMGnXiQOa3Xc4xg2Zwrc5ZHv5eDmEorGU
yB0Qem5M5t5hIG4hi9kfsdmU7xPhFJHbb/JfWLYQBC6jdY2MZkJTmFmt0Bfh1lbH
GXDhQSjjHUGKmNx4Uw4i26jgCSdsWJfQyDGUCiUDKJCp+IIUg7aMNqEj6cfO1M6Z
VpQEY/7jy4XHQRWFBW+2A7T0VZOpK3MAtS28inl3AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUiombshmSfYPcmja0vEsHFM+3ahkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzAzZjFlYzZjLTRmZWEtNGZmNi1iYmFlLWFjMWFiMWM5ZTcyMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB8AgaAwDQYJKoZIhvcNAQELBQADggEBALboEZpalQwTKqM35cxG0V8h
mUFv4kkTPdCkVt/aIXfgdo7HHTR6cq0wWbyIbD2BnlxO9jHZZoPjjDyQVCZx7i8k
FS5PpirdyZEVBg9mHdjkGFHtvaHPIXeXafxpJSm2eWyn4tIhSSXXGheXsqC6RYd6
xN6n89vAri1LFbMgz2lnnjRICBDJduxYtnQ+Xf8cJKeg0PQnTj7860cqDOY+XRff
ICxQYnS0ETuaH4fu5cYy/AtzQMVszH4I8ya2jYqiLwfz4WCfWLnQeHBB1OTKKEpS
XaeAm/bQebmOBuZRbsJ1vkWKsgzZQ3ydjdLZEoAUF0sDssz/OWYbbfbrg0Z02aM=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:01:58 2025 by rpki-client