Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11922458-95a1-49eb-ab5f-e50a3e748405.roa
File: 11922458-95a1-49eb-ab5f-e50a3e748405.roa (raw, json)
Hash identifier: mrsN4nW16MGKLKB/ntlYd06EHK2JPsF/RGpgig0isZ8=
Subject key identifier: 4F:60:45:26:23:55:40:EF:CE:94:16:6F:EE:F0:05:5A:05:59:02:7D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 409714B1A6E3AAF4726F9F4A51C257946C462524
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11922458-95a1-49eb-ab5f-e50a3e748405.roa
Signing time: Sat 18 Oct 2025 00:20:55 +0000
ROA not before: Sat 18 Oct 2025 00:20:55 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f15:8000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:97:14:b1:a6:e3:aa:f4:72:6f:9f:4a:51:c2:57:94:6c:46:25:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 00:20:55 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=137b2bc4e2eb0154aad10cc6725ed31dfd88d15883dc09aebefc8cab9f478e89, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ef:e5:7a:63:45:b6:cb:81:4b:94:b1:f0:a3:
72:d3:9c:45:4e:51:7b:cc:7d:07:48:a4:26:e1:6a:
d8:03:da:6c:86:fe:a1:57:53:74:cf:5e:2a:47:8b:
f8:09:5a:a3:26:ab:02:ad:d8:97:8b:da:08:76:38:
a7:f4:6f:85:85:7c:0f:54:72:b2:fe:62:4b:5c:d9:
fa:5e:ab:3d:b6:a7:8c:e8:34:9b:23:01:c7:19:11:
fb:ee:5b:2f:db:b6:0f:09:d2:87:69:fc:fa:04:68:
7e:01:38:20:cc:d3:52:00:9b:ae:63:30:e0:78:a8:
d5:6c:0c:8e:8a:fa:cc:f3:62:ef:ff:81:e9:c5:0c:
8a:30:54:46:61:ff:96:70:8a:c1:1c:9e:86:6a:25:
84:45:fe:12:bb:bd:05:b6:13:f3:2c:d2:f4:6d:e3:
ef:e8:db:b0:f7:5f:fa:70:ee:9a:10:af:a7:21:6a:
5c:52:23:9e:3a:f1:5b:e6:34:e6:12:97:e3:49:76:
33:71:84:c1:68:d1:96:72:d5:77:b7:77:08:30:28:
00:6d:84:29:ff:28:40:a8:dd:13:26:d4:42:cd:f9:
fd:4a:71:81:c6:92:e9:a4:5b:0b:01:6a:c5:87:d9:
1d:ca:68:58:db:b1:96:31:f2:b2:f9:fa:0e:2c:d8:
f9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:60:45:26:23:55:40:EF:CE:94:16:6F:EE:F0:05:5A:05:59:02:7D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11922458-95a1-49eb-ab5f-e50a3e748405.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f15:8000::/36
Signature Algorithm: sha256WithRSAEncryption
c4:aa:70:58:a1:c5:9e:49:db:03:56:8f:c6:f6:15:e6:52:e9:
6c:c3:60:48:78:d3:9f:bc:60:76:7c:21:33:50:b3:35:fc:62:
d4:06:9f:88:5d:79:68:f3:cc:71:5a:09:ac:a5:ed:b6:53:a3:
e1:27:69:d9:45:d3:6c:30:8f:e6:8d:79:49:69:85:3c:66:b0:
26:8f:be:1b:c7:e4:05:2c:06:7d:72:e1:fd:c4:3a:4d:53:ea:
ae:64:3e:6f:86:4c:38:e8:08:ff:64:91:16:e7:4d:22:3d:c2:
51:b7:58:96:a5:6d:d3:00:f9:8a:8b:0d:a4:7c:e9:25:4c:78:
8a:e3:a7:98:2b:45:b8:6f:92:28:55:a4:87:1e:ec:7f:67:b2:
13:03:2a:b8:59:7d:4c:38:16:c7:c8:87:55:71:bf:6e:20:97:
fa:c6:20:c5:7b:40:d6:e1:51:79:96:43:01:33:b5:aa:50:e8:
ca:8e:4f:02:60:f4:3d:53:32:0d:44:80:7e:38:fe:83:c8:ae:
db:18:da:88:46:93:b8:cc:03:57:4f:93:ae:9b:1a:bd:ed:0d:
43:15:6a:a4:57:5b:cd:29:e8:47:7b:30:e3:e9:66:e8:96:48:
e8:c6:b0:17:db:ab:0a:54:90:0d:1f:70:04:7e:63:68:ec:4d:
a8:8a:b0:62
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:18:17 2025 by rpki-client