
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17a487a1-809a-4c4e-b710-02ccfbd92294.roa
File: 17a487a1-809a-4c4e-b710-02ccfbd92294.roa (raw, json)
Hash identifier: 9/S3SLqOh4bd7YKyKbzf70JOyfwB0i+5amHa4AMTSD0=
Subject key identifier: 71:14:08:EC:34:77:8E:26:CA:BD:42:FC:D3:7A:3B:88:58:94:C4:FA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2BE7D96F2A25BF9D8C14490BA095B5D7742DB283
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17a487a1-809a-4c4e-b710-02ccfbd92294.roa
Signing time: Sat 18 Oct 2025 04:01:03 +0000
ROA not before: Sat 18 Oct 2025 04:01:03 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1fff:8080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:e7:d9:6f:2a:25:bf:9d:8c:14:49:0b:a0:95:b5:d7:74:2d:b2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 04:01:03 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=97fbfd4162b5908a82e4fa4911bbf25224aed4637b1d2da584fd141f556ed7f0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:44:cf:ea:33:56:35:f0:a8:9e:a1:aa:95:0b:
03:0a:b6:d6:74:0e:30:86:50:b5:34:e3:92:f3:7c:
e5:ad:99:bc:98:19:1c:ba:d8:a2:f0:d4:02:c1:eb:
51:aa:d1:f4:7f:e7:a1:97:2a:89:1b:f8:03:67:6e:
10:8d:76:91:6e:37:83:1d:7e:e1:bf:62:da:e4:62:
6c:fc:f9:de:ab:db:9d:17:e8:16:35:42:16:8a:b3:
c2:83:d2:c0:50:f1:6b:b8:20:b4:cd:61:8c:db:89:
60:8e:e5:02:d5:e1:a8:53:cf:e9:a9:5b:bb:4d:4b:
cd:b4:d2:f5:7a:c6:c1:5d:7e:ff:6e:ff:8c:bc:53:
67:a8:6d:44:b6:e7:90:0c:01:0f:52:88:d6:f4:c9:
3f:bd:52:9f:6c:03:f6:3f:e9:67:5f:f8:bd:65:78:
0c:09:3f:30:72:8d:21:01:4f:63:17:dc:ba:cd:44:
3f:36:73:10:c9:65:43:3e:fe:df:10:99:6f:41:27:
8c:be:9b:61:ca:07:fa:f7:ef:1d:6b:1f:a7:06:54:
17:67:cf:3b:96:04:62:4c:99:12:f9:67:26:3f:66:
db:de:23:2a:12:14:4d:5c:e7:f6:45:86:5e:b9:c0:
35:c9:86:a7:e1:90:09:4f:7c:43:d9:dd:cb:56:7d:
9b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:14:08:EC:34:77:8E:26:CA:BD:42:FC:D3:7A:3B:88:58:94:C4:FA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17a487a1-809a-4c4e-b710-02ccfbd92294.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:8080::/48
Signature Algorithm: sha256WithRSAEncryption
5f:09:d0:56:ba:de:b5:7a:4d:f7:16:8e:fc:c9:b6:cd:08:3f:
0a:b1:59:55:3c:81:c4:ee:3a:a7:dd:fd:96:5c:3c:f9:03:e5:
52:52:67:78:0d:81:1c:9e:62:25:d8:0f:b3:5b:51:98:74:b8:
32:7f:5a:f9:26:d3:b8:51:86:cc:39:cc:af:02:84:58:2d:4d:
b7:6b:12:61:61:02:cc:36:43:35:9f:03:22:00:00:bc:f1:71:
6e:82:16:43:31:02:dc:0f:50:42:8f:61:6f:89:b5:41:db:9b:
7e:68:7e:6e:51:57:e3:0d:d2:1b:76:a4:62:59:1e:ba:61:29:
82:e8:cd:8f:a6:0c:94:d4:3b:c2:c3:75:af:0f:4f:ed:84:5b:
67:e9:34:dc:43:82:63:25:9f:5e:43:64:bc:30:9f:c0:be:13:
e1:76:ee:e3:ce:70:e6:a0:0e:6a:78:42:7e:ea:12:5c:cc:21:
24:37:b6:44:53:b5:af:2f:17:25:18:60:94:d3:f4:20:7e:9f:
3e:bf:8d:b6:4a:20:f3:dd:bb:1f:a4:b8:ab:be:b7:a7:71:5f:
95:3c:5d:2b:02:8f:bf:28:46:23:8b:5e:ef:b9:ab:28:b8:61:
d7:3b:98:a4:30:0b:b7:ee:77:b6:99:a0:f4:a9:6a:b4:ae:81:
02:23:82:f9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:00:41 2025 by rpki-client