Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a06ef9a-306c-48a7-a898-08249a2104fa.roa
File: 2a06ef9a-306c-48a7-a898-08249a2104fa.roa (raw, json)
Hash identifier: XK9LcTs7mSd8JDbDTf1T+wweZQLFUQ3XdJP9uzyfcIE=
Subject key identifier: 8B:80:5A:23:F2:BB:7A:94:75:02:5F:DC:0A:61:A3:4E:44:7D:68:EB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 15C42F71562EF18A14229283FB5E5F52F3AA1692
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a06ef9a-306c-48a7-a898-08249a2104fa.roa
Signing time: Fri 26 Sep 2025 00:22:03 +0000
ROA not before: Fri 26 Sep 2025 00:22:03 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f60:2000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:c4:2f:71:56:2e:f1:8a:14:22:92:83:fb:5e:5f:52:f3:aa:16:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 26 00:22:03 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=67d633692358644808e4acfe819704d5d609b26e91f5791514606625ed23283b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:71:52:7f:da:c3:cb:d2:4e:1c:6d:73:0e:fe:
b7:b0:b1:2d:18:4a:64:27:18:8d:21:ec:13:1f:cf:
e9:d7:42:c5:1a:f1:70:4b:e1:9d:49:d3:60:c4:64:
05:96:50:b3:ec:12:ef:90:ed:fc:e8:4c:21:31:a5:
8f:cf:c0:ff:6d:ea:8e:c7:ef:b9:ff:be:af:af:a4:
f7:09:86:ea:c4:d9:30:cf:7e:86:59:a5:22:5f:96:
70:e7:15:8a:ac:a0:be:a1:19:e2:db:4e:2b:a5:cb:
24:c8:11:34:77:e3:6d:f7:03:1a:19:58:bf:0d:fa:
02:40:c3:e5:b1:32:b9:44:1a:61:45:21:db:16:49:
51:84:67:56:3e:3c:a8:9c:24:06:c2:f7:e4:f6:f7:
87:91:74:36:48:7d:89:07:50:6c:8e:a7:a3:49:71:
77:a5:ae:87:00:9b:25:e3:d9:e5:be:ab:a0:40:46:
ab:bd:70:91:e3:a0:35:b7:6e:5a:d2:86:d4:47:d7:
a8:e8:65:62:10:ef:9a:ab:57:6d:27:1f:1b:49:82:
d1:b5:be:2c:7f:c3:52:dd:df:be:00:ed:ff:c5:6a:
b9:89:cb:71:77:51:6f:84:10:37:6c:38:76:b6:86:
75:ac:c8:f3:9d:04:05:fb:34:23:7a:b5:9a:44:77:
78:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:80:5A:23:F2:BB:7A:94:75:02:5F:DC:0A:61:A3:4E:44:7D:68:EB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a06ef9a-306c-48a7-a898-08249a2104fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f60:2000::/40
Signature Algorithm: sha256WithRSAEncryption
22:fd:51:53:c9:08:6d:5e:1c:d9:a0:31:6b:d5:06:89:41:ca:
39:0b:fb:59:65:0b:71:7d:ce:4c:14:01:b5:d1:3e:ed:4d:c0:
83:2f:3a:f6:14:43:8d:b1:96:17:1d:0e:64:3a:61:7b:47:5d:
df:48:38:73:94:88:72:17:ea:64:ce:59:89:5a:fc:b9:8c:47:
c3:9e:73:46:bb:b4:87:61:bb:f9:92:b3:e5:4d:70:1a:35:c0:
f3:c2:4c:5d:be:b7:7e:29:93:c1:71:04:b3:db:59:81:f8:99:
35:c5:d3:0c:f8:81:92:f0:77:14:03:fa:87:8f:2e:ea:b7:68:
3f:10:ad:63:6d:c0:2b:9c:f6:d2:62:6e:16:59:8e:c0:5d:4b:
0a:f6:a8:0e:04:6c:a6:e3:99:e4:fb:f3:6d:00:e7:8b:be:08:
a5:2a:b7:fd:f1:7c:c9:ed:77:39:5c:18:00:79:9c:4f:e1:c2:
d0:30:4c:cd:a9:cf:4f:38:1d:31:72:5f:3d:03:10:94:f9:1f:
99:2e:42:be:95:48:7d:2d:73:c5:d5:08:d6:bf:ff:ec:18:7f:
98:20:65:6e:01:94:da:19:11:c4:79:fa:55:a7:8c:04:2a:76:
fc:58:ac:17:6e:f3:8c:7f:f8:fd:88:e7:5c:be:4b:5b:47:4f:
cc:32:65:05
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUFcQvcVYu8YoUIpKD+15fUvOqFpIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTI2MDAyMjAzWhcNMjUxMDMxMjM1OTU5
WjB6MUkwRwYDVQQFE0A2N2Q2MzM2OTIzNTg2NDQ4MDhlNGFjZmU4MTk3MDRkNWQ2
MDliMjZlOTFmNTc5MTUxNDYwNjYyNWVkMjMyODNiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvcVJ/2sPL0k4cbXMO/rewsS0YSmQnGI0h7BMfz+nXQsUa
8XBL4Z1J02DEZAWWULPsEu+Q7fzoTCExpY/PwP9t6o7H77n/vq+vpPcJhurE2TDP
foZZpSJflnDnFYqsoL6hGeLbTiulyyTIETR34233AxoZWL8N+gJAw+WxMrlEGmFF
IdsWSVGEZ1Y+PKicJAbC9+T294eRdDZIfYkHUGyOp6NJcXelrocAmyXj2eW+q6BA
Rqu9cJHjoDW3blrShtRH16joZWIQ75qrV20nHxtJgtG1vix/w1Ld374A7f/FarmJ
y3F3UW+EEDdsOHa2hnWsyPOdBAX7NCN6tZpEd3hPAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUi4BaI/K7epR1Al/cCmGjTkR9aOswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzJhMDZlZjlhLTMwNmMtNDhhNy1hODk4LTA4MjQ5YTIxMDRmYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB9gIDANBgkqhkiG9w0BAQsFAAOCAQEAIv1RU8kIbV4c2aAxa9UGiUHK
OQv7WWULcX3OTBQBtdE+7U3Agy869hRDjbGWFx0OZDphe0dd30g4c5SIchfqZM5Z
iVr8uYxHw55zRru0h2G7+ZKz5U1wGjXA88JMXb63fimTwXEEs9tZgfiZNcXTDPiB
kvB3FAP6h48u6rdoPxCtY23AK5z20mJuFlmOwF1LCvaoDgRspuOZ5PvzbQDni74I
pSq3/fF8ye13OVwYAHmcT+HC0DBMzanPTzgdMXJfPQMQlPkfmS5CvpVIfS1zxdUI
1r//7Bh/mCBlbgGU2hkRxHn6VaeMBCp2/FisF27zjH/4/YjnXL5LW0dPzDJlBQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:30:51 2025 by rpki-client