Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ae09067-30bc-4551-a8e9-2ca5d3804caa.roa
File: 2ae09067-30bc-4551-a8e9-2ca5d3804caa.roa (raw, json)
Hash identifier: E4anhYTPKZV76O6zbMKu3BBxblGRq+/O/SCNvDESbmc=
Subject key identifier: 87:C6:A1:A9:14:AD:35:5A:3D:11:3C:11:D1:1B:00:0D:06:27:48:FA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5B86542E8BCF70D7C95B8F71FCB970AAADD4543F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ae09067-30bc-4551-a8e9-2ca5d3804caa.roa
Signing time: Sat 18 Oct 2025 03:01:41 +0000
ROA not before: Sat 18 Oct 2025 03:01:41 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f2b:4000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:86:54:2e:8b:cf:70:d7:c9:5b:8f:71:fc:b9:70:aa:ad:d4:54:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 03:01:41 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=5e9049471a200ba308e386d7e5b6e2c28582d428a56a2184120921948a27c77f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8f:fb:51:04:db:21:6d:09:25:3e:8b:ad:8c:
f4:84:c8:84:e5:0c:be:e8:50:97:01:f4:e4:c0:1a:
a7:2f:7d:8f:8a:f6:06:55:a7:f5:cc:02:fa:6e:84:
b1:5f:53:ad:5e:b1:fe:20:2f:6b:b4:39:da:10:62:
54:b4:8b:07:62:bf:f2:05:dd:ed:1a:97:35:79:e0:
b8:0a:6c:3a:a8:04:38:e8:4e:e4:84:bc:e8:1e:b2:
3c:b6:ee:70:ba:b9:05:e1:fb:e8:08:3b:6e:79:f7:
27:9a:f2:77:5c:99:cf:88:39:3f:4a:19:43:bf:53:
69:ea:2a:c9:e0:35:8f:2e:be:40:86:87:c1:43:d4:
eb:40:9b:8a:9f:32:e9:fd:23:50:bb:4f:62:3e:e6:
79:be:ba:c5:69:5c:25:7c:40:ba:13:b8:c0:dd:30:
ed:cb:78:de:86:88:4d:b8:ba:cd:3e:3a:80:12:d0:
33:45:32:ba:78:85:e0:ed:29:20:dc:8f:3e:ec:ed:
0e:ea:24:af:3a:d6:09:15:e9:b5:1a:d4:26:5c:02:
2b:03:14:74:35:af:4f:53:94:d4:9f:d2:f4:62:e9:
98:f6:a7:09:7f:82:bd:d5:1c:c6:ab:c2:03:14:1a:
a6:bd:1b:88:c3:76:d3:e6:60:2f:72:b8:76:40:07:
37:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C6:A1:A9:14:AD:35:5A:3D:11:3C:11:D1:1B:00:0D:06:27:48:FA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ae09067-30bc-4551-a8e9-2ca5d3804caa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f2b:4000::/36
Signature Algorithm: sha256WithRSAEncryption
34:94:6b:85:43:28:c4:89:7c:05:0f:4e:4e:47:16:17:12:e7:
a6:56:3b:4b:15:0c:99:31:7e:c0:24:a1:1e:8d:25:3f:44:a0:
67:5f:df:e7:70:4b:b3:6a:2f:a0:55:91:67:05:94:2b:da:2c:
f6:a4:42:94:f6:33:43:17:cc:36:4f:f1:9f:09:0b:d1:07:16:
28:fb:f2:0f:26:ae:c5:65:0d:8c:bc:bb:95:a0:d3:01:fb:5c:
16:06:4d:04:45:62:aa:6a:2f:18:76:db:e7:49:50:6b:22:ac:
51:07:1a:13:47:d1:22:6c:82:a7:85:4f:6f:ac:f6:30:16:89:
dd:6b:1f:1e:88:78:63:54:14:e8:c4:9c:32:20:e4:13:c2:0b:
fb:30:78:ab:4b:95:58:60:31:28:1d:b1:0e:4e:db:ea:44:a0:
df:23:42:59:38:72:28:c5:10:2b:3b:92:95:de:70:ff:b8:81:
c7:7d:8a:8c:9b:27:a0:48:09:38:b4:f2:87:6f:79:bc:93:26:
14:50:2b:31:a3:1d:4c:2d:a4:ff:5d:37:7d:eb:1f:cb:da:30:
ec:73:06:d8:64:a5:78:9f:83:8f:70:8f:a5:99:50:bf:7a:c2:
22:70:51:d1:03:6a:df:4c:58:a4:e1:f5:07:f4:0a:23:cb:c8:
c5:6d:5a:4b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:22:03 2025 by rpki-client