Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38582e98-cedb-40b3-8c3b-55448dc04e3d.roa
File: 38582e98-cedb-40b3-8c3b-55448dc04e3d.roa (raw, json)
Hash identifier: aTu65USh/yAzRzyxoPG/ufovpbL97NYT2aWsRGFymPk=
Subject key identifier: 2F:97:13:D1:C7:52:66:5A:1F:92:8D:42:1C:B6:2F:83:94:08:84:78
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 640DA0BABAE716C435B9D253F720EB14DF4DE21F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38582e98-cedb-40b3-8c3b-55448dc04e3d.roa
Signing time: Sat 18 Oct 2025 03:00:06 +0000
ROA not before: Sat 18 Oct 2025 03:00:06 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f10:c000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:0d:a0:ba:ba:e7:16:c4:35:b9:d2:53:f7:20:eb:14:df:4d:e2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 03:00:06 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=e43293c5d772f4164c0ff316149a87459b1294e36428abbd8e0df220a28685fa, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:57:d8:85:ab:d8:4e:c4:40:d1:c5:7f:15:79:
a3:11:97:b4:ff:e3:03:52:63:7a:b4:02:c7:87:75:
e4:bc:95:36:4f:13:3e:6c:8a:a8:3f:da:d8:0c:a9:
1f:4e:86:be:33:21:40:cd:00:fc:d3:88:04:6d:fa:
28:3d:80:f1:36:40:b0:e6:5e:d1:36:54:4a:8d:d6:
58:59:3d:27:80:9d:4f:89:01:83:df:c7:f2:0f:a1:
2d:ae:ab:6f:00:dc:82:02:2e:5f:46:da:cd:22:51:
a9:12:35:9d:39:54:94:15:7d:ee:95:ea:c4:c9:95:
29:3b:57:79:c3:2f:67:01:ee:ea:58:b8:d7:72:14:
f1:08:61:ed:00:3d:b3:94:2d:58:1e:4d:e3:01:ab:
6a:57:db:5c:96:5c:f6:ea:26:66:a4:2a:99:93:b0:
98:c3:cd:b5:f3:45:95:e7:9b:28:7a:d3:7a:55:e5:
98:4c:59:49:e0:8f:ec:1f:81:b6:c4:9d:96:f8:cb:
a0:f1:00:3d:60:54:c8:bd:f6:4b:f2:87:d2:61:b9:
c9:e5:1a:6c:08:f9:d5:8d:b4:5e:d6:b2:e6:bf:5d:
05:37:ce:31:ab:7f:fb:97:fd:61:cb:85:23:90:b9:
4d:78:00:d5:7a:83:52:0c:24:b7:21:9a:5b:41:5a:
2f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:97:13:D1:C7:52:66:5A:1F:92:8D:42:1C:B6:2F:83:94:08:84:78
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38582e98-cedb-40b3-8c3b-55448dc04e3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f10:c000::/36
Signature Algorithm: sha256WithRSAEncryption
39:ac:ee:ed:2f:0c:39:ca:fb:a9:74:ab:6b:00:df:a8:a2:8e:
6a:7f:d5:0e:32:28:b6:7e:35:14:d5:dd:2a:ca:20:69:26:4d:
09:45:12:4f:bb:56:24:44:1a:32:b5:0e:62:4d:56:e0:e0:44:
46:70:ab:fc:a2:bb:24:26:22:b3:d2:67:f0:5e:f1:95:74:80:
4f:ab:cb:63:d5:1c:c3:f0:d1:d0:0d:37:64:14:05:ed:08:7c:
87:8e:78:7b:c6:38:c2:78:e0:b3:47:c8:0c:43:83:fe:c5:e6:
7f:d5:37:dc:19:ff:6b:21:db:c7:01:90:3a:d7:0a:b2:85:df:
4b:de:72:8f:12:91:b3:06:a3:27:52:f9:27:ee:c3:b5:09:d2:
03:e3:d0:54:6a:66:19:ea:bd:36:7e:b8:62:bc:82:60:03:1f:
ab:bd:a0:25:b4:a7:3a:de:9b:b8:2f:31:d2:9e:8f:10:44:65:
ad:31:55:8a:48:a6:88:a3:00:0d:4a:8b:d2:89:2b:7a:31:5f:
56:3b:3f:a2:0e:70:77:53:15:72:29:2f:f0:e7:98:d3:6a:2b:
21:28:33:1d:54:2f:81:f5:bf:d6:5d:77:f4:57:57:f2:c1:8b:
bc:84:0a:f4:fc:56:87:2c:13:71:88:99:39:b3:e7:ac:08:b8:
23:72:e4:b2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:22:54 2025 by rpki-client