Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46a5bb7b-18ea-4b67-8c16-9d16358550fb.roa
File: 46a5bb7b-18ea-4b67-8c16-9d16358550fb.roa (raw, json)
Hash identifier: 5rRnGrber/ug0EtEiCiqtBXXaMdvFkLvRrE5JLWfQu4=
Subject key identifier: 00:60:6A:64:FF:A7:A1:89:A8:F0:85:DB:F8:28:F0:D3:E6:90:88:6A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0EF5B60196909B396B775BB48D2CFEDBFCE707C5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46a5bb7b-18ea-4b67-8c16-9d16358550fb.roa
Signing time: Fri 10 Oct 2025 14:22:04 +0000
ROA not before: Fri 10 Oct 2025 14:22:04 +0000
ROA not after: Fri 14 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f25:c000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:f5:b6:01:96:90:9b:39:6b:77:5b:b4:8d:2c:fe:db:fc:e7:07:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 10 14:22:04 2025 GMT
Not After : Nov 14 23:59:59 2025 GMT
Subject: serialNumber=082eb661e384a565f50ae59a43d58dfaf5eb9bdf6a7807baf25519ce35a64b70, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:54:20:e1:ad:51:b9:b4:e5:ab:a6:b4:8f:2c:
b1:e0:44:92:8f:0f:76:4c:e6:35:97:4c:08:6f:6d:
44:20:10:73:ce:22:da:b7:1e:50:bc:cf:06:f4:a8:
40:5f:f3:6b:d1:51:96:6c:5d:cf:72:51:1a:36:09:
21:a1:48:c6:c1:8f:06:54:bc:6c:00:ea:09:13:ef:
ef:dd:56:f3:79:85:63:0b:5a:a4:2a:29:10:3b:2e:
41:73:86:83:a2:58:c9:3b:b2:c1:c1:28:31:ab:b4:
20:32:dc:09:6e:5a:0f:58:98:db:34:53:15:5a:90:
61:62:41:70:c1:41:f5:5d:84:52:e8:33:4a:eb:4c:
ae:99:a1:82:cd:c8:e7:30:d5:41:b0:4f:b4:95:d3:
ef:6d:91:07:f7:65:67:ac:51:fc:95:03:13:d6:71:
f1:19:e7:bf:7e:13:ad:1d:13:22:ab:68:2b:57:08:
1f:27:d9:79:a8:7f:ea:c6:10:b3:20:b3:bf:eb:86:
74:a9:82:1d:62:2e:c5:41:9c:01:6e:1c:92:4d:69:
68:12:04:72:52:9a:b2:02:5f:10:c8:3b:12:eb:a9:
9f:ff:71:c2:a9:0a:09:66:00:d0:9e:d1:1e:59:65:
aa:8e:7e:b0:01:fb:50:46:9a:46:32:80:46:40:d2:
fb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:60:6A:64:FF:A7:A1:89:A8:F0:85:DB:F8:28:F0:D3:E6:90:88:6A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46a5bb7b-18ea-4b67-8c16-9d16358550fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f25:c000::/36
Signature Algorithm: sha256WithRSAEncryption
44:13:1d:fc:88:29:ff:e2:3e:6c:e5:8b:a7:f1:ea:36:d5:30:
78:6b:a7:c3:79:a5:df:8f:df:1e:f6:c6:f8:58:bc:6f:65:45:
3e:c3:e7:5a:e1:cd:19:c3:e3:51:85:b2:47:69:1a:3e:56:2e:
31:06:b4:9e:29:ad:73:6a:52:ce:fc:d6:b3:9a:f6:1b:bf:12:
1c:b0:13:48:16:8e:d0:9e:46:b5:71:98:48:2b:fe:11:91:0d:
58:c0:57:65:c6:a1:31:a5:5d:b0:27:80:fc:b7:e7:ad:18:37:
77:a0:a8:a4:d8:b4:ff:a7:b5:26:c9:cd:bd:7f:d9:e9:e5:f7:
99:10:87:23:c7:42:4e:c9:7e:1d:63:74:de:a7:ec:3f:cb:c9:
26:6d:cb:3b:73:2f:3f:7b:f4:86:2c:28:5f:bd:c1:92:49:d1:
a6:0c:85:31:1d:67:16:01:80:c7:f3:63:5f:50:ed:1b:ed:e4:
9e:e3:9c:97:4d:1d:a5:a2:61:30:d5:d7:46:3a:1b:08:a8:4e:
d0:e2:6d:44:f3:7d:02:a0:e5:a3:04:2d:ae:63:76:a7:67:fd:
5d:9f:85:08:28:d3:7a:8f:1b:86:e3:a6:2e:d2:00:e5:1a:6c:
47:db:1d:03:16:aa:cd:0f:78:c1:85:a8:e7:b6:83:8d:bc:f0:
44:f4:9a:8d
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUDvW2AZaQmzlrd1u0jSz+2/znB8UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDEwMTQyMjA0WhcNMjUxMTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0AwODJlYjY2MWUzODRhNTY1ZjUwYWU1OWE0M2Q1OGRmYWY1
ZWI5YmRmNmE3ODA3YmFmMjU1MTljZTM1YTY0YjcwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDzVCDhrVG5tOWrprSPLLHgRJKPD3ZM5jWXTAhvbUQgEHPO
Itq3HlC8zwb0qEBf82vRUZZsXc9yURo2CSGhSMbBjwZUvGwA6gkT7+/dVvN5hWML
WqQqKRA7LkFzhoOiWMk7ssHBKDGrtCAy3AluWg9YmNs0UxVakGFiQXDBQfVdhFLo
M0rrTK6ZoYLNyOcw1UGwT7SV0+9tkQf3ZWesUfyVAxPWcfEZ579+E60dEyKraCtX
CB8n2Xmof+rGELMgs7/rhnSpgh1iLsVBnAFuHJJNaWgSBHJSmrICXxDIOxLrqZ//
ccKpCglmANCe0R5ZZaqOfrAB+1BGmkYygEZA0vs/AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUAGBqZP+noYmo8IXb+Cjw0+aQiGowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQ2YTViYjdiLTE4ZWEtNGI2Ny04YzE2LTlkMTYzNTg1NTBmYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8lwDANBgkqhkiG9w0BAQsFAAOCAQEARBMd/Igp/+I+bOWLp/HqNtUw
eGunw3ml34/fHvbG+Fi8b2VFPsPnWuHNGcPjUYWyR2kaPlYuMQa0nimtc2pSzvzW
s5r2G78SHLATSBaO0J5GtXGYSCv+EZENWMBXZcahMaVdsCeA/LfnrRg3d6CopNi0
/6e1JsnNvX/Z6eX3mRCHI8dCTsl+HWN03qfsP8vJJm3LO3MvP3v0hiwoX73BkknR
pgyFMR1nFgGAx/NjX1DtG+3knuOcl00dpaJhMNXXRjobCKhO0OJtRPN9AqDlowQt
rmN2p2f9XZ+FCCjTeo8bhuOmLtIA5RpsR9sdAxaqzQ94wYWo57aDjbzwRPSajQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:31 2025 by rpki-client