Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b13bee3-5161-498f-a6c9-38f2ca9229ac.roa
File: 5b13bee3-5161-498f-a6c9-38f2ca9229ac.roa (raw, json)
Hash identifier: J0iEbxyj4732N1nB13HN5FFDy8hgT75ekEvG2hssLY0=
Subject key identifier: E5:A7:FF:A9:B4:62:D3:EB:64:A2:2F:E4:2D:B3:67:C0:55:15:1A:B7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4612CC868ACD0A0378C4D736A0108D7EDC67F4A8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b13bee3-5161-498f-a6c9-38f2ca9229ac.roa
Signing time: Fri 03 Oct 2025 00:11:55 +0000
ROA not before: Fri 03 Oct 2025 00:11:55 +0000
ROA not after: Fri 07 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ffd:80c8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:12:cc:86:8a:cd:0a:03:78:c4:d7:36:a0:10:8d:7e:dc:67:f4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 3 00:11:55 2025 GMT
Not After : Nov 7 23:59:59 2025 GMT
Subject: serialNumber=e00787e368251d2b24e7c765ed424987cdccde8a7a1f69a83ac8fa2d7e849cd9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cc:70:be:08:0b:14:c2:50:92:5b:df:e9:9d:
5d:9e:09:5c:d2:c0:bb:4c:2b:f6:c2:05:73:02:8d:
43:c2:09:e3:c0:c0:f9:78:cb:80:22:c4:ba:34:75:
54:c9:fc:c3:32:14:ff:ab:b6:e7:70:ee:6a:0a:b5:
83:65:9c:77:32:06:d1:6c:1b:eb:e0:9d:2b:6e:d5:
7b:df:86:d6:c5:a4:7e:4c:6c:be:a3:42:36:e5:62:
f7:51:74:7f:bd:1a:a2:8f:0c:b9:01:ef:9c:e0:42:
64:74:fa:29:93:fa:ce:45:d8:1a:6a:72:e1:6a:ea:
34:31:bd:14:d3:c2:41:30:f4:98:8e:2d:61:75:91:
2d:1a:11:68:52:93:9f:41:75:bf:50:76:ab:3f:91:
01:42:a0:80:c9:d7:1f:d2:38:28:bc:02:92:95:09:
94:9d:73:62:11:75:bd:6b:01:35:18:fa:64:01:83:
5b:d1:d0:cb:11:6c:4c:27:55:6f:d1:a0:e5:fa:7f:
3b:ad:dc:51:e4:ca:dd:6d:ad:13:7f:4a:8c:30:e8:
86:7e:42:16:db:90:13:79:78:1f:6a:b1:6d:34:d2:
54:f1:6a:43:bf:74:7a:35:89:17:11:0d:c7:b9:fb:
53:fc:e3:33:f2:43:7b:58:3b:11:ca:c2:3b:31:a9:
fa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A7:FF:A9:B4:62:D3:EB:64:A2:2F:E4:2D:B3:67:C0:55:15:1A:B7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b13bee3-5161-498f-a6c9-38f2ca9229ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffd:80c8::/48
Signature Algorithm: sha256WithRSAEncryption
c5:2a:9e:96:67:d4:43:fc:21:dc:dc:3f:b8:32:75:1f:9e:0e:
e4:12:36:f4:c3:ed:59:56:5a:39:27:6b:1a:3f:c8:a2:12:bc:
ed:9a:14:e7:8e:47:d4:09:e0:0a:6e:6b:52:c8:57:95:ad:56:
53:14:39:d2:48:fc:58:d4:f5:ee:41:f9:12:2e:0f:69:b2:1e:
e1:b9:95:75:37:29:3d:d4:86:29:62:2a:b1:80:ed:db:67:f8:
ef:c8:57:e9:9d:07:e9:ef:67:c1:26:9a:42:cd:bc:4d:fe:75:
c0:31:6e:a8:c0:f3:aa:00:a1:e7:37:3d:83:fa:87:ac:5d:2e:
e8:24:82:31:e9:c6:fa:d7:da:27:c0:3f:59:78:ec:fe:0d:ed:
e1:96:ee:e3:b0:ca:0a:de:24:02:54:aa:1f:08:6a:a5:0e:87:
68:10:d7:c8:a5:7f:e5:d8:02:35:98:28:b1:85:66:25:59:16:
68:f3:f1:f2:4d:e9:55:16:c3:1a:8f:dd:16:59:b2:72:39:92:
d8:a9:8b:bb:b2:38:14:ee:2a:ca:4c:7b:bb:3d:ef:39:85:32:
50:20:50:6a:a8:da:ad:59:3a:9c:9f:12:54:44:07:87:f3:92:
ce:fb:2b:f1:b3:67:fa:c8:7a:a7:a7:7e:b1:fa:3f:77:34:1a:
51:b9:72:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 21 04:49:23 2025 by rpki-client