Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c3a9442-11f5-4da8-849a-8e9085cd735c.roa
File: 6c3a9442-11f5-4da8-849a-8e9085cd735c.roa (raw, json)
Hash identifier: 2l9NFYyqOrp99b7WLJ1nZkn+nso5aVOLQbdSdtgVBVY=
Subject key identifier: EF:12:6E:37:C5:6C:46:9A:C8:B5:24:B7:93:59:D6:4C:AF:6C:1F:CC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1033C0B9573DE1BD7B762525144005FDDDF3F9E2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c3a9442-11f5-4da8-849a-8e9085cd735c.roa
Signing time: Tue 14 Oct 2025 15:41:32 +0000
ROA not before: Tue 14 Oct 2025 15:41:32 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1fec:1800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:33:c0:b9:57:3d:e1:bd:7b:76:25:25:14:40:05:fd:dd:f3:f9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 15:41:32 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=a33c48886faf7ef498a9debd43c2778a199cea117a20497011ac43d9c043cdcf, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:68:49:41:67:a2:95:e5:52:9b:eb:4e:f2:1a:
c9:b1:a7:4d:a3:9a:9f:f3:8b:28:fc:68:b2:ee:16:
79:b8:02:40:2b:17:0b:41:68:e8:5e:f7:e7:46:97:
d0:aa:9b:49:cf:f2:d8:64:04:22:00:c5:0d:85:4a:
b0:a6:b5:a8:2e:09:96:09:e6:aa:bd:ec:ec:a5:36:
86:d9:42:74:2f:f1:58:1f:95:36:e6:46:2e:54:d9:
09:04:dd:ea:00:5d:eb:01:98:4a:4e:d2:c6:65:54:
fa:7e:94:90:13:be:e5:28:de:34:c1:a1:a1:3c:98:
2e:b2:bf:8a:b4:f3:7b:a7:2e:46:8c:a8:8e:0c:d0:
ee:8c:db:68:33:79:21:6a:6f:a9:4b:7d:1f:af:07:
3e:c0:5c:f2:eb:32:29:14:da:ca:fd:4b:76:77:c1:
b4:3a:2b:66:0d:62:3b:bd:08:53:1b:42:d6:d0:a6:
8a:be:49:02:39:cf:20:d1:08:05:4f:c4:7c:f4:9c:
19:48:09:36:72:40:03:9c:d1:02:8e:64:19:cf:e7:
b7:4c:d6:0a:93:e2:7b:d3:dc:55:b8:f6:57:79:3d:
71:91:eb:4c:76:88:75:1a:8c:7c:73:10:3f:25:85:
ec:29:12:65:4a:9a:7b:7c:24:0d:7b:56:34:e5:49:
94:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:12:6E:37:C5:6C:46:9A:C8:B5:24:B7:93:59:D6:4C:AF:6C:1F:CC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c3a9442-11f5-4da8-849a-8e9085cd735c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fec:1800::/48
Signature Algorithm: sha256WithRSAEncryption
9f:b3:4f:4e:c6:df:78:7d:9a:b7:06:7a:ed:f5:bb:4f:75:18:
bf:9c:db:79:45:59:2d:de:7e:69:a5:f7:9a:d9:eb:53:55:f9:
7e:2f:cd:9f:57:42:04:66:ba:58:bf:44:b9:a7:0f:d5:bd:a6:
f0:52:b0:8f:5e:33:f0:b7:38:b0:06:ce:d5:7b:29:63:84:80:
14:6d:42:fb:93:ab:5b:c4:68:14:b7:de:6f:88:31:f5:d1:09:
10:29:6a:6e:c6:65:e8:bb:02:ab:0a:ce:b6:ca:b9:f5:d9:7e:
e9:01:8c:76:30:85:4e:2b:7d:32:47:ed:44:a2:aa:c7:4f:b8:
08:58:8b:cb:7d:df:82:f1:62:a0:82:d9:d3:5c:14:0e:b2:ec:
04:34:46:f1:aa:b7:d1:11:2e:8e:7e:dc:60:15:8b:a6:fc:03:
fd:66:80:57:9b:d0:fe:76:ff:b8:f4:a2:a1:b4:de:67:9f:f4:
46:e9:34:cb:11:4e:c6:8b:ef:fb:4e:06:1a:81:d5:59:a7:4d:
25:fb:fa:8e:09:5e:cb:f4:ed:d1:c3:29:ae:5f:0e:73:17:c2:
72:5e:15:b7:77:d6:01:88:58:b2:01:dd:9a:a3:70:54:40:05:
a9:69:77:7d:82:5c:0b:20:a3:b9:35:b1:0c:bd:b1:ca:ba:11:
a8:2e:95:20
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:55:47 2025 by rpki-client