Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7109eae2-0e21-4e85-9b88-63b1777e3c13.roa
File: 7109eae2-0e21-4e85-9b88-63b1777e3c13.roa (raw, json)
Hash identifier: UP7kRdyp4c95+6xDy1u68NIIvsM5NPUX9XTuTpes+aI=
Subject key identifier: 07:70:E7:6F:C8:68:55:B8:EE:CF:59:1A:BB:BD:7F:C9:C7:7C:29:92
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 651B13246618C6240717D5F39FEC374857D7A7C5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7109eae2-0e21-4e85-9b88-63b1777e3c13.roa
Signing time: Sat 18 Oct 2025 00:51:39 +0000
ROA not before: Sat 18 Oct 2025 00:51:39 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f70:6000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:1b:13:24:66:18:c6:24:07:17:d5:f3:9f:ec:37:48:57:d7:a7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 00:51:39 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=a0e1c87d40d975685f1afb0a73adbc6f11cbbedcbd111860df5168e967330aa5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5a:29:51:ff:4b:46:b0:3c:42:3b:34:2c:62:
70:70:26:4a:84:87:b7:03:8a:4b:bd:d4:eb:35:af:
e8:ae:2d:c0:84:ad:1d:3f:b7:d2:93:36:a6:2e:3c:
6d:c1:18:e3:c5:cc:43:e1:21:35:b6:5c:a0:83:09:
92:4e:ce:4e:d7:cc:3c:cb:76:5f:68:d7:05:ea:c1:
dc:d4:12:34:db:3e:3f:35:03:a6:61:69:a8:16:27:
8d:ab:16:29:1e:d8:c0:82:92:ba:4e:1a:06:ab:8f:
88:dd:70:98:9d:3d:d9:85:ee:a4:6e:25:57:6f:0e:
21:25:35:06:00:64:5e:76:f1:5a:e2:5f:4e:0c:3f:
10:b4:12:9e:35:85:9f:de:2a:13:0e:17:af:58:fa:
e3:dd:fc:64:7c:e1:6a:53:29:3a:1a:3f:cb:ca:b5:
8d:e6:f7:59:28:73:7d:6e:10:fd:0a:57:1c:f0:f1:
57:87:2e:22:f7:e6:8a:ca:2c:b9:9b:61:1b:3b:16:
c7:68:c1:23:20:55:82:39:c1:1b:1e:44:5a:80:b2:
a2:73:c4:a4:27:e2:a3:b7:5f:44:41:54:df:98:60:
1d:fd:cb:3d:b4:73:65:94:9d:92:73:4d:d2:5f:b3:
6a:85:c0:32:46:57:01:f3:67:b2:02:a8:fb:a3:89:
f9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:70:E7:6F:C8:68:55:B8:EE:CF:59:1A:BB:BD:7F:C9:C7:7C:29:92
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7109eae2-0e21-4e85-9b88-63b1777e3c13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f70:6000::/40
Signature Algorithm: sha256WithRSAEncryption
38:bb:b1:1f:1f:cb:1b:bf:63:02:05:5d:f2:32:35:3c:92:fe:
67:8b:68:1f:44:bd:07:f8:87:04:bf:b0:e7:da:4e:c0:56:da:
f1:af:43:fd:4f:89:b6:6c:74:2f:c2:cb:f2:d2:9e:d0:b4:be:
cd:c2:c6:fb:97:bb:55:04:4a:cf:80:bd:05:9a:4c:28:1e:e1:
33:c2:47:04:6d:e5:40:6a:3c:49:40:24:10:12:37:f3:6b:d3:
1d:87:99:30:2a:42:5c:06:45:a6:c0:a5:94:6c:75:92:94:90:
ef:40:0a:5f:e9:48:75:96:7f:ba:08:9e:24:3f:69:c2:4f:70:
03:68:6f:07:d2:12:bc:9a:b3:6d:47:c7:14:f7:a2:f5:8f:26:
f7:67:8e:c5:26:6d:0e:b0:6c:75:f7:f3:ba:ae:ba:ac:d2:01:
9b:22:b5:f7:5e:04:8f:02:cd:49:21:39:dc:73:20:7c:c3:b8:
1d:80:f0:34:95:9a:43:4f:97:d0:30:40:48:f9:2b:6f:7e:db:
f4:52:3f:34:3d:b6:83:d6:34:84:44:04:de:52:72:4a:d9:c5:
f0:73:cf:6e:8b:36:1d:60:d6:35:63:92:91:90:ac:1f:a8:2b:
81:47:79:b2:24:b7:68:c3:82:f3:4f:73:6b:d8:22:24:0e:70:
11:8c:5b:8f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 21 04:49:21 2025 by rpki-client