Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7fac1823-b328-4f8c-8379-f7180469d48a.roa
File: 7fac1823-b328-4f8c-8379-f7180469d48a.roa (raw, json)
Hash identifier: zLPnuHStTnLEbFJtO8iah1ztBtNJ32/OcX81kLox5eg=
Subject key identifier: E3:50:44:C3:9A:85:D6:23:1B:0B:DB:AB:D4:E2:9A:AB:E0:33:0D:0C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5230B1B1B7C75FEB5D22F34C42F5AEC34E28430A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7fac1823-b328-4f8c-8379-f7180469d48a.roa
Signing time: Fri 03 Oct 2025 00:21:15 +0000
ROA not before: Fri 03 Oct 2025 00:21:15 +0000
ROA not after: Fri 07 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f2d:8000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:30:b1:b1:b7:c7:5f:eb:5d:22:f3:4c:42:f5:ae:c3:4e:28:43:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 3 00:21:15 2025 GMT
Not After : Nov 7 23:59:59 2025 GMT
Subject: serialNumber=33c9febdf7e8aef1bee3e253cd19e257c9dd0af0643448fd2798bc3bd46b1f45, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b0:0f:03:75:bd:27:07:0d:e1:b0:53:09:f6:
55:ec:4a:5b:fd:88:7e:c2:d6:ba:08:b5:be:c3:6c:
b0:a3:2e:88:51:9a:3a:46:a6:37:73:b2:54:09:d1:
da:5f:a2:bb:3d:02:84:62:29:98:d5:55:8e:28:84:
70:41:e4:00:14:48:85:8e:c0:03:b3:85:e2:96:a1:
5d:75:03:df:6c:fd:0e:54:bb:35:4d:f3:8c:ef:ba:
5a:4d:5d:5e:5d:77:68:30:eb:6a:6e:cc:c3:56:f1:
ce:b8:b9:b1:96:a6:c1:b2:4c:25:1e:e0:4d:71:de:
ea:70:74:b0:42:ff:9b:ae:ff:82:1d:7d:b3:77:bb:
99:55:77:22:dc:1e:f1:26:fd:e0:e0:1e:36:15:56:
24:ce:27:c8:59:d3:58:84:ad:ba:3b:ee:2e:a1:5e:
65:a2:5d:84:da:73:af:e3:27:a9:2c:df:9f:b6:1f:
eb:dd:8e:a8:f0:74:9e:51:f4:22:6f:a3:91:d5:dd:
09:91:bb:ea:f1:e7:9d:56:57:a6:07:d3:a0:cf:51:
a0:93:78:62:4b:67:37:68:8d:ac:05:1a:5c:42:5e:
82:c3:fa:73:eb:f9:46:cc:cf:16:9d:f9:d6:24:64:
75:28:eb:62:02:a7:85:af:44:00:ca:90:56:b4:02:
a5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:50:44:C3:9A:85:D6:23:1B:0B:DB:AB:D4:E2:9A:AB:E0:33:0D:0C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7fac1823-b328-4f8c-8379-f7180469d48a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f2d:8000::/36
Signature Algorithm: sha256WithRSAEncryption
6e:51:b8:8e:0f:b7:bb:f6:40:d4:d2:ca:78:0d:6f:77:ac:c7:
5e:95:f0:35:73:99:e8:0a:a2:ce:ba:8b:e3:40:f8:c5:1b:7b:
1a:0e:eb:c8:2e:8c:5e:43:f8:72:c4:90:83:22:6c:68:e1:8d:
19:18:f1:a9:96:bf:37:b1:39:59:5a:e7:77:f4:5c:b1:e6:bb:
43:55:d0:53:ea:ee:4d:52:29:48:67:53:17:ad:dd:87:c4:51:
0b:dd:e6:2d:6c:7e:eb:76:86:f0:24:0a:32:c9:92:a3:91:60:
ce:f8:cb:dc:c9:70:74:21:d5:01:e1:0c:58:56:e0:0f:b8:b2:
9c:49:c4:de:f4:0a:db:35:ef:82:ba:c0:0b:75:c8:3b:cc:4e:
e4:92:f9:e0:f7:53:e7:85:9f:6f:6b:7f:0c:42:7a:1a:db:e4:
33:4e:94:96:34:2b:c8:44:a7:07:56:da:79:b6:f1:e1:62:ce:
b5:24:f9:a4:07:a2:a8:2e:2f:93:bf:ca:9a:32:78:7f:76:e3:
3a:f0:e6:5d:23:ed:5f:55:c2:5c:4c:26:85:bd:18:10:f6:2d:
37:9c:47:ec:ea:25:5a:7c:64:c1:e5:e4:fd:80:d0:24:3c:1f:
f9:b4:c0:93:6e:6f:b5:82:65:28:bc:23:8b:1c:4c:a6:fd:c2:
bf:fe:a8:8a
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUUjCxsbfHX+tdIvNMQvWuw04oQwowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDAzMDAyMTE1WhcNMjUxMTA3MjM1OTU5
WjB6MUkwRwYDVQQFE0AzM2M5ZmViZGY3ZThhZWYxYmVlM2UyNTNjZDE5ZTI1N2M5
ZGQwYWYwNjQzNDQ4ZmQyNzk4YmMzYmQ0NmIxZjQ1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCIsA8Ddb0nBw3hsFMJ9lXsSlv9iH7C1roItb7DbLCjLohR
mjpGpjdzslQJ0dpfors9AoRiKZjVVY4ohHBB5AAUSIWOwAOzheKWoV11A99s/Q5U
uzVN84zvulpNXV5dd2gw62puzMNW8c64ubGWpsGyTCUe4E1x3upwdLBC/5uu/4Id
fbN3u5lVdyLcHvEm/eDgHjYVViTOJ8hZ01iErbo77i6hXmWiXYTac6/jJ6ks35+2
H+vdjqjwdJ5R9CJvo5HV3QmRu+rx551WV6YH06DPUaCTeGJLZzdojawFGlxCXoLD
+nPr+UbMzxad+dYkZHUo62ICp4WvRADKkFa0AqXdAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU41BEw5qF1iMbC9ur1OKaq+AzDQwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdmYWMxODIzLWIzMjgtNGY4Yy04Mzc5LWY3MTgwNDY5ZDQ4YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8tgDANBgkqhkiG9w0BAQsFAAOCAQEAblG4jg+3u/ZA1NLKeA1vd6zH
XpXwNXOZ6AqizrqL40D4xRt7Gg7ryC6MXkP4csSQgyJsaOGNGRjxqZa/N7E5WVrn
d/Rcsea7Q1XQU+ruTVIpSGdTF63dh8RRC93mLWx+63aG8CQKMsmSo5FgzvjL3Mlw
dCHVAeEMWFbgD7iynEnE3vQK2zXvgrrAC3XIO8xO5JL54PdT54Wfb2t/DEJ6Gtvk
M06UljQryESnB1baebbx4WLOtST5pAeiqC4vk7/KmjJ4f3bjOvDmXSPtX1XCXEwm
hb0YEPYtN5xH7OolWnxkweXk/YDQJDwf+bTAk25vtYJlKLwjixxMpv3Cv/6oig==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:06:50 2025 by rpki-client