Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85b59dcc-993d-4bb9-8658-41d0e953ce90.roa
File: 85b59dcc-993d-4bb9-8658-41d0e953ce90.roa (raw, json)
Hash identifier: hVeM9AMLW8vR/QeVH6dQPnQX/PsWdyIuMpHm1FWcnbQ=
Subject key identifier: 56:F9:B3:6D:94:61:12:43:F4:14:AC:69:48:CE:49:DE:24:44:24:7E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1F3E7F8A3B38E70FE521B18BF70E816CB3128E70
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85b59dcc-993d-4bb9-8658-41d0e953ce90.roa
Signing time: Tue 07 Oct 2025 00:42:54 +0000
ROA not before: Tue 07 Oct 2025 00:42:54 +0000
ROA not after: Tue 11 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1ff4:e000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:3e:7f:8a:3b:38:e7:0f:e5:21:b1:8b:f7:0e:81:6c:b3:12:8e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 7 00:42:54 2025 GMT
Not After : Nov 11 23:59:59 2025 GMT
Subject: serialNumber=77a37f6ecb695a034765e321db0814c25df27dd0ee189cb9a744e0897c2d13d6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:26:dd:de:aa:4a:83:94:0f:ad:21:9c:1e:05:
f0:ad:a9:ff:52:11:85:11:a8:e7:be:64:0b:86:8f:
e2:ba:34:50:d5:a9:e3:55:2c:d1:32:23:dc:5e:2d:
91:bd:d3:30:71:70:28:a5:b6:07:ad:44:2e:6c:2d:
9e:c0:b3:2a:c6:11:ab:a0:5e:38:0d:f3:95:ee:84:
a2:b4:8b:05:d5:06:bb:04:12:d4:2c:7a:cd:7c:4b:
e3:b0:2c:dd:57:d2:cb:d5:b9:23:51:c7:5f:aa:e1:
57:28:b6:5d:ef:93:5f:6d:08:5e:80:50:50:6d:30:
a0:98:e5:5f:94:55:46:da:58:6b:eb:aa:08:af:39:
01:58:41:78:a0:ec:53:a1:2b:2d:fd:f9:3d:14:57:
d0:7f:f3:bd:05:17:bb:2f:05:39:d5:c4:08:5f:2a:
53:89:13:b0:62:f3:fc:d5:76:b8:51:56:99:98:8d:
0c:23:a9:18:29:77:eb:df:f2:60:c4:46:a4:08:d9:
b3:ce:d3:04:05:46:25:29:8d:c1:4f:01:4b:5a:08:
f1:d7:bf:eb:0e:ad:c6:98:23:a6:45:e2:1b:15:2b:
f1:e4:7d:6e:9f:bc:1d:a1:00:86:1d:88:60:0d:d3:
d6:1a:af:21:36:f5:ef:54:08:3a:64:2b:b9:93:07:
ab:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F9:B3:6D:94:61:12:43:F4:14:AC:69:48:CE:49:DE:24:44:24:7E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85b59dcc-993d-4bb9-8658-41d0e953ce90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff4:e000::/40
Signature Algorithm: sha256WithRSAEncryption
bd:31:bc:03:dd:67:9c:cb:78:9e:6a:91:c8:b6:57:42:cd:a2:
a1:45:6a:e1:69:59:d8:82:74:59:4e:71:06:75:eb:84:1a:79:
d1:b1:50:93:97:db:0f:57:f9:26:04:26:b0:ae:2a:47:93:e0:
1f:3f:f8:0e:78:66:92:9c:5b:46:ed:89:27:35:5e:22:48:37:
43:c7:37:41:90:52:d4:24:13:29:ea:5f:2e:10:25:a5:7a:1e:
5d:f2:c5:1c:a5:10:b1:fd:8d:d9:2e:28:cc:7d:ac:33:54:71:
6a:53:1f:b8:77:fe:87:a1:73:38:67:8e:7a:53:10:b6:63:a7:
eb:36:1c:c7:a4:ce:a0:92:26:50:3a:2e:47:07:c1:bc:23:14:
e8:17:a4:ec:ee:36:9d:9e:9f:23:7b:83:6e:04:93:5a:a4:90:
f6:f8:dc:36:65:77:89:a2:77:5e:1d:dc:2a:fb:b5:8c:0c:3f:
3c:62:43:45:d0:fe:1e:fd:76:c5:4a:d9:13:95:aa:ab:66:65:
b1:9b:ad:64:87:6a:fc:0d:ac:2a:2b:a8:4b:ed:05:af:20:ba:
1f:3b:e6:bf:2b:3a:f1:1a:e2:db:8f:dd:94:24:57:d0:8e:41:
c5:f4:ee:bb:d4:ce:8a:00:c4:e2:98:c7:fe:30:0c:2d:81:ac:
b7:de:11:ef
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:31:04 2025 by rpki-client