Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/912fdaad-1876-455c-b22b-2324736ea29a.roa
File: 912fdaad-1876-455c-b22b-2324736ea29a.roa (raw, json)
Hash identifier: ZqJj8tb4Y7EDlIL4Flt2heuVHj6AGJtIZCCpZs8ElXM=
Subject key identifier: BC:20:02:04:64:8D:76:A8:8B:2B:8F:D7:E5:56:3F:92:3D:14:F8:8E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 54E0763DF066568E24572CE7CBC62FD83B69E855
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/912fdaad-1876-455c-b22b-2324736ea29a.roa
Signing time: Fri 10 Oct 2025 14:22:05 +0000
ROA not before: Fri 10 Oct 2025 14:22:05 +0000
ROA not after: Fri 14 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f29:c000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:e0:76:3d:f0:66:56:8e:24:57:2c:e7:cb:c6:2f:d8:3b:69:e8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 10 14:22:05 2025 GMT
Not After : Nov 14 23:59:59 2025 GMT
Subject: serialNumber=8ff805d25dda0a1e49aeeccba5012244ed242c46c56c83b17c5b816caff216ed, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:84:20:f6:30:0b:fb:20:8c:90:25:4e:6f:02:
a6:f6:02:98:98:e2:d7:26:17:dc:4c:ba:a6:c7:f2:
76:36:f8:02:7d:7a:c6:61:66:54:f5:35:95:f6:9f:
27:7e:ea:0e:6b:8f:0e:1f:d9:9a:db:08:a3:3d:84:
40:b6:46:01:d6:69:6f:99:10:0d:c0:a6:c5:b4:16:
2a:57:e1:95:80:41:d2:39:b9:f7:84:ae:b0:8d:9d:
5e:fb:f2:00:22:8f:2f:25:62:77:4b:3c:37:c0:37:
47:37:5a:e3:98:c0:2a:5f:37:31:cd:16:01:3b:3a:
1f:60:52:36:b5:b5:78:c4:24:ec:9b:b5:33:b0:91:
10:74:a3:fa:e5:72:e9:e1:da:4d:c7:24:c2:d9:da:
7c:f2:7b:0c:3d:7c:46:25:54:72:8f:78:5e:ef:0a:
69:7f:6f:5e:46:2c:90:39:28:df:8a:ae:59:1b:57:
b0:39:05:99:47:20:0f:da:01:cc:8a:ac:c7:d0:ee:
4c:e5:f7:19:dc:14:aa:61:0b:7c:da:aa:5d:72:b5:
b6:2e:9b:62:2a:3f:30:06:8e:4e:9d:5c:4f:e5:af:
27:90:b3:43:2a:7c:ca:dd:5d:f3:ea:ad:94:16:bf:
38:be:71:83:45:ca:81:9b:46:b8:7e:f8:2d:10:80:
23:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:20:02:04:64:8D:76:A8:8B:2B:8F:D7:E5:56:3F:92:3D:14:F8:8E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/912fdaad-1876-455c-b22b-2324736ea29a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f29:c000::/36
Signature Algorithm: sha256WithRSAEncryption
6b:e8:6b:e8:18:19:10:69:3d:6c:db:16:92:4a:a1:3b:e8:a8:
1a:6a:a0:dd:8d:db:f4:41:5d:cf:72:4d:95:01:f3:10:2b:e3:
68:84:be:43:27:6c:e0:ce:85:f7:0f:a7:98:8e:09:d7:99:a3:
56:9c:e5:e1:10:2f:c7:d2:cd:2f:d6:ab:a4:bb:d2:24:df:bd:
35:5c:b7:b3:7e:bd:65:4f:bd:4a:92:ad:6e:3d:6e:c0:0b:07:
85:bb:d2:5d:3e:cf:59:b8:5d:d0:22:88:9e:5b:db:36:90:0f:
1c:b1:95:b3:e2:33:c8:ec:20:b9:ec:fa:f0:8d:35:f7:26:3c:
7c:e4:99:65:03:3d:a9:b3:1d:f2:e7:ae:aa:a8:31:c7:4f:a3:
f3:fe:6d:ba:d8:3f:83:29:12:73:8b:cc:44:26:39:18:aa:b0:
33:79:6a:9c:ec:02:a2:2e:de:e2:50:72:e9:2d:37:89:a8:28:
58:b9:48:0b:7d:7f:ed:ba:d1:18:87:4b:54:4a:85:01:de:01:
4d:75:8c:4d:53:7a:d1:79:7c:4b:f8:dd:43:c9:de:c4:ce:2f:
a8:0c:f8:a6:7f:97:aa:af:6b:cc:a0:b1:d7:2e:50:61:27:0d:
30:4d:47:ae:57:ae:08:c2:d8:b5:c8:f3:e8:b8:6e:da:28:ad:
70:b5:96:7e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:08 2025 by rpki-client