Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a51cf629-3b5c-444d-a5a3-c49bffcebe3a.roa
File: a51cf629-3b5c-444d-a5a3-c49bffcebe3a.roa (raw, json)
Hash identifier: pqBDJIUVxIwNyWWLGX5nAFlJfcojPITvCinH3IlVexo=
Subject key identifier: 22:3D:73:B6:4F:7E:90:A8:94:72:2B:1D:C9:3C:4C:1E:68:4C:C5:CC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1E9C1211C976140AB57A3725B57674D09519DCFA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a51cf629-3b5c-444d-a5a3-c49bffcebe3a.roa
Signing time: Fri 26 Sep 2025 00:22:11 +0000
ROA not before: Fri 26 Sep 2025 00:22:11 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1fef:8000::/39 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:9c:12:11:c9:76:14:0a:b5:7a:37:25:b5:76:74:d0:95:19:dc:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 26 00:22:11 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=7b23b38ea06f4cfcc85097d6ecd7ca77ebefa2bcd25cbced8124f59666d12f9d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:78:b8:bf:85:ef:62:b4:64:da:84:b6:9f:e5:
03:2f:72:8e:d3:f8:8a:3b:57:1d:13:48:5b:85:30:
55:10:6a:df:b6:64:2c:fa:d7:26:94:91:8a:69:cb:
aa:7f:24:31:11:46:cf:84:40:37:8a:cb:61:08:fd:
1e:83:63:ec:ed:8b:ee:19:ef:02:43:31:5a:32:3d:
c9:33:28:05:15:8c:b4:62:3c:e6:e9:b0:0d:82:63:
48:90:9c:a7:e3:61:67:ea:2b:9f:19:a8:d3:10:0a:
76:a4:0b:77:bf:90:b5:ff:9e:97:e1:91:88:39:a9:
94:40:45:67:b4:91:e8:27:45:9c:15:40:3e:05:d6:
09:d1:3d:39:54:c8:ac:8c:37:69:d2:a9:f9:e1:c7:
d2:00:6c:a2:03:47:89:73:74:fa:af:98:c9:e6:27:
be:a2:a4:8c:b3:52:97:28:44:71:98:3a:53:73:ef:
85:ae:59:d8:cb:af:fd:80:61:90:a6:a9:0c:6e:d3:
79:b5:19:43:0e:59:3f:00:d2:a3:15:06:21:30:50:
35:ab:66:88:66:0d:61:1c:b1:29:90:1f:57:7b:41:
a9:0f:27:7a:bc:37:29:81:9b:3f:c3:4d:6b:9d:e9:
15:b5:f4:49:bc:e0:c6:80:01:80:a3:e8:80:f7:d2:
50:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3D:73:B6:4F:7E:90:A8:94:72:2B:1D:C9:3C:4C:1E:68:4C:C5:CC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a51cf629-3b5c-444d-a5a3-c49bffcebe3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fef:8000::/39
Signature Algorithm: sha256WithRSAEncryption
23:51:eb:8c:63:d8:f9:a7:e1:42:c1:22:93:57:35:ff:8f:46:
39:10:52:67:87:95:f3:6b:b0:28:2c:0b:4e:f8:c1:13:7d:a3:
d0:44:45:38:61:ac:30:13:54:f9:a6:8c:11:ee:e6:7e:ff:c4:
45:3a:1c:a5:47:e1:82:38:f0:3e:53:db:84:ae:2e:7a:60:18:
d0:d7:fa:5d:43:81:20:c2:ed:1b:7e:05:68:ad:95:5d:d7:fd:
69:4a:4f:ce:a4:55:47:97:dd:a8:07:14:ad:3a:64:83:f0:63:
67:9b:a4:e0:e4:aa:68:8e:06:fc:7d:62:80:47:5b:ea:4f:79:
04:d2:db:bf:a0:bd:eb:bf:c9:8f:b1:57:18:f3:fe:c6:67:22:
2e:06:54:3d:f9:80:4c:3e:37:b5:38:4c:9a:96:73:4c:e4:a4:
36:8e:94:5d:aa:9e:50:e4:78:c5:b1:62:d2:9b:a6:56:88:fd:
9f:60:b4:6a:9d:a9:4e:b8:ae:83:63:8c:9c:53:55:22:cb:e8:
75:f7:4f:5c:53:f8:e7:82:a8:37:47:a2:e0:15:93:83:ef:b4:
1d:87:46:5e:ac:55:37:3a:c5:69:b4:2d:92:3a:fc:48:0e:f2:
50:63:e9:33:91:a9:41:3b:0d:1c:70:cc:af:50:59:d6:0d:e3:
61:32:48:5b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:04:14 2025 by rpki-client