Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aeaadb37-96ca-42dc-b733-b766316e5818.roa
File: aeaadb37-96ca-42dc-b733-b766316e5818.roa (raw, json)
Hash identifier: MiqYbEnx/z1uazxjm/awC9sTJEIQbNvnhjMIZ+EPVZQ=
Subject key identifier: 30:8F:35:89:42:C5:84:E9:96:A1:B8:EF:F6:48:05:36:43:B0:8B:25
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5207E8347D0A908835D4D5EC9BD8B6EFA4FABB6D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aeaadb37-96ca-42dc-b733-b766316e5818.roa
Signing time: Fri 10 Oct 2025 14:22:02 +0000
ROA not before: Fri 10 Oct 2025 14:22:02 +0000
ROA not after: Fri 14 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f15:c000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:07:e8:34:7d:0a:90:88:35:d4:d5:ec:9b:d8:b6:ef:a4:fa:bb:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 10 14:22:02 2025 GMT
Not After : Nov 14 23:59:59 2025 GMT
Subject: serialNumber=61ef8faa7909f021a0312a7b6f6c156aec4f7507065592949403a112ff646894, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0f:73:a7:15:82:aa:47:9d:08:c5:5d:ec:0d:
da:44:ed:9a:b9:fb:f9:76:1b:f3:bd:90:0f:ea:03:
0e:d1:3c:d7:76:86:df:4e:83:86:77:76:c8:ec:c3:
2b:3c:71:6b:73:b6:68:8b:ea:eb:e8:1a:6a:54:1d:
0e:bb:4e:a0:13:34:6d:b8:1f:0c:9f:3d:48:6d:8b:
ec:18:c0:b8:53:90:81:b3:c5:a8:75:f4:f6:c9:1a:
57:94:ca:56:f8:68:cb:21:5d:29:66:9e:a0:af:9e:
fe:79:b6:97:93:88:d9:c4:2a:28:25:92:a0:15:fc:
d5:95:bf:ca:69:55:0e:49:73:de:08:72:ec:6d:90:
37:1b:ea:d3:15:89:ef:88:e8:50:fd:d3:a2:74:80:
c7:39:2a:b0:8c:ed:7b:3a:7c:35:00:34:fc:ef:8f:
71:42:92:ba:5c:6c:6a:4d:ca:9b:bc:53:a1:58:c7:
9b:c6:41:22:14:43:aa:00:51:7b:bf:ab:66:d5:c5:
e5:a1:42:ae:0d:71:1f:9b:48:29:80:bd:07:fd:e3:
d5:1b:3a:22:d8:5a:6a:bd:cf:14:31:dc:13:b1:f0:
e5:84:40:a7:a0:de:c7:2e:b9:f6:a4:f4:6a:44:cb:
bc:da:3d:b2:e8:80:d6:25:8c:9c:3a:d8:2a:bd:0e:
e5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8F:35:89:42:C5:84:E9:96:A1:B8:EF:F6:48:05:36:43:B0:8B:25
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aeaadb37-96ca-42dc-b733-b766316e5818.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f15:c000::/36
Signature Algorithm: sha256WithRSAEncryption
9a:1c:ae:a3:56:a6:f4:44:0c:ef:a2:e2:d4:4a:d9:f9:96:25:
1e:06:62:c5:ab:9f:1f:4e:78:8e:d2:c1:a6:09:99:a7:f8:2a:
af:0d:1d:6d:37:92:43:37:a5:0c:cf:eb:37:cb:72:6a:fc:99:
2b:62:04:cc:1e:ca:fa:cf:11:2c:a8:23:de:ab:83:48:ea:87:
e1:35:6d:80:67:da:e3:d4:d1:be:aa:e1:c7:db:19:32:86:27:
f3:79:9f:e0:2d:4b:5b:9e:a8:7a:ba:58:fd:c1:8a:16:c1:1b:
e8:1d:e9:61:88:46:38:e5:91:77:29:ce:36:df:5b:15:d9:c1:
6b:6a:f8:8b:24:ee:63:90:dd:e6:cc:2c:1f:be:6f:1c:98:aa:
ed:60:06:6b:8a:ca:fa:38:68:94:a8:51:14:4c:a2:7e:70:e5:
7d:85:09:b8:55:51:bd:ea:8a:3e:45:4f:e1:17:ca:d3:59:d5:
e4:bd:67:24:a8:d2:35:af:35:c5:81:9b:dd:e9:c1:ff:a4:fb:
e4:82:85:b9:e1:2d:a7:3e:10:44:52:77:10:bc:a0:ba:53:97:
1c:a9:47:a8:b2:2d:50:6b:6d:10:c9:be:17:40:2d:3e:1b:04:
42:14:e6:5c:49:d9:42:f3:b9:f2:f5:3c:1d:d7:8a:fc:59:cc:
d2:c5:de:ba
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:56:31 2025 by rpki-client