Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b53ce307-27ef-4d3a-8048-eea6a9a14958.roa
File: b53ce307-27ef-4d3a-8048-eea6a9a14958.roa (raw, json)
Hash identifier: OPV5fZU5/UV4I+KLpsr3ZBaBlVbcZS4fWxxIBwDG5rY=
Subject key identifier: 68:8E:EE:41:2B:36:E0:33:FA:79:66:3F:44:DE:5D:A4:95:93:DA:6A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2B3108D13C902FFA3C9DB1C78AF1B6B7328235B0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b53ce307-27ef-4d3a-8048-eea6a9a14958.roa
Signing time: Fri 17 Oct 2025 21:05:37 +0000
ROA not before: Fri 17 Oct 2025 21:05:37 +0000
ROA not after: Fri 21 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f38:8020::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:31:08:d1:3c:90:2f:fa:3c:9d:b1:c7:8a:f1:b6:b7:32:82:35:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 17 21:05:37 2025 GMT
Not After : Nov 21 23:59:59 2025 GMT
Subject: serialNumber=ff7c437b99131864a883d26a2936b328e58d6d39e9b247007cf2cfb16044bf7c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6a:fa:c8:79:4a:f9:a7:ea:aa:38:39:56:77:
b0:52:c1:65:86:9f:18:09:6c:14:70:63:31:b7:a1:
95:97:25:f9:69:eb:8f:62:bc:5e:ab:58:fb:7d:d4:
46:d8:ca:f1:22:39:d4:d3:99:40:21:b2:68:ee:c8:
ae:64:ad:c5:66:d3:2c:90:10:c6:7e:76:b1:be:e6:
27:46:6e:c7:0d:82:45:2c:1c:ba:74:aa:6c:d8:83:
3b:b8:95:fe:b5:2c:89:ff:a4:ae:bd:b4:3a:26:ed:
fa:48:b4:29:3b:1f:4d:6a:1c:0b:38:b5:f7:36:bf:
ee:db:29:62:7c:4f:d2:9a:b6:27:56:e3:b9:16:88:
2f:1d:2f:9f:db:ae:86:d4:e2:63:c2:dc:19:bb:ba:
4d:ae:f2:34:a3:e6:c7:ba:65:d8:3f:92:7a:0c:e6:
b3:78:52:1f:b1:fe:bf:3c:99:fa:cb:6c:b0:de:af:
b8:74:a5:ac:95:b3:a4:7e:c7:a3:18:92:84:57:b7:
06:c5:99:29:83:a8:6c:d3:fb:6f:e0:d1:65:69:7a:
81:9d:56:f4:8d:71:a7:c9:75:a8:de:b0:34:7b:07:
4f:4e:89:72:3e:7f:93:f1:4d:7e:bd:8f:cf:7c:12:
f5:6f:fb:30:6d:9e:ec:49:be:fc:38:18:f3:dc:6f:
09:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8E:EE:41:2B:36:E0:33:FA:79:66:3F:44:DE:5D:A4:95:93:DA:6A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b53ce307-27ef-4d3a-8048-eea6a9a14958.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f38:8020::/48
Signature Algorithm: sha256WithRSAEncryption
11:6e:68:a7:6d:58:14:68:a3:17:16:58:c9:59:1f:69:2c:18:
44:34:85:2c:0b:cc:83:38:61:e5:83:9f:63:cf:bb:96:7b:2d:
b5:d5:c0:95:fc:62:cd:5d:f3:04:48:72:77:b3:22:04:6f:19:
e5:77:a1:6e:5f:d6:af:86:8b:9a:f3:00:09:f3:d5:09:a0:f7:
82:fe:43:cb:b2:21:50:fc:03:9c:11:16:12:4d:b7:c3:bb:de:
a5:7a:2d:59:31:54:65:82:54:dd:27:3d:47:6f:13:34:b0:20:
68:85:88:b6:08:2f:a1:a1:77:b0:d3:6b:e7:7c:e1:94:cc:a3:
01:5c:39:11:47:df:f0:ab:48:61:d6:44:c3:a9:0a:fb:74:a2:
f1:58:27:d3:5d:6b:58:f9:6a:07:dd:11:26:5e:1a:03:dc:96:
6e:5c:27:d3:6f:cb:25:cc:a8:92:8f:9d:88:12:b3:2c:9c:66:
a8:24:43:4f:e3:23:74:e3:4e:9c:b8:15:c9:fb:25:9a:11:b7:
ff:10:df:c7:2e:76:b1:6e:9e:6a:e6:47:c3:75:f9:14:af:67:
1a:5f:82:d8:96:a1:cd:4e:e8:c6:17:68:6b:f4:19:9b:e4:b8:
d5:ea:eb:eb:ba:fb:77:a2:20:ba:40:3c:3c:eb:68:2d:76:17:
b0:db:47:e5
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUKzEI0TyQL/o8nbHHivG2tzKCNbAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE3MjEwNTM3WhcNMjUxMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BmZjdjNDM3Yjk5MTMxODY0YTg4M2QyNmEyOTM2YjMyOGU1
OGQ2ZDM5ZTliMjQ3MDA3Y2YyY2ZiMTYwNDRiZjdjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDTavrIeUr5p+qqODlWd7BSwWWGnxgJbBRwYzG3oZWXJflp
649ivF6rWPt91EbYyvEiOdTTmUAhsmjuyK5krcVm0yyQEMZ+drG+5idGbscNgkUs
HLp0qmzYgzu4lf61LIn/pK69tDom7fpItCk7H01qHAs4tfc2v+7bKWJ8T9KatidW
47kWiC8dL5/brobU4mPC3Bm7uk2u8jSj5se6Zdg/knoM5rN4Uh+x/r88mfrLbLDe
r7h0payVs6R+x6MYkoRXtwbFmSmDqGzT+2/g0WVpeoGdVvSNcafJdajesDR7B09O
iXI+f5PxTX69j898EvVv+zBtnuxJvvw4GPPcbwmlAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUaI7uQSs24DP6eWY/RN5dpJWT2mowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2I1M2NlMzA3LTI3ZWYtNGQzYS04MDQ4LWVlYTZhOWExNDk1OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB84gCAwDQYJKoZIhvcNAQELBQADggEBABFuaKdtWBRooxcWWMlZH2ks
GEQ0hSwLzIM4YeWDn2PPu5Z7LbXVwJX8Ys1d8wRIcnezIgRvGeV3oW5f1q+Gi5rz
AAnz1Qmg94L+Q8uyIVD8A5wRFhJNt8O73qV6LVkxVGWCVN0nPUdvEzSwIGiFiLYI
L6Ghd7DTa+d84ZTMowFcORFH3/CrSGHWRMOpCvt0ovFYJ9Nda1j5agfdESZeGgPc
lm5cJ9NvyyXMqJKPnYgSsyycZqgkQ0/jI3TjTpy4Fcn7JZoRt/8Q38cudrFunmrm
R8N1+RSvZxpfgtiWoc1O6MYXaGv0GZvkuNXq6+u6+3eiILpAPDzraC12F7DbR+U=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:33:42 2025 by rpki-client