Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8ce8947-d451-4685-9ed8-73575b987c15.roa
File: b8ce8947-d451-4685-9ed8-73575b987c15.roa (raw, json)
Hash identifier: cE8+zE63GiyiS6Nl5m68YghnnkNYa7iB4wDm+NJAtxw=
Subject key identifier: 83:21:95:31:F3:E2:C4:74:DC:07:EC:81:CE:06:FF:33:FD:A3:E2:0C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1108820F70ADE2019CE3D6C485DAC6E25B09E6A6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8ce8947-d451-4685-9ed8-73575b987c15.roa
Signing time: Fri 10 Oct 2025 14:21:58 +0000
ROA not before: Fri 10 Oct 2025 14:21:58 +0000
ROA not after: Fri 14 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f25:c000::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:08:82:0f:70:ad:e2:01:9c:e3:d6:c4:85:da:c6:e2:5b:09:e6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 10 14:21:58 2025 GMT
Not After : Nov 14 23:59:59 2025 GMT
Subject: serialNumber=2be618b58234f96d51d0894fab11d2d59ce3e9b098a282393409c38cb2356439, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:84:b6:da:2b:f5:be:35:84:85:60:a2:b1:68:
64:5b:28:30:ed:71:2e:8a:fe:91:53:30:29:e7:ea:
40:34:80:87:a9:fc:68:06:68:0c:87:23:63:7f:88:
6b:03:e3:13:fe:4b:f7:52:74:23:7c:3f:c4:9f:be:
2d:a4:ef:94:4f:df:7f:a9:fc:40:57:18:6d:0c:c5:
5d:74:d2:bd:c0:6e:eb:db:53:98:40:89:33:d5:f4:
69:cd:63:9f:7d:db:c9:3d:42:d5:38:c7:2a:b5:e2:
b4:6d:05:7f:ea:fb:71:8a:4a:7a:8f:a7:b2:40:17:
50:53:89:3d:93:71:aa:e4:fa:06:fe:08:f2:ee:27:
9a:5d:82:e9:9e:e1:fc:5d:47:22:ac:46:e1:8b:8a:
fd:05:53:09:0b:93:6f:b4:46:fb:9b:af:b6:08:61:
77:b2:cb:39:a0:c5:67:e6:12:5f:44:c7:43:9a:86:
41:e8:06:fc:78:a2:67:91:c5:7c:73:e2:21:56:05:
4c:07:16:32:79:36:44:a0:a9:e5:a1:bc:c3:26:68:
6a:e0:6b:94:e9:94:6b:fe:b3:82:25:81:d4:a4:86:
ff:72:b7:e5:5a:25:29:71:e6:51:02:6a:1d:27:92:
bd:f6:71:d2:0c:a5:cb:a2:12:d2:da:df:88:5e:45:
73:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:21:95:31:F3:E2:C4:74:DC:07:EC:81:CE:06:FF:33:FD:A3:E2:0C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8ce8947-d451-4685-9ed8-73575b987c15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f25:c000::/37
Signature Algorithm: sha256WithRSAEncryption
c9:95:fa:d6:3e:f1:96:9a:90:7d:7b:f8:86:e6:20:58:90:a4:
75:a1:6a:1d:93:af:27:8e:a9:42:a5:d2:4f:b5:58:8a:e7:b9:
66:f3:55:49:22:36:76:c3:dc:70:fe:56:5f:e3:b7:8f:63:90:
62:82:d3:46:78:90:24:90:94:5b:fa:c3:c8:55:2c:31:0c:96:
39:2b:97:90:a0:cb:11:72:f8:b3:89:c4:75:64:af:e2:40:2e:
b1:15:a9:b6:7d:a5:fd:bc:14:f4:c5:42:cb:e4:76:4b:f6:ee:
82:7b:94:fa:87:76:27:98:fe:a3:42:f0:5e:23:94:6d:86:94:
29:a2:01:53:2e:0a:21:b8:98:31:87:c7:b8:9d:f6:94:75:d4:
ff:a7:16:fa:49:0c:53:5f:9e:41:84:1b:bc:fa:93:03:a0:38:
fb:7f:04:12:39:4d:05:01:80:fc:6c:f4:fc:c2:80:f7:7a:e4:
4c:07:b5:0c:d9:ff:f6:07:cb:17:78:c7:70:ad:3b:89:80:ac:
99:50:69:77:a8:09:71:44:cb:b1:e5:30:61:5f:87:56:eb:0f:
32:5b:ae:71:78:b4:ad:e1:ed:27:62:78:05:ef:42:93:ce:6e:
d7:61:f8:38:46:30:97:ff:42:bb:ea:a4:7d:60:11:bb:c7:da:
5c:cc:b8:43
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:25 2025 by rpki-client