Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba11a472-2617-4072-8858-a08b9e357193.roa
File: ba11a472-2617-4072-8858-a08b9e357193.roa (raw, json)
Hash identifier: g9ov/wCcOgN/QvqGfcDe61LehgLzAJTV2Qopa9xLKng=
Subject key identifier: 95:B3:03:D9:17:4E:53:32:D3:F1:52:4D:97:C8:8C:4F:FA:57:29:91
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 16B2CCD4054496F07B315BFAED274A16D77C1446
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba11a472-2617-4072-8858-a08b9e357193.roa
Signing time: Tue 14 Oct 2025 15:42:25 +0000
ROA not before: Tue 14 Oct 2025 15:42:25 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1fec:2c00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:b2:cc:d4:05:44:96:f0:7b:31:5b:fa:ed:27:4a:16:d7:7c:14:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 15:42:25 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=f8b0c096867dec00be07dd6efbadda1b2c181b110b8b734991a727cb7bee3b13, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:33:36:40:25:bb:20:0c:7f:8c:3f:4e:cd:
5b:cb:5e:96:f7:9d:0c:5e:94:ba:bc:f4:2e:f8:24:
4b:ca:10:4d:8e:d6:5e:c5:f6:b8:5a:b1:d7:8a:70:
43:93:a4:0b:2c:56:89:56:06:67:79:5c:a6:e3:36:
a7:51:d4:68:a1:3e:98:42:4f:d8:d8:f4:e2:fb:ae:
fa:6f:14:6d:ee:07:b7:7d:37:5f:99:b4:b8:f5:64:
0c:2b:0d:88:04:54:a2:ff:7b:60:f1:3f:cf:5d:2b:
de:ca:ee:42:02:6d:d0:99:e9:e7:fe:bc:ec:52:c2:
2e:23:3c:d3:19:c0:67:30:3c:61:7a:4e:ae:af:cb:
96:94:78:9b:59:6c:bf:25:a5:d3:0b:fd:90:95:30:
9e:87:69:04:3a:1a:18:b8:cb:5e:4c:12:57:b6:1d:
39:de:cc:91:d3:2d:30:06:f0:37:80:99:21:1d:b6:
c6:1b:8a:d6:fd:61:13:ff:b5:ec:a6:3b:35:6a:78:
d2:c7:ca:e4:02:f7:0d:65:91:84:02:67:b5:39:d5:
f5:4b:a4:dc:bb:03:13:65:0d:92:ec:4b:8f:a6:de:
fb:a6:1e:0b:4b:0f:4e:f3:1c:19:5f:aa:29:9e:f8:
87:c0:95:11:52:47:5f:97:11:19:d4:8d:19:cd:c9:
fe:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B3:03:D9:17:4E:53:32:D3:F1:52:4D:97:C8:8C:4F:FA:57:29:91
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba11a472-2617-4072-8858-a08b9e357193.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fec:2c00::/48
Signature Algorithm: sha256WithRSAEncryption
b2:ee:cb:78:2f:8e:ec:8d:2d:82:c7:5a:28:18:e4:bf:52:17:
89:22:78:41:b5:0b:b5:98:ee:7a:96:84:11:3f:7f:c5:e5:48:
83:5a:fe:18:3a:b9:e5:bf:cd:4f:2e:5b:0a:9f:2e:94:58:27:
23:c0:b3:f1:d6:09:ca:33:cb:23:35:11:75:8a:ea:26:46:16:
9a:71:93:eb:c9:7c:f8:df:2d:36:41:48:bc:17:4e:d1:6f:b8:
e7:7a:8b:9e:56:73:6e:33:33:e4:5f:31:37:88:d4:13:1d:17:
9a:b1:e8:d7:6a:7f:4c:f6:3a:85:fd:bc:02:28:0c:23:00:8a:
53:8f:8c:49:67:e6:d5:0a:a7:b4:fa:50:ef:45:d5:2f:91:73:
9d:a4:2c:d2:4b:99:d6:0e:5f:83:89:5a:7b:55:4d:6e:90:cd:
e2:95:ca:d6:1a:f6:23:d6:3b:b6:a7:4e:cc:b2:cd:61:19:8e:
c5:62:3f:ef:f1:5e:05:40:76:61:67:3a:35:d9:e8:9a:75:9d:
06:d2:dc:bd:9a:5e:f5:1e:16:28:67:2e:71:83:3e:a2:01:68:
31:37:4f:94:c7:aa:ea:c2:e7:9a:b0:97:7c:4d:36:bb:0d:39:
51:ec:66:32:b1:08:64:58:cf:86:63:59:ee:c9:22:7e:7f:ad:
1e:4a:7b:a2
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUFrLM1AVElvB7MVv67SdKFtd8FEYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MTU0MjI1WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BmOGIwYzA5Njg2N2RlYzAwYmUwN2RkNmVmYmFkZGExYjJj
MTgxYjExMGI4YjczNDk5MWE3MjdjYjdiZWUzYjEzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6ADM2QCW7IAx/jD9OzVvLXpb3nQxelLq89C74JEvKEE2O
1l7F9rhasdeKcEOTpAssVolWBmd5XKbjNqdR1GihPphCT9jY9OL7rvpvFG3uB7d9
N1+ZtLj1ZAwrDYgEVKL/e2DxP89dK97K7kICbdCZ6ef+vOxSwi4jPNMZwGcwPGF6
Tq6vy5aUeJtZbL8lpdML/ZCVMJ6HaQQ6Ghi4y15MEle2HTnezJHTLTAG8DeAmSEd
tsYbitb9YRP/teymOzVqeNLHyuQC9w1lkYQCZ7U51fVLpNy7AxNlDZLsS4+m3vum
HgtLD07zHBlfqime+IfAlRFSR1+XERnUjRnNyf4pAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUlbMD2RdOUzLT8VJNl8iMT/pXKZEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2JhMTFhNDcyLTI2MTctNDA3Mi04ODU4LWEwOGI5ZTM1NzE5My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/sLAAwDQYJKoZIhvcNAQELBQADggEBALLuy3gvjuyNLYLHWigY5L9S
F4kieEG1C7WY7nqWhBE/f8XlSINa/hg6ueW/zU8uWwqfLpRYJyPAs/HWCcozyyM1
EXWK6iZGFppxk+vJfPjfLTZBSLwXTtFvuOd6i55Wc24zM+RfMTeI1BMdF5qx6Ndq
f0z2OoX9vAIoDCMAilOPjEln5tUKp7T6UO9F1S+Rc52kLNJLmdYOX4OJWntVTW6Q
zeKVytYa9iPWO7anTsyyzWEZjsViP+/xXgVAdmFnOjXZ6Jp1nQbS3L2aXvUeFihn
LnGDPqIBaDE3T5THqurC55qwl3xNNrsNOVHsZjKxCGRYz4ZjWe7JIn5/rR5Ke6I=
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:07 2025 by rpki-client