
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3d16da4-6605-4dc0-9df6-c7f13a0a288a.roa
File: c3d16da4-6605-4dc0-9df6-c7f13a0a288a.roa (raw, json)
Hash identifier: POnM1glv7NVBAE2gtd9ed9LodwfDhgwTuqgZ1H7cHUE=
Subject key identifier: B0:86:95:9C:65:DF:CF:3A:82:E8:9F:91:BA:00:E6:D1:47:6D:DE:79
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3D06EB8CBDF4E7654092FC2E28F2F07F65EB36E8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3d16da4-6605-4dc0-9df6-c7f13a0a288a.roa
Signing time: Mon 06 Oct 2025 15:52:37 +0000
ROA not before: Mon 06 Oct 2025 15:52:37 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1ffd:5080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:06:eb:8c:bd:f4:e7:65:40:92:fc:2e:28:f2:f0:7f:65:eb:36:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 6 15:52:37 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=776f43f128d3056a2cc215219224dd2f935136c4e998c57119f3c5d8f4b9ee57, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dc:d8:43:1e:0b:d6:be:6a:05:c0:72:ea:90:
8b:4e:ce:09:b2:a6:da:ef:73:ed:99:d9:50:ef:58:
9e:b9:e7:21:c6:61:07:f7:e6:b6:c9:56:f4:1b:fe:
dc:44:ae:0a:d5:11:f7:3f:7e:e6:29:b3:46:3e:88:
3c:0a:58:8d:eb:ed:cf:e4:92:a5:6e:ae:fd:d2:28:
f4:d1:00:ab:1a:7f:12:04:d1:98:5f:03:07:d5:6e:
49:a2:07:0c:1a:a0:79:a5:f0:7b:e4:58:83:a8:48:
49:18:7b:e3:ab:60:f3:f6:f6:aa:25:17:29:3c:34:
8d:44:63:9b:26:bd:a2:10:59:e2:19:63:a9:6f:2f:
a6:85:79:90:84:8f:90:e1:e1:c3:2e:b5:8d:33:c0:
54:6b:38:21:11:74:3c:a2:17:08:17:76:a3:f9:82:
84:cd:52:30:64:22:48:20:a2:5a:8e:2d:f1:e9:2c:
c3:6c:31:28:0a:40:a0:e1:00:93:e9:87:1d:8a:da:
c0:58:3e:6d:32:07:e6:2f:7a:f6:c6:b4:d9:26:58:
f6:71:15:52:6c:51:b5:fb:d4:03:16:42:6b:57:f5:
f9:81:68:e0:93:9e:01:46:78:af:2f:9f:56:38:4d:
58:ac:4f:1d:ab:eb:ab:8d:82:33:e9:95:00:5b:8d:
26:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:86:95:9C:65:DF:CF:3A:82:E8:9F:91:BA:00:E6:D1:47:6D:DE:79
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3d16da4-6605-4dc0-9df6-c7f13a0a288a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffd:5080::/48
Signature Algorithm: sha256WithRSAEncryption
c9:5d:ec:4a:83:44:13:90:6d:9a:7a:5d:11:c2:e0:61:94:69:
17:30:79:59:e1:40:15:62:58:1f:00:4b:89:c2:f2:88:35:6e:
14:8f:50:cd:96:0d:56:84:56:ce:75:c5:68:ae:22:e5:e1:44:
0d:96:2d:1e:ee:17:2a:b0:9d:7b:b6:51:19:a9:82:9d:9e:c5:
63:98:24:38:c1:21:00:3e:b4:66:e7:2d:91:54:6f:ac:3c:0e:
ba:bf:51:25:68:58:15:9c:99:b1:05:5f:6a:aa:11:12:ca:b6:
3b:d0:4a:55:6e:4c:3f:cd:91:72:4b:d8:7c:8c:b3:f2:98:6d:
75:21:c8:4d:76:11:f4:c8:45:da:4e:20:5d:4f:0c:3b:f5:46:
0f:56:50:48:43:db:88:8a:3b:c4:75:70:44:f0:b5:1c:f1:37:
47:c8:ac:19:f8:00:54:40:2e:b2:ec:c7:00:3f:29:52:7d:c1:
74:4e:7e:4e:cc:31:cb:41:d3:d5:f4:e3:3d:2f:e2:e8:71:7f:
f0:89:d2:7a:4f:33:b5:f8:db:41:ae:69:3c:62:a0:97:19:3a:
a8:6f:7b:33:b7:78:65:a7:49:0e:2e:8a:e1:72:cf:87:30:fe:
4b:3a:34:2c:4f:6d:4c:97:86:b5:60:0e:79:4b:90:b6:10:9c:
f4:f0:eb:32
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUPQbrjL3052VAkvwuKPLwf2XrNugwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDA2MTU1MjM3WhcNMjUxMTEwMjM1OTU5
WjB6MUkwRwYDVQQFE0A3NzZmNDNmMTI4ZDMwNTZhMmNjMjE1MjE5MjI0ZGQyZjkz
NTEzNmM0ZTk5OGM1NzExOWYzYzVkOGY0YjllZTU3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCy3NhDHgvWvmoFwHLqkItOzgmyptrvc+2Z2VDvWJ655yHG
YQf35rbJVvQb/txErgrVEfc/fuYps0Y+iDwKWI3r7c/kkqVurv3SKPTRAKsafxIE
0ZhfAwfVbkmiBwwaoHml8HvkWIOoSEkYe+OrYPP29qolFyk8NI1EY5smvaIQWeIZ
Y6lvL6aFeZCEj5Dh4cMutY0zwFRrOCERdDyiFwgXdqP5goTNUjBkIkggolqOLfHp
LMNsMSgKQKDhAJPphx2K2sBYPm0yB+YvevbGtNkmWPZxFVJsUbX71AMWQmtX9fmB
aOCTngFGeK8vn1Y4TVisTx2r66uNgjPplQBbjSaZAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUsIaVnGXfzzqC6J+RugDm0Udt3nkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2MzZDE2ZGE0LTY2MDUtNGRjMC05ZGY2LWM3ZjEzYTBhMjg4YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/9UIAwDQYJKoZIhvcNAQELBQADggEBAMld7EqDRBOQbZp6XRHC4GGU
aRcweVnhQBViWB8AS4nC8og1bhSPUM2WDVaEVs51xWiuIuXhRA2WLR7uFyqwnXu2
URmpgp2exWOYJDjBIQA+tGbnLZFUb6w8Drq/USVoWBWcmbEFX2qqERLKtjvQSlVu
TD/NkXJL2HyMs/KYbXUhyE12EfTIRdpOIF1PDDv1Rg9WUEhD24iKO8R1cETwtRzx
N0fIrBn4AFRALrLsxwA/KVJ9wXROfk7MMctB09X04z0v4uhxf/CJ0npPM7X420Gu
aTxioJcZOqhvezO3eGWnSQ4uiuFyz4cw/ks6NCxPbUyXhrVgDnlLkLYQnPTw6zI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:51:54 2025 by rpki-client