Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d29a29fb-bf46-4296-9d6f-564c851b6643.roa
File: d29a29fb-bf46-4296-9d6f-564c851b6643.roa (raw, json)
Hash identifier: 2SEZMBxRx3k6MlI+OY00BOoS9MOMChrOXW8fL2vTzjw=
Subject key identifier: 9D:84:93:0C:6F:71:3B:E9:C4:26:70:E6:22:E1:B0:7A:96:CA:B3:AE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 329968EF18EF52232A613967D3D51AE065F31AF5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d29a29fb-bf46-4296-9d6f-564c851b6643.roa
Signing time: Tue 14 Oct 2025 15:41:31 +0000
ROA not before: Tue 14 Oct 2025 15:41:31 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fec:f800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:99:68:ef:18:ef:52:23:2a:61:39:67:d3:d5:1a:e0:65:f3:1a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 15:41:31 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=fde043aa56378c7bde188148b7530cf76f50a78008b5f01daa29582aff1cb479, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:da:fb:c8:c0:c4:50:da:28:1e:ba:60:10:
37:9c:b4:32:44:7b:e0:6f:f9:51:b2:c5:3d:c3:66:
89:51:4c:9e:3c:42:1f:e2:c6:99:e0:ac:7f:63:48:
16:b8:e7:4e:fd:3a:36:20:d7:80:65:3a:87:1d:61:
c0:86:f7:58:c6:39:45:b5:4f:22:fb:d2:53:96:4a:
c6:27:35:f4:45:f8:63:9b:27:32:7c:12:5e:37:13:
08:d4:e4:c2:32:3e:4d:18:87:42:5b:28:da:2b:91:
1e:b9:73:cd:de:51:8e:79:ab:ad:d9:39:ad:ef:1c:
49:6b:0d:c6:4a:76:17:f8:eb:68:cf:ec:59:dc:f9:
8f:03:9c:9e:d1:d4:b6:14:dd:19:fc:d7:7e:bb:d2:
27:64:6f:7a:14:41:95:a1:41:cc:df:68:83:18:33:
65:b7:81:0f:24:63:6a:e7:0f:6a:e5:ad:00:9f:ac:
34:aa:12:ed:75:d4:5c:b2:b0:38:15:d9:55:c9:c8:
53:43:98:58:96:0c:ff:99:1a:86:b4:0c:f0:63:35:
a5:78:51:63:d9:ef:05:66:76:a5:9d:43:4b:9b:2a:
dd:e2:e5:30:89:7f:69:c0:4f:66:66:e5:5a:cb:53:
f9:54:1c:39:8d:6e:70:d1:e9:98:5d:60:ee:f1:a0:
e5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:84:93:0C:6F:71:3B:E9:C4:26:70:E6:22:E1:B0:7A:96:CA:B3:AE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d29a29fb-bf46-4296-9d6f-564c851b6643.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fec:f800::/48
Signature Algorithm: sha256WithRSAEncryption
aa:20:c2:b5:c1:08:14:c0:97:b1:03:ed:34:c2:2c:77:d3:19:
cf:59:a4:b6:f4:17:77:93:14:5a:32:68:25:d4:06:b7:30:2b:
81:d8:e1:e2:0f:47:72:d3:d3:b9:30:2f:d6:e9:bd:d8:e2:03:
03:b9:f6:26:7a:94:c1:bf:b3:db:98:50:50:51:fa:2f:0a:fc:
61:22:f3:32:ee:e0:66:3c:e8:6a:81:96:38:41:d5:4b:cf:01:
76:82:85:e0:b4:04:af:63:29:f3:50:ff:98:1b:51:7f:c5:21:
b1:9b:7e:02:af:31:99:e4:34:09:33:eb:99:82:c7:b2:1f:4f:
43:97:83:bc:1b:64:70:b3:19:e6:4f:8e:0b:a4:75:db:e3:39:
87:e9:9e:db:7b:63:3e:79:5c:4a:24:ae:cd:25:79:96:d9:d9:
96:04:e5:a8:a2:b5:bc:e3:0e:5d:75:2f:9f:13:9c:a3:da:3f:
5c:20:19:89:d5:c4:dd:9e:a9:84:79:70:0d:b8:3a:c3:b1:ec:
9e:55:38:1a:ad:3b:87:48:54:85:a1:04:b4:25:c2:a6:ea:54:
10:31:da:f8:08:2f:80:41:03:a3:2e:f0:34:b8:0c:88:c8:62:
8a:9b:26:d5:00:50:13:04:ff:bd:b0:99:cc:e3:e2:a7:66:0f:
e8:2b:9d:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:25 2025 by rpki-client