Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d44f1594-4df6-4ab4-ab16-494a8e9f5f41.roa
File: d44f1594-4df6-4ab4-ab16-494a8e9f5f41.roa (raw, json)
Hash identifier: 1R5iSAZTK+eoLyafzVcN4Nh8+DVjbZTJzWPcgg3rpdc=
Subject key identifier: A6:AA:E0:FC:84:38:2B:91:55:1D:F6:24:DE:41:FF:8B:44:2B:C2:F6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 090DEF59801F748A42388FDF8F073B3C7D6AB27B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d44f1594-4df6-4ab4-ab16-494a8e9f5f41.roa
Signing time: Fri 17 Oct 2025 21:31:27 +0000
ROA not before: Fri 17 Oct 2025 21:31:27 +0000
ROA not after: Fri 21 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1fff:81a0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:0d:ef:59:80:1f:74:8a:42:38:8f:df:8f:07:3b:3c:7d:6a:b2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 17 21:31:27 2025 GMT
Not After : Nov 21 23:59:59 2025 GMT
Subject: serialNumber=15c2b0bfce4a58836ca321b03f72528f9b779365fca36be3d4b4c293d55a6f49, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:77:75:e7:94:12:17:35:2c:d8:c7:61:4a:7d:
fe:72:f2:cf:dd:a2:1d:ca:98:9d:ca:83:41:bb:dd:
50:9d:12:ca:d8:8b:6a:65:cf:25:13:f7:29:77:2b:
c5:94:e0:96:2e:bf:d5:f8:79:90:49:ad:90:0f:16:
c4:06:ed:f9:40:06:a5:5e:52:61:a1:0e:27:7d:90:
ea:ef:ed:f4:2e:1f:de:51:a8:88:5f:5c:0d:5f:67:
45:3f:ff:6b:6e:fa:8b:cd:33:5b:8c:05:97:d3:f9:
0f:3a:73:27:5b:31:a5:6a:bd:22:7f:bb:94:2e:5d:
8e:74:c8:e9:84:e3:41:80:56:7e:d3:43:57:9b:dc:
65:46:bd:0b:bd:5f:b5:8e:e0:3c:20:da:97:65:32:
7b:2a:5b:03:2c:bc:09:9e:e6:0a:6b:80:a5:ba:c5:
7b:e9:fb:f7:6b:8f:80:66:57:54:f5:65:b6:0d:bb:
88:e3:03:48:db:6b:e9:ab:6e:61:bd:d3:5e:9f:08:
db:1a:20:ec:7c:5f:ac:c8:a9:1e:eb:24:5a:63:13:
c6:b6:37:2d:5d:09:b3:7b:e0:74:36:aa:ec:27:32:
e6:af:d7:27:c8:30:05:cc:66:9a:4a:ba:50:f7:7a:
32:76:b5:2b:bc:eb:95:c6:95:3e:63:41:65:07:59:
44:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AA:E0:FC:84:38:2B:91:55:1D:F6:24:DE:41:FF:8B:44:2B:C2:F6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d44f1594-4df6-4ab4-ab16-494a8e9f5f41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:81a0::/48
Signature Algorithm: sha256WithRSAEncryption
35:4c:ff:76:f0:30:fd:1b:96:81:e1:00:90:7d:59:14:0b:4c:
3c:2f:8e:3d:66:41:4d:b8:f6:9e:90:98:38:15:cd:3b:c1:af:
3d:27:18:69:5b:d2:e2:94:dd:3b:c9:e9:ae:e5:a5:ae:f8:3f:
d8:a1:cb:17:c0:33:33:0e:cd:82:e1:c4:52:d5:5a:c4:fa:2a:
40:b7:4d:63:8e:83:4a:2b:65:90:62:d7:33:cb:32:e5:26:d5:
59:70:68:52:85:72:d0:64:69:59:d9:c0:98:14:02:aa:53:b4:
46:21:20:84:71:1a:dd:e8:6b:3d:50:86:fc:de:78:3c:58:40:
b8:8e:0c:20:c5:4b:5c:7f:18:d6:d4:af:09:c5:a9:5e:58:25:
ea:08:d8:79:e7:02:68:8e:5c:de:07:f8:f3:36:1d:4e:19:15:
c2:9e:f5:3f:6a:97:cf:e9:24:14:96:a6:b1:8f:45:c8:85:21:
0d:19:a3:0d:b1:c4:53:08:2c:f2:15:ad:cb:37:4a:3a:5d:ea:
ca:b4:e5:01:77:cc:9f:a1:19:ee:60:a7:75:87:fd:db:01:b4:
bf:13:6a:7a:4e:1e:e2:d4:79:80:72:5d:05:1a:8f:f3:b3:19:
52:33:80:4c:02:c5:a4:89:b8:db:74:57:22:05:01:b4:6e:f3:
0d:f1:0f:d9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:20:49 2025 by rpki-client