Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d588fc46-894c-4cbc-9891-a30ba3680ef1.roa
File: d588fc46-894c-4cbc-9891-a30ba3680ef1.roa (raw, json)
Hash identifier: cHss4puhJodiiMKKT/7RCEg9u5ZrMB972EtorML9ghw=
Subject key identifier: B2:DE:CB:9F:3E:9F:4C:A4:50:61:70:96:82:35:A7:F3:BF:75:97:E2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4C0E45B54032C746B0A535B8F430AE302C0A9903
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d588fc46-894c-4cbc-9891-a30ba3680ef1.roa
Signing time: Sat 27 Sep 2025 00:12:58 +0000
ROA not before: Sat 27 Sep 2025 00:12:58 +0000
ROA not after: Sat 01 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fed:4000::/39 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:0e:45:b5:40:32:c7:46:b0:a5:35:b8:f4:30:ae:30:2c:0a:99:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 27 00:12:58 2025 GMT
Not After : Nov 1 23:59:59 2025 GMT
Subject: serialNumber=3fe71de87b0f83818ceaed38e1da2fd0ff4a5aca0f9c36743a5fa434401109a5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8e:85:2f:22:77:c2:27:27:ea:ad:b9:18:65:
cd:d7:68:10:67:32:c0:57:f0:f6:a7:44:49:09:1a:
59:35:15:8f:d5:a1:f3:da:54:a6:32:ba:35:f7:4b:
98:9d:44:79:0a:f0:01:25:bb:5b:99:f7:52:c3:d7:
12:70:b0:47:ca:60:8f:b6:48:b1:7e:ef:78:a5:c4:
18:24:c7:13:d8:53:42:67:fa:14:be:2c:2a:2c:cf:
c6:26:7f:8e:1c:77:db:b5:89:11:fe:f4:60:37:7d:
43:68:26:69:77:72:75:83:2c:1b:33:19:52:87:be:
7a:28:fa:d1:c6:0c:5c:57:83:9d:0a:4a:2b:11:00:
9d:9c:39:63:61:ad:7e:5d:7a:62:d7:81:c8:ab:1f:
6b:f4:fe:e2:19:50:8a:19:5e:fe:02:4e:3e:89:33:
c8:b2:74:42:46:e0:9b:95:04:d1:40:e4:9f:05:7c:
9a:a3:7e:86:c7:d1:85:f7:90:3f:5c:4b:4a:50:5e:
14:b0:87:e0:5a:cd:4c:38:78:2a:ca:82:b9:03:67:
7d:13:78:bc:5d:76:5e:0f:4a:4d:e4:7d:2b:4b:63:
17:8e:cd:1f:ea:48:83:a3:81:b7:33:ef:47:bf:ed:
b6:b2:ad:5d:07:27:80:5f:31:ec:90:9c:ba:45:fd:
54:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DE:CB:9F:3E:9F:4C:A4:50:61:70:96:82:35:A7:F3:BF:75:97:E2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d588fc46-894c-4cbc-9891-a30ba3680ef1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fed:4000::/39
Signature Algorithm: sha256WithRSAEncryption
07:11:94:c6:80:45:cb:a6:ea:dd:b9:b0:a5:93:08:d7:3d:93:
78:6c:b6:f4:e7:bd:de:6d:ed:43:e6:b1:af:64:6c:58:c0:ae:
7e:b5:4f:00:35:ae:63:36:68:d0:c0:bb:59:f2:7b:ba:c7:92:
93:24:51:9f:76:31:84:57:89:82:4e:de:ca:a6:b1:14:c2:80:
d2:8f:50:2b:8b:7c:9f:22:34:ab:99:c4:99:2b:a0:b2:a3:9a:
c2:b7:34:35:70:3a:d7:8d:8f:80:d1:06:60:c4:b0:ce:ff:38:
5a:aa:c7:8e:7b:f1:d7:41:af:27:3f:4a:32:94:10:84:17:13:
04:fd:49:47:45:71:01:a9:a5:cb:36:62:f0:e8:4f:17:54:e2:
48:ad:d1:27:f9:13:b8:d6:47:05:cd:84:36:cc:6c:3a:0c:5c:
48:54:78:49:92:8b:86:e4:6f:6f:ea:c4:24:ce:da:c9:a9:0e:
6f:e0:12:5e:76:7b:38:67:69:31:02:2b:bc:b4:8e:57:3c:77:
0b:4a:53:52:5b:65:a6:ce:b5:fd:ae:47:71:b7:c9:29:2d:f5:
56:20:8e:f1:be:19:24:ef:bd:f0:c5:c6:be:d6:08:fe:85:27:
41:4e:a2:eb:c2:bd:c6:a3:36:00:11:75:16:50:b8:91:ba:20:
26:e0:68:f2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 21 04:49:18 2025 by rpki-client