Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9879d20-7d75-4e5c-8841-28289c14ef4d.roa
File: d9879d20-7d75-4e5c-8841-28289c14ef4d.roa (raw, json)
Hash identifier: o/SCL71mxDajHPauXFYljqxM3NdAyXnTLsmFD7D3zNA=
Subject key identifier: 19:05:B1:1F:B4:8D:3F:5E:C1:4A:C4:EE:8A:C8:AA:AB:0C:32:46:C4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 164051583850DBE2CD5552E037FE8837E99813DF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9879d20-7d75-4e5c-8841-28289c14ef4d.roa
Signing time: Sat 18 Oct 2025 02:21:30 +0000
ROA not before: Sat 18 Oct 2025 02:21:30 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1ff1:8000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:40:51:58:38:50:db:e2:cd:55:52:e0:37:fe:88:37:e9:98:13:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 02:21:30 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=73cad90dc95ce167bc60a88a38120485e9ebc73e6fb6fa274229a7ddfec35c4a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:47:6f:ce:5f:ab:57:db:3f:7d:04:02:a6:a9:
e6:8f:64:ba:f5:00:5b:31:cf:da:05:8e:df:bb:29:
77:3b:d6:ec:fd:fd:e3:3c:82:0e:fc:fd:54:a2:26:
36:63:ca:bf:0f:55:db:b5:41:d8:a8:c8:a7:6e:96:
d1:3c:41:c3:2a:8a:3b:c9:8d:fd:b3:ca:bb:a8:8c:
9b:60:90:36:ce:77:86:61:22:2e:02:5e:7e:50:b0:
e5:60:ec:2a:ac:00:e6:3d:ea:95:be:b6:31:ed:8d:
99:41:d3:d5:87:9d:ae:58:ef:0c:0a:bb:97:03:f7:
2d:c2:a1:aa:b3:ab:5d:90:9a:82:e9:e0:af:2c:b1:
14:2c:00:a9:f1:08:4f:89:1c:a4:c1:b9:e1:8b:a3:
0b:fd:93:26:c2:8f:cd:0a:4a:ac:2c:e1:3e:77:fb:
99:e3:33:a9:e0:50:8e:c5:d1:c7:dd:75:60:8a:58:
af:fc:fe:94:a6:25:6e:8c:cf:16:c9:7e:f3:14:e9:
ec:74:b7:08:a5:da:65:83:a7:93:f0:8d:82:32:42:
12:f5:e9:54:d4:2f:0d:65:74:bf:a8:4d:b6:da:bf:
59:bf:60:b4:3b:de:5b:2b:ef:84:26:ea:57:d7:0a:
4b:57:b9:56:44:24:57:8f:21:bf:c3:43:f1:6d:65:
ba:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:05:B1:1F:B4:8D:3F:5E:C1:4A:C4:EE:8A:C8:AA:AB:0C:32:46:C4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9879d20-7d75-4e5c-8841-28289c14ef4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff1:8000::/40
Signature Algorithm: sha256WithRSAEncryption
27:1b:47:e7:ff:d0:0e:ff:be:1a:74:d1:14:52:f0:b1:0e:be:
7b:4b:1e:24:a8:99:d0:4a:e5:73:5c:68:53:32:c6:7c:eb:7e:
98:1d:cb:63:e2:bb:d8:47:31:fc:e2:b5:71:a5:0b:c6:81:50:
87:73:a0:5e:9e:8e:00:d9:94:49:15:2d:4a:3c:a3:af:b4:33:
c5:79:6a:67:de:06:5d:11:67:2c:5b:6c:52:04:57:5f:be:84:
82:f7:46:c4:d0:85:52:51:0a:6c:dc:4b:b4:75:e0:6f:77:74:
ef:35:94:5f:05:ad:e7:bf:80:67:7b:41:d5:bb:20:a6:f9:52:
8b:e9:9b:59:bb:40:fa:f7:fa:dd:c0:41:3b:a6:2c:71:cb:54:
54:f7:fb:0b:43:e5:42:66:03:53:c5:9e:26:7a:5d:b5:4e:31:
ab:4c:30:21:97:14:00:51:25:fc:e1:2d:3f:ee:22:35:b2:05:
15:72:be:14:3e:b7:4f:31:c2:86:af:5a:bd:1d:b0:69:eb:5b:
63:93:e6:57:9e:54:04:89:d3:39:1d:94:a9:e3:24:40:ef:a2:
1b:02:14:ee:d2:9a:0d:70:af:16:2a:65:c6:48:1f:03:03:e4:
77:f1:ab:17:0d:e0:bf:5b:9b:e4:06:54:07:17:9c:bc:5b:1c:
a3:66:69:e4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:22:10 2025 by rpki-client