Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd18445e-9116-49ee-9fe6-e9a4b4c19586.roa
File: dd18445e-9116-49ee-9fe6-e9a4b4c19586.roa (raw, json)
Hash identifier: UZblqTeilbxlN3VKok7uHsU1ILGFMFTb7Ne9kLBb/KI=
Subject key identifier: D9:06:C3:4C:22:10:89:0B:73:01:9C:13:42:25:A9:E9:52:40:F9:27
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0B384BBE4C54AC681CEF8BA13206FCC688D25D84
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd18445e-9116-49ee-9fe6-e9a4b4c19586.roa
Signing time: Sat 18 Oct 2025 02:50:04 +0000
ROA not before: Sat 18 Oct 2025 02:50:04 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f15:4800::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:38:4b:be:4c:54:ac:68:1c:ef:8b:a1:32:06:fc:c6:88:d2:5d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 02:50:04 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=ab16a60dbe846d4f9ec1119ba0eae8e320175061410891b04012f26177b112af, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:82:11:9b:60:23:72:7d:8a:1e:23:18:48:
62:8e:05:bf:61:c4:ac:9d:e1:e1:0c:33:42:5a:9c:
75:4d:53:33:0c:05:a6:0f:81:44:57:3c:c1:c6:78:
0d:51:1a:2d:29:3b:ac:74:c6:d0:c7:89:67:59:ec:
23:ef:95:34:98:50:a2:dc:1c:7b:69:f0:19:fe:9b:
b5:8b:bd:73:e1:1a:a9:97:3d:27:81:79:8e:f9:5e:
8e:38:ed:2b:92:52:ad:01:13:ca:75:f8:f3:8c:d8:
4e:e0:d6:f7:e7:b5:b2:57:00:62:b1:c3:a7:55:31:
fd:91:05:84:6f:f8:65:34:9f:3f:b4:e7:f4:c1:df:
c2:b2:35:ca:64:be:57:6a:24:18:9c:01:bd:a3:1e:
65:8e:73:b4:a6:c2:5d:a3:13:d0:27:b4:ee:94:da:
48:d8:eb:08:42:28:9d:63:fa:a2:2c:57:d3:87:b1:
3c:f7:5f:b8:98:e8:68:24:42:b3:e3:e3:5e:9b:cd:
eb:3f:5e:e3:c6:55:9f:ec:eb:38:b3:e0:89:11:f9:
9e:6c:65:21:f9:bc:06:de:f0:33:cd:5d:16:5a:d3:
79:c1:ad:c8:0e:e2:96:30:91:73:58:96:bf:a8:95:
74:98:40:54:ab:fe:f2:f2:a3:27:6c:eb:d5:dd:9b:
b6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:06:C3:4C:22:10:89:0B:73:01:9C:13:42:25:A9:E9:52:40:F9:27
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd18445e-9116-49ee-9fe6-e9a4b4c19586.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f15:4800::/37
Signature Algorithm: sha256WithRSAEncryption
2c:89:61:51:66:67:a4:05:77:44:94:22:24:f7:2f:62:f9:e0:
98:a6:c3:6c:63:f2:3e:9d:51:7f:bb:ad:d0:6e:0d:34:88:79:
f7:03:8c:90:28:80:f8:a4:f4:6a:8e:cf:47:e2:0c:45:c0:f8:
50:34:21:4f:ae:d7:fb:88:e8:4b:0a:97:af:e4:5e:84:14:4b:
8e:6c:a7:1b:27:9c:d6:51:0f:03:54:1e:15:78:fc:a9:15:41:
fb:ba:d5:ee:bf:e1:61:10:58:e4:51:48:64:23:b0:2d:b1:ac:
e5:0b:ac:bf:fa:3e:85:d4:0c:61:e6:46:36:0d:12:08:e2:4c:
83:a5:7a:c9:60:49:97:f3:89:37:21:df:98:4c:85:71:33:38:
49:8a:ba:03:af:fb:64:3f:78:fa:d5:22:c9:74:4f:4a:6a:6e:
e6:a3:98:cc:96:9d:fc:6d:56:05:c0:a8:a9:06:51:3e:9f:b0:
bd:f0:bf:10:34:b1:70:39:c5:de:0d:3c:8e:f0:00:74:41:fc:
91:85:ea:47:5f:0f:61:23:3a:7d:90:04:53:56:f3:c7:14:30:
ed:ee:64:48:f0:41:fc:83:bb:be:ef:df:26:09:cb:49:7c:3f:
21:d5:76:9f:43:41:12:1f:6f:10:f0:7f:a8:98:e2:5c:84:cb:
b7:9e:eb:3c
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUCzhLvkxUrGgc74uhMgb8xojSXYQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDI1MDA0WhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BhYjE2YTYwZGJlODQ2ZDRmOWVjMTExOWJhMGVhZThlMzIw
MTc1MDYxNDEwODkxYjA0MDEyZjI2MTc3YjExMmFmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC58oIRm2Ajcn2KHiMYSGKOBb9hxKyd4eEMM0JanHVNUzMM
BaYPgURXPMHGeA1RGi0pO6x0xtDHiWdZ7CPvlTSYUKLcHHtp8Bn+m7WLvXPhGqmX
PSeBeY75Xo447SuSUq0BE8p1+POM2E7g1vfntbJXAGKxw6dVMf2RBYRv+GU0nz+0
5/TB38KyNcpkvldqJBicAb2jHmWOc7Smwl2jE9AntO6U2kjY6whCKJ1j+qIsV9OH
sTz3X7iY6GgkQrPj416bzes/XuPGVZ/s6ziz4IkR+Z5sZSH5vAbe8DPNXRZa03nB
rcgO4pYwkXNYlr+olXSYQFSr/vLyoyds69Xdm7afAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU2QbDTCIQiQtzAZwTQiWp6VJA+ScwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2RkMTg0NDVlLTkxMTYtNDllZS05ZmU2LWU5YTRiNGMxOTU4Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgMmAB8VSDANBgkqhkiG9w0BAQsFAAOCAQEALIlhUWZnpAV3RJQiJPcvYvng
mKbDbGPyPp1Rf7ut0G4NNIh59wOMkCiA+KT0ao7PR+IMRcD4UDQhT67X+4joSwqX
r+RehBRLjmynGyec1lEPA1QeFXj8qRVB+7rV7r/hYRBY5FFIZCOwLbGs5Qusv/o+
hdQMYeZGNg0SCOJMg6V6yWBJl/OJNyHfmEyFcTM4SYq6A6/7ZD94+tUiyXRPSmpu
5qOYzJad/G1WBcCoqQZRPp+wvfC/EDSxcDnF3g08jvAAdEH8kYXqR18PYSM6fZAE
U1bzxxQw7e5kSPBB/IO7vu/fJgnLSXw/IdV2n0NBEh9vEPB/qJjiXITLt57rPA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:22:18 2025 by rpki-client