Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e122f150-4433-49fd-8d03-e561b732c146.roa
File: e122f150-4433-49fd-8d03-e561b732c146.roa (raw, json)
Hash identifier: QnYMYGNVkRmJhzKNvLXb0riwfNU1OBAuKNNDkm1YPEs=
Subject key identifier: 3D:8B:99:F7:5C:34:9A:6F:81:5F:BF:66:16:E4:BE:B6:6A:A0:9B:64
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: BC6A29F3E66479F3AA2B7817601CC352EADFB1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e122f150-4433-49fd-8d03-e561b732c146.roa
Signing time: Tue 14 Oct 2025 15:42:22 +0000
ROA not before: Tue 14 Oct 2025 15:42:22 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1fec:9800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
bc:6a:29:f3:e6:64:79:f3:aa:2b:78:17:60:1c:c3:52:ea:df:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 15:42:22 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=a8786e27efac610744c852ee729c9bdf822c609d3edb28763dfc065fb980c3d3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fc:e2:59:13:d7:b2:9c:52:c6:af:fa:2c:1e:
8a:1c:10:bc:aa:71:ae:c5:bf:df:87:b6:94:ec:bc:
66:60:4b:eb:08:c0:f1:08:eb:78:84:58:c5:06:23:
58:4a:3c:39:84:62:3e:aa:29:e6:42:73:49:55:36:
39:16:4f:6a:30:1e:22:ef:9b:0b:bd:a0:f6:0c:5d:
83:5c:2a:fb:a8:24:8e:3d:3f:cd:38:a5:c4:94:79:
38:1a:3b:ef:de:9f:43:7b:e0:90:af:b4:d6:5b:1e:
b1:fd:e3:fa:c8:8f:3a:bf:86:8c:c1:93:d3:e8:57:
1f:c8:0a:03:5e:06:89:ed:ef:d6:4f:37:10:b8:f0:
e1:b3:21:b6:c5:0d:55:50:6a:14:8b:a9:f2:6e:d6:
f7:55:54:37:51:ee:84:72:7d:da:5c:64:69:d0:d3:
ad:30:ae:d1:09:d1:f2:af:88:41:53:1b:0c:89:80:
45:58:ae:72:54:a8:0b:1c:80:a9:42:eb:8f:4e:bb:
c3:ea:86:a7:b5:b5:31:5d:e6:c8:3e:4a:0a:6b:ff:
67:12:80:f0:26:3e:82:dd:0d:9c:93:60:10:5f:97:
13:d1:0f:b7:5c:03:e9:a8:dd:f0:cb:f4:3b:82:d7:
cb:88:6e:89:53:4e:51:db:37:8a:e4:da:11:78:e2:
67:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8B:99:F7:5C:34:9A:6F:81:5F:BF:66:16:E4:BE:B6:6A:A0:9B:64
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e122f150-4433-49fd-8d03-e561b732c146.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fec:9800::/48
Signature Algorithm: sha256WithRSAEncryption
33:27:d4:f2:01:90:2c:c3:1d:6a:c8:55:bb:d3:63:3e:a6:41:
42:69:55:fc:36:68:c3:a7:59:cd:6c:46:90:5a:63:70:5c:ed:
a8:06:df:43:47:d9:bb:5a:c0:5d:6b:9e:03:23:3c:c0:05:c2:
c4:6a:64:c4:8d:b8:45:a6:7c:88:8c:87:d3:b8:2d:cd:4c:e1:
71:70:7a:20:d0:93:b9:36:5a:a9:e9:c6:16:9f:9e:f1:1a:c9:
8a:85:35:b8:85:bf:b7:d5:ba:d3:ef:6e:a7:ab:0e:23:ad:8e:
68:5f:f7:b5:2e:02:15:9b:4f:9f:41:f9:59:ce:67:c7:2d:80:
f1:91:59:ac:6f:92:45:5c:da:41:c0:b6:c6:f0:ac:af:c7:78:
ed:32:12:dd:41:ea:e6:c6:be:43:6e:ae:18:3f:a3:91:eb:a0:
aa:cf:7a:08:6e:95:33:84:60:19:8a:30:6f:e4:83:f0:d2:f5:
ed:6e:85:62:f3:a7:65:86:05:48:50:06:f6:84:a1:d1:9e:b1:
b9:5a:78:f4:28:16:4a:0a:2c:71:6a:f2:96:b6:64:7e:be:a0:
c3:ac:88:d2:5c:60:0b:1f:09:6d:65:e2:77:64:b3:f9:a9:ef:
d3:1b:94:b2:85:7c:e7:de:a9:4b:b6:d1:2a:6b:90:97:5d:06:
51:47:c1:75
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUALxqKfPmZHnzqit4F2Acw1Lq37EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MTU0MjIyWhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BhODc4NmUyN2VmYWM2MTA3NDRjODUyZWU3MjljOWJkZjgy
MmM2MDlkM2VkYjI4NzYzZGZjMDY1ZmI5ODBjM2QzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCm/OJZE9eynFLGr/osHoocELyqca7Fv9+HtpTsvGZgS+sI
wPEI63iEWMUGI1hKPDmEYj6qKeZCc0lVNjkWT2owHiLvmwu9oPYMXYNcKvuoJI49
P804pcSUeTgaO+/en0N74JCvtNZbHrH94/rIjzq/hozBk9PoVx/ICgNeBont79ZP
NxC48OGzIbbFDVVQahSLqfJu1vdVVDdR7oRyfdpcZGnQ060wrtEJ0fKviEFTGwyJ
gEVYrnJUqAscgKlC649Ou8Pqhqe1tTFd5sg+Sgpr/2cSgPAmPoLdDZyTYBBflxPR
D7dcA+mo3fDL9DuC18uIbolTTlHbN4rk2hF44meJAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUPYuZ91w0mm+BX79mFuS+tmqgm2QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2UxMjJmMTUwLTQ0MzMtNDlmZC04ZDAzLWU1NjFiNzMyYzE0Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/smAAwDQYJKoZIhvcNAQELBQADggEBADMn1PIBkCzDHWrIVbvTYz6m
QUJpVfw2aMOnWc1sRpBaY3Bc7agG30NH2btawF1rngMjPMAFwsRqZMSNuEWmfIiM
h9O4Lc1M4XFweiDQk7k2WqnpxhafnvEayYqFNbiFv7fVutPvbqerDiOtjmhf97Uu
AhWbT59B+VnOZ8ctgPGRWaxvkkVc2kHAtsbwrK/HeO0yEt1B6ubGvkNurhg/o5Hr
oKrPeghulTOEYBmKMG/kg/DS9e1uhWLzp2WGBUhQBvaEodGesblaePQoFkoKLHFq
8pa2ZH6+oMOsiNJcYAsfCW1l4ndks/mp79MblLKFfOfeqUu20SprkJddBlFHwXU=
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:17 2025 by rpki-client