Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7540042-1736-4305-ba9f-219cf482d093.roa
File: e7540042-1736-4305-ba9f-219cf482d093.roa (raw, json)
Hash identifier: zYTeOAQDpftvg72EP99Cd0C+TCZVoJduyULHWxEivFw=
Subject key identifier: 67:C1:AD:B8:98:07:1F:80:DA:CC:AF:06:D7:A8:6F:0B:D7:7D:26:90
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 193A9C6DE87A419523D77BEA2FC2FD26A22C7D93
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7540042-1736-4305-ba9f-219cf482d093.roa
Signing time: Sat 04 Oct 2025 00:41:49 +0000
ROA not before: Sat 04 Oct 2025 00:41:49 +0000
ROA not after: Sat 08 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f61:8000::/39 maxlen: 39
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:3a:9c:6d:e8:7a:41:95:23:d7:7b:ea:2f:c2:fd:26:a2:2c:7d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 4 00:41:49 2025 GMT
Not After : Nov 8 23:59:59 2025 GMT
Subject: serialNumber=da87c56d44cd961a757a222ecc7833211da8523049b6002523ceb2d558a58246, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9f:a1:1c:d6:20:59:fa:df:0f:5c:3b:c0:69:
e2:b0:05:f2:9a:6a:0c:e4:2c:96:71:90:b2:9e:f3:
3f:6b:81:98:31:ad:13:75:fc:ff:bb:1d:94:92:d5:
6e:ea:65:d9:54:76:b0:5e:ea:5a:8c:9e:41:be:f9:
ca:b7:03:60:64:b1:19:a9:cf:21:b0:a5:e4:3f:9a:
ab:b5:9b:d6:1c:ec:2e:95:10:7e:43:ef:39:96:e0:
58:31:ab:0b:42:fe:02:d9:61:40:df:f6:92:64:77:
ce:10:d9:f4:b4:b8:4f:e6:c7:6d:a6:b5:1a:12:58:
e9:3d:16:7b:58:33:5c:31:6b:2f:3a:41:31:b2:31:
40:4b:3c:1c:9a:bf:0e:75:5f:23:b8:4b:12:60:69:
b3:a3:29:2b:5c:21:fd:7b:92:78:fc:c2:97:a1:18:
55:ba:0b:71:ba:6c:a9:e8:f4:60:ca:49:40:50:d7:
90:85:a8:30:a1:11:d0:d1:5b:2f:d0:56:b0:d3:81:
e0:ca:55:4f:54:ef:82:9e:ec:a4:3f:79:f3:f2:ec:
20:42:a6:43:43:0c:43:89:fc:15:51:ec:41:21:4c:
26:9a:d7:17:64:74:3e:c9:20:3d:5a:cf:cc:a6:f1:
17:db:a4:c1:b6:34:36:2e:c4:cc:5b:c0:91:50:bb:
35:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C1:AD:B8:98:07:1F:80:DA:CC:AF:06:D7:A8:6F:0B:D7:7D:26:90
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7540042-1736-4305-ba9f-219cf482d093.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f61:8000::/39
Signature Algorithm: sha256WithRSAEncryption
51:ab:45:56:57:19:31:f0:2a:26:88:2d:08:50:89:88:84:e2:
09:3a:9f:1b:01:d0:8d:88:a4:66:51:0a:ef:77:69:72:27:49:
26:be:dd:8d:c4:b2:e2:0d:5b:37:31:af:a8:7b:7a:fd:97:68:
53:a6:89:af:92:71:44:0b:b2:68:5c:3d:2f:48:c0:82:18:02:
f3:33:c3:8f:60:80:f9:cd:e1:47:b6:80:46:44:67:d1:00:95:
84:b3:68:23:99:1f:14:84:89:3c:60:76:e2:0b:d7:ac:ca:52:
a8:53:57:21:39:80:04:0d:95:d9:ed:4e:50:51:09:8d:36:7a:
73:43:c6:f6:2e:56:10:b6:b0:d6:9c:f7:af:cd:25:3c:49:83:
27:81:a4:d9:54:18:6f:fc:5c:b4:f4:fe:b4:24:a1:6c:d1:c8:
c0:24:50:dc:12:c3:26:46:c5:12:61:c6:64:eb:37:97:12:9d:
69:59:54:08:d9:c1:42:a0:dc:73:46:c8:ed:ce:2a:6f:5a:ab:
56:08:31:1c:16:12:eb:73:0e:bf:32:40:bd:a3:26:43:88:cf:
52:92:f5:74:f0:15:d8:c1:15:20:eb:1e:8c:1c:3f:b5:9b:bd:
1c:c7:bf:01:22:fc:65:49:ef:e6:e1:fe:3e:75:11:b7:24:81:
1e:c1:a7:ff
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUGTqcbeh6QZUj13vqL8L9JqIsfZMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDA0MDA0MTQ5WhcNMjUxMTA4MjM1OTU5
WjB6MUkwRwYDVQQFE0BkYTg3YzU2ZDQ0Y2Q5NjFhNzU3YTIyMmVjYzc4MzMyMTFk
YTg1MjMwNDliNjAwMjUyM2NlYjJkNTU4YTU4MjQ2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDMn6Ec1iBZ+t8PXDvAaeKwBfKaagzkLJZxkLKe8z9rgZgx
rRN1/P+7HZSS1W7qZdlUdrBe6lqMnkG++cq3A2BksRmpzyGwpeQ/mqu1m9Yc7C6V
EH5D7zmW4FgxqwtC/gLZYUDf9pJkd84Q2fS0uE/mx22mtRoSWOk9FntYM1wxay86
QTGyMUBLPByavw51XyO4SxJgabOjKStcIf17knj8wpehGFW6C3G6bKno9GDKSUBQ
15CFqDChEdDRWy/QVrDTgeDKVU9U74Ke7KQ/efPy7CBCpkNDDEOJ/BVR7EEhTCaa
1xdkdD7JID1az8ym8RfbpMG2NDYuxMxbwJFQuzV7AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUZ8GtuJgHH4DazK8G16hvC9d9JpAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U3NTQwMDQyLTE3MzYtNDMwNS1iYTlmLTIxOWNmNDgyZDA5My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgEmAB9hgDANBgkqhkiG9w0BAQsFAAOCAQEAUatFVlcZMfAqJogtCFCJiITi
CTqfGwHQjYikZlEK73dpcidJJr7djcSy4g1bNzGvqHt6/ZdoU6aJr5JxRAuyaFw9
L0jAghgC8zPDj2CA+c3hR7aARkRn0QCVhLNoI5kfFISJPGB24gvXrMpSqFNXITmA
BA2V2e1OUFEJjTZ6c0PG9i5WELaw1pz3r80lPEmDJ4Gk2VQYb/xctPT+tCShbNHI
wCRQ3BLDJkbFEmHGZOs3lxKdaVlUCNnBQqDcc0bI7c4qb1qrVggxHBYS63MOvzJA
vaMmQ4jPUpL1dPAV2MEVIOsejBw/tZu9HMe/ASL8ZUnv5uH+PnURtySBHsGn/w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:14 2025 by rpki-client