Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efd4a16e-f5e8-4c2d-9d1d-66e408445e63.roa
File: efd4a16e-f5e8-4c2d-9d1d-66e408445e63.roa (raw, json)
Hash identifier: BnWgrfLZH5O81AfsM1FnWMBRUm335Q/+mIF1pTNWQ9U=
Subject key identifier: 49:04:24:23:A1:98:2B:61:27:45:6C:D3:FB:A5:DA:51:80:87:76:24
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7E62C6443E7377EF47B2BC342A88EA847A10F8B1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efd4a16e-f5e8-4c2d-9d1d-66e408445e63.roa
Signing time: Mon 06 Oct 2025 16:01:12 +0000
ROA not before: Mon 06 Oct 2025 16:01:12 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ffe:3400::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:62:c6:44:3e:73:77:ef:47:b2:bc:34:2a:88:ea:84:7a:10:f8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 6 16:01:12 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=26603300afa13e34a792da705c92b08b96639a06e3779f7343e0fe07c3aeba20, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4b:f6:36:79:04:9c:e9:e9:11:15:db:33:36:
a3:29:a1:81:d8:ac:55:9a:c9:3e:de:2a:5e:4c:be:
f2:61:56:f8:3a:f4:d6:34:8a:96:2f:7a:3e:ff:ea:
8c:aa:15:69:84:14:a2:b6:da:8a:79:5f:9b:b9:03:
ac:f9:31:8e:ff:84:b2:4c:69:1a:5e:05:3c:ad:92:
79:06:9a:c9:06:90:2d:06:d3:e5:3e:c2:04:f2:7c:
4f:84:fe:32:b4:3c:95:43:fa:2a:84:ea:8c:10:40:
0b:db:c2:2d:ef:26:83:e7:a0:42:c8:96:f5:e0:46:
e6:7c:b5:5a:a0:84:eb:d3:20:81:0d:38:16:15:b0:
19:38:42:83:54:2f:b9:37:6c:c4:b4:38:a9:6c:ac:
80:b6:64:da:ad:d1:3e:af:7d:bd:b9:5d:5e:46:42:
85:df:79:ab:0b:8b:ad:ad:c3:42:cc:a6:35:60:d9:
16:95:e6:7e:cb:e8:ab:85:ad:5b:3a:df:45:b9:eb:
7a:37:4e:c9:00:80:32:29:5c:58:c6:2e:bf:4b:a7:
f1:53:28:ad:ce:bc:69:0c:96:19:bc:da:6d:ad:4b:
fa:ae:8b:4d:c8:7f:26:c8:69:f6:8f:e4:1e:25:c1:
63:e5:b3:1b:16:e4:a0:2a:13:e8:64:91:c4:81:49:
00:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:04:24:23:A1:98:2B:61:27:45:6C:D3:FB:A5:DA:51:80:87:76:24
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efd4a16e-f5e8-4c2d-9d1d-66e408445e63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffe:3400::/40
Signature Algorithm: sha256WithRSAEncryption
5d:01:5e:de:7b:23:a6:f6:4a:c5:12:79:af:07:5d:d0:c7:40:
49:0f:ed:0d:be:ef:5f:00:be:62:d2:db:b1:4d:9e:79:ef:6a:
92:fe:f0:7d:e8:2a:bc:47:25:64:f2:c6:45:c0:1f:ea:52:64:
87:e3:be:30:f1:3f:2b:db:26:71:88:b7:a3:4b:00:8c:7b:37:
54:f1:64:c3:e4:bf:a8:1a:b9:15:40:12:cf:b7:61:1e:16:6c:
f1:40:ce:b0:65:ab:c5:cf:32:b2:15:c2:54:ac:60:22:80:6e:
e5:24:91:da:24:82:8a:1c:88:ac:67:b8:16:61:7f:a5:5e:02:
e7:e2:76:9d:9c:22:16:b6:7b:91:8e:01:51:0d:e0:71:d7:ff:
8a:00:19:cf:23:c7:69:e7:a3:d3:c2:e4:25:1f:74:86:55:c6:
e8:f2:79:6c:a8:54:3a:c8:ff:2f:57:4f:aa:3c:03:82:e8:82:
26:81:ab:1b:bf:ba:e2:75:79:5f:1a:d8:5e:1f:fc:4a:46:5f:
3f:27:23:64:21:3f:cb:b0:ef:8c:8a:3f:30:ff:7e:a4:4b:e3:
a2:05:6e:98:69:91:d3:8f:f8:2e:68:1c:e0:2a:47:16:1d:df:
63:3d:43:f0:7d:c3:f5:aa:2e:b8:b0:85:5c:8d:5e:8f:39:f9:
8d:27:f0:b3
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUfmLGRD5zd+9Hsrw0KojqhHoQ+LEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDA2MTYwMTEyWhcNMjUxMTEwMjM1OTU5
WjB6MUkwRwYDVQQFE0AyNjYwMzMwMGFmYTEzZTM0YTc5MmRhNzA1YzkyYjA4Yjk2
NjM5YTA2ZTM3NzlmNzM0M2UwZmUwN2MzYWViYTIwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCgS/Y2eQSc6ekRFdszNqMpoYHYrFWayT7eKl5MvvJhVvg6
9NY0ipYvej7/6oyqFWmEFKK22op5X5u5A6z5MY7/hLJMaRpeBTytknkGmskGkC0G
0+U+wgTyfE+E/jK0PJVD+iqE6owQQAvbwi3vJoPnoELIlvXgRuZ8tVqghOvTIIEN
OBYVsBk4QoNUL7k3bMS0OKlsrIC2ZNqt0T6vfb25XV5GQoXfeasLi62tw0LMpjVg
2RaV5n7L6KuFrVs630W563o3TskAgDIpXFjGLr9Lp/FTKK3OvGkMlhm82m2tS/qu
i03IfybIafaP5B4lwWPlsxsW5KAqE+hkkcSBSQBDAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUSQQkI6GYK2EnRWzT+6XaUYCHdiQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2VmZDRhMTZlLWY1ZTgtNGMyZC05ZDFkLTY2ZTQwODQ0NWU2My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/+NDANBgkqhkiG9w0BAQsFAAOCAQEAXQFe3nsjpvZKxRJ5rwdd0MdA
SQ/tDb7vXwC+YtLbsU2eee9qkv7wfegqvEclZPLGRcAf6lJkh+O+MPE/K9smcYi3
o0sAjHs3VPFkw+S/qBq5FUASz7dhHhZs8UDOsGWrxc8yshXCVKxgIoBu5SSR2iSC
ihyIrGe4FmF/pV4C5+J2nZwiFrZ7kY4BUQ3gcdf/igAZzyPHaeej08LkJR90hlXG
6PJ5bKhUOsj/L1dPqjwDguiCJoGrG7+64nV5XxrYXh/8SkZfPycjZCE/y7DvjIo/
MP9+pEvjogVumGmR04/4Lmgc4CpHFh3fYz1D8H3D9aouuLCFXI1ejzn5jSfwsw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:18:44 2025 by rpki-client