
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f05fd9d4-e679-4967-86f9-5a8fd1328c4b.roa
File: f05fd9d4-e679-4967-86f9-5a8fd1328c4b.roa (raw, json)
Hash identifier: iaqwcv0BbpXrFqZYZjeD2yghBg7/ZGaxujnIQmZ+w78=
Subject key identifier: 6C:7F:12:86:1C:C2:D1:8E:9F:B5:1D:1F:35:6C:DB:04:E7:49:97:C0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: B12DB5F740214BD930E748C640A26CC6014739
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f05fd9d4-e679-4967-86f9-5a8fd1328c4b.roa
Signing time: Sat 04 Oct 2025 00:41:49 +0000
ROA not before: Sat 04 Oct 2025 00:41:49 +0000
ROA not after: Sat 08 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f61:8090::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
b1:2d:b5:f7:40:21:4b:d9:30:e7:48:c6:40:a2:6c:c6:01:47:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 4 00:41:49 2025 GMT
Not After : Nov 8 23:59:59 2025 GMT
Subject: serialNumber=465f8bc7b6becfdf8a31f83f8850ec254d5c7b8d34b2cbdea96333d3e576fcaa, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ba:eb:db:61:4b:f7:7e:a0:87:88:a6:44:db:
63:e1:2b:c8:66:bf:89:db:9d:a2:f5:85:f4:d0:7f:
cd:eb:81:e2:3a:7f:37:79:dd:3b:5f:f7:ca:9f:e4:
02:38:07:49:c3:4c:99:09:1f:7c:6e:fc:63:ed:64:
63:37:6d:f7:1f:f8:07:d2:06:42:69:85:48:82:49:
d0:00:a4:70:37:32:0b:bd:04:80:ef:2f:36:54:0d:
7e:c0:bd:e8:d1:3a:6c:28:60:c2:03:cf:7a:96:c9:
cc:da:b2:03:83:d2:0c:97:da:d8:72:6f:7f:d5:21:
c8:80:54:aa:54:9f:20:b5:7b:9a:32:a5:c0:07:e6:
df:bc:a9:47:45:ca:50:08:5b:62:2a:cf:ae:9f:58:
2d:61:7c:a0:f2:98:be:2b:94:c5:89:87:4a:0c:52:
cd:ed:d8:a3:71:5b:f2:96:21:d3:5c:30:53:98:d2:
a0:4c:44:af:c8:55:19:67:27:2d:a6:8b:8f:98:c4:
db:d7:38:55:96:bc:df:ec:ab:1c:d8:ce:31:48:86:
b1:f9:81:92:59:2a:db:9b:4c:5a:29:e2:80:6f:65:
66:fa:a8:47:75:05:cf:41:28:20:6b:22:25:e4:a6:
19:81:31:ff:ff:f1:70:56:0d:ea:e3:24:21:b4:ff:
e2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7F:12:86:1C:C2:D1:8E:9F:B5:1D:1F:35:6C:DB:04:E7:49:97:C0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f05fd9d4-e679-4967-86f9-5a8fd1328c4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f61:8090::/48
Signature Algorithm: sha256WithRSAEncryption
59:94:f7:5e:18:68:b5:04:16:4f:3f:95:69:32:e4:48:6c:b1:
6c:11:63:03:40:46:29:e4:cd:26:80:dc:8c:41:4b:66:1f:01:
09:91:15:79:07:41:54:96:2d:59:51:d2:20:ed:7e:c0:4d:b9:
73:d5:bc:2c:e7:10:db:d6:ff:9d:e1:34:7a:45:4f:ec:d8:60:
1a:16:57:c2:24:d6:91:69:be:62:08:25:34:9e:47:ce:83:32:
00:6a:16:e7:be:d5:f3:30:0c:20:4a:fe:66:8c:a4:6a:a2:00:
3d:b4:40:49:a5:59:ac:9f:de:d0:ca:bf:2e:fb:cf:0c:08:c7:
b4:8d:84:2d:43:c3:fd:05:1c:e1:67:68:a6:6e:16:dd:4a:8b:
5f:8a:36:92:a8:c2:32:3c:f4:75:b7:ac:44:dd:52:10:87:03:
79:7c:bf:2d:a2:cb:96:81:34:5e:75:37:c5:f8:ce:c6:34:44:
ad:ac:7a:ec:b6:f7:06:d8:f3:39:8f:a4:44:7f:b1:05:fc:aa:
76:fb:78:c5:18:19:44:49:bb:38:3f:e2:b3:c2:d5:76:23:f8:
e8:f5:19:aa:65:e6:0b:0e:41:2e:d2:99:3c:41:86:d1:3f:da:
a5:59:45:05:2d:46:f5:00:d5:29:4e:a3:90:96:d8:9e:4c:5a:
c2:68:0e:00
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:16:00 2025 by rpki-client