Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa89ceec-7353-4213-a5c6-b7359deda91c.roa
File: fa89ceec-7353-4213-a5c6-b7359deda91c.roa (raw, json)
Hash identifier: QIutTsRVoJiuzs7ALagPrgzRSgEsTxnbL8QoekXurjc=
Subject key identifier: 99:DC:31:9F:0D:4B:62:9C:CF:FA:F4:71:5B:C0:64:CB:CD:E5:A6:B8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2E5503326C4AA42071BB8A5A04FB900719FAC65E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa89ceec-7353-4213-a5c6-b7359deda91c.roa
Signing time: Fri 17 Oct 2025 21:40:17 +0000
ROA not before: Fri 17 Oct 2025 21:40:17 +0000
ROA not after: Fri 21 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:8190::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:55:03:32:6c:4a:a4:20:71:bb:8a:5a:04:fb:90:07:19:fa:c6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 17 21:40:17 2025 GMT
Not After : Nov 21 23:59:59 2025 GMT
Subject: serialNumber=846c97103da56726628b6400532a2147c6b2807105d90f30cbf85145c49f7225, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f1:05:ab:5f:96:98:5d:f9:72:c7:e7:d7:09:
1a:aa:3c:88:2a:ea:39:4f:20:6d:bf:13:d9:0d:c1:
b8:fc:ea:3d:7d:b1:f3:77:a0:e2:06:fc:f0:5b:9f:
a3:b7:d3:1c:21:b5:27:9b:89:21:99:94:09:58:be:
5b:43:81:80:6e:7a:01:fe:69:a8:b2:8d:3b:4b:63:
fd:e3:a8:17:50:55:98:04:e6:df:15:24:a0:86:c4:
c9:a8:50:95:21:06:86:ec:e3:24:80:a6:2f:8e:7a:
c0:23:8c:09:4d:0a:41:64:f2:a5:1c:03:0a:15:1b:
c1:27:e7:7b:0f:31:74:ec:3f:7f:60:e6:44:e5:6f:
11:5e:d9:b2:1c:40:93:03:77:e5:8a:3b:72:46:04:
50:8f:53:9e:f1:4e:3d:9e:9d:b5:88:e3:0e:6b:e4:
3b:c8:72:78:09:98:93:21:bb:f6:0d:b3:2a:03:ca:
02:ac:35:64:a0:e6:57:53:bb:4e:be:05:f8:4d:40:
c1:dc:16:5c:31:0b:a0:ec:bd:33:47:98:56:50:d6:
2e:fa:62:f1:01:d4:e1:25:f1:dd:c9:4d:f0:a9:ae:
ee:bd:d8:ec:93:d0:d4:52:6f:1d:a1:71:d5:de:f6:
86:20:39:81:7c:52:35:59:d1:e8:4b:73:5a:85:c1:
e9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DC:31:9F:0D:4B:62:9C:CF:FA:F4:71:5B:C0:64:CB:CD:E5:A6:B8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa89ceec-7353-4213-a5c6-b7359deda91c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:8190::/48
Signature Algorithm: sha256WithRSAEncryption
7b:50:2c:32:68:50:ac:d5:04:59:ef:81:88:d7:38:00:b0:e6:
6a:57:6e:29:57:15:f1:50:e0:50:0d:51:a5:ec:f1:b0:df:67:
7e:74:9e:42:3e:1a:6d:81:00:e9:e5:a2:13:04:9e:02:57:4d:
8a:60:2d:41:32:b7:45:6f:d3:35:06:c9:64:7a:90:39:c3:97:
34:25:56:b1:31:9a:0d:8c:34:8a:30:2a:9c:e5:a0:61:23:34:
02:43:ea:c4:cd:87:53:43:0e:73:5c:e6:14:29:69:b8:c4:55:
24:f0:ea:18:d0:d8:99:1c:4a:ad:30:84:ad:6a:4f:b2:c2:ef:
1a:7b:e7:5c:da:7e:45:ac:fc:b9:d0:f5:00:91:f7:55:e3:e8:
ef:fd:4d:8e:11:23:58:53:e7:61:0a:ef:83:63:dd:02:f9:8d:
3c:32:48:07:06:f8:17:2f:ac:2e:06:73:9f:14:a1:9a:02:55:
4d:9c:3f:61:cd:e9:cb:21:c7:5c:c7:9c:1b:55:2a:8d:31:21:
39:d4:52:41:8e:8f:d8:69:84:b1:a1:10:88:fe:ca:ce:a4:c6:
b7:16:33:f6:3d:d7:3c:78:31:01:10:3b:30:3f:5c:85:95:92:
00:7d:96:61:39:5c:41:d2:9f:60:b2:ec:de:9e:40:90:ca:24:
6c:9a:74:e4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:01:25 2025 by rpki-client