Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/feef2431-67fe-49cd-bf34-5014adc5df6f.roa
File: feef2431-67fe-49cd-bf34-5014adc5df6f.roa (raw, json)
Hash identifier: /h69XQhmtVn8RFnrnhWsnlVyx2I+cpSlytz+xwPJ7jE=
Subject key identifier: 49:A9:19:22:99:3D:F1:C6:07:BF:49:1E:98:78:9B:62:36:F3:6F:01
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 41F16E84747124CCB94069F724A42DD95A0287B5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/feef2431-67fe-49cd-bf34-5014adc5df6f.roa
Signing time: Fri 03 Oct 2025 00:21:57 +0000
ROA not before: Fri 03 Oct 2025 00:21:57 +0000
ROA not after: Fri 07 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff1:1000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:f1:6e:84:74:71:24:cc:b9:40:69:f7:24:a4:2d:d9:5a:02:87:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 3 00:21:57 2025 GMT
Not After : Nov 7 23:59:59 2025 GMT
Subject: serialNumber=e317fac500e16fc5c13f93706d5edb4cf6d88c5b243973497794d8138a898482, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f2:81:69:6b:62:03:8c:9a:db:d0:62:20:71:
0f:7e:f5:59:b9:2a:27:e2:3c:c6:2c:da:da:cb:c2:
39:b3:f6:53:c0:03:55:f0:62:7e:30:22:30:89:c2:
fe:2c:50:0f:fa:af:66:05:ea:24:c5:4b:77:2b:31:
45:25:0f:91:de:52:db:4e:a2:fa:be:a3:6d:19:50:
63:7f:e1:2d:9b:ec:3c:fa:49:ad:8e:c1:9c:53:35:
7b:c0:c5:6b:e8:51:30:fd:f6:fb:f3:1b:88:d7:21:
8c:54:8a:a1:e1:44:0d:a2:00:bd:24:65:fe:0d:49:
ad:44:d4:c8:4f:1c:bb:b1:6a:b7:7e:50:e9:bc:e9:
19:a3:75:1d:8a:1f:0a:0d:29:cf:f2:35:d6:14:d4:
6e:fd:a4:81:63:d9:10:f2:16:94:b3:98:71:70:87:
17:94:3f:1a:35:9c:c2:8f:74:a7:18:f4:92:22:cb:
62:29:96:2e:e2:41:47:bd:df:9b:b2:a7:96:ab:5b:
30:5a:ce:43:45:83:60:c7:eb:04:56:93:64:21:4e:
e6:a6:68:da:16:c9:09:ae:91:b4:30:95:a4:55:7f:
e8:b6:fa:7e:a3:e1:7d:70:32:f1:35:ce:f4:1d:ce:
f9:55:e7:be:70:ac:43:4e:7d:96:dd:7c:93:88:2d:
3a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A9:19:22:99:3D:F1:C6:07:BF:49:1E:98:78:9B:62:36:F3:6F:01
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/feef2431-67fe-49cd-bf34-5014adc5df6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff1:1000::/40
Signature Algorithm: sha256WithRSAEncryption
c3:34:62:8f:60:6d:00:9f:7a:65:57:73:82:d4:29:29:09:41:
18:f9:8a:f6:fd:4a:60:2a:b2:3a:a0:b0:5b:63:64:d5:a6:57:
16:c8:7d:2d:69:e1:a5:c4:e6:49:fa:15:51:87:5c:c9:14:d8:
8f:68:d9:1b:05:df:e4:b4:d1:ce:8d:2e:77:20:b6:64:f2:69:
92:33:d3:f5:a2:86:eb:8e:21:1c:0d:15:b7:92:08:cb:5e:38:
20:c9:1b:b6:74:9b:71:e5:60:b1:51:e8:eb:50:18:94:b4:fd:
8f:a6:60:a9:62:0a:2c:27:4d:7b:2c:bc:a3:ff:3d:dd:de:1d:
c9:66:b3:b7:70:49:14:da:e9:52:50:82:ca:0e:6b:f0:91:8b:
96:cf:56:c0:8a:24:07:56:81:9c:8b:20:f6:9d:a7:2d:6b:a6:
6d:5a:7c:83:d7:3d:0e:69:36:2b:fc:8d:67:02:c2:6f:05:80:
e1:26:62:f5:9d:17:1c:38:d1:21:03:16:9a:1f:7c:32:13:5f:
52:fa:54:6c:a2:05:7a:f4:73:24:35:09:ee:2a:ef:f9:fe:5f:
1f:e9:35:01:47:23:d6:32:52:0a:07:bc:0e:22:c2:23:84:35:
67:56:0e:20:37:b6:87:84:2e:fb:1f:57:6b:22:26:f3:6d:4e:
af:32:0a:68
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:12:25 2025 by rpki-client