Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/020f6713-961a-446c-8dde-4a4231902f33.roa
File: 020f6713-961a-446c-8dde-4a4231902f33.roa (raw, json)
Hash identifier: GDw2CUvZ7vkekxxdNqNa3x1pC7qjrj7mb9v5j/Ifd9M=
Subject key identifier: 18:0D:AE:A7:BE:5E:D1:BE:07:D5:1E:47:6B:12:7E:02:3A:F8:00:3C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4834B162CDD182C4045B10DD06392E35F0FD5C4E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/020f6713-961a-446c-8dde-4a4231902f33.roa
Signing time: Sun 02 Nov 2025 00:20:40 +0000
ROA not before: Sun 02 Nov 2025 00:20:40 +0000
ROA not after: Sun 07 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff8:3400::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:34:b1:62:cd:d1:82:c4:04:5b:10:dd:06:39:2e:35:f0:fd:5c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 2 00:20:40 2025 GMT
Not After : Dec 7 23:59:59 2025 GMT
Subject: serialNumber=92a3738492b1d1e59d49e97ed2fa1b8c2581903709ec042bddb492b69e7a7f4b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:18:fa:78:1f:64:fa:db:ed:b3:fa:e3:74:a6:
80:bf:55:a3:98:53:fe:31:18:21:b9:79:b8:ee:a7:
e7:50:72:db:f8:e5:52:5a:a0:5a:5d:a7:08:81:78:
92:34:14:80:d0:a9:60:24:ed:df:98:59:fc:00:bc:
93:7f:88:f9:0b:aa:0d:35:06:70:53:22:e7:f3:43:
6c:3b:06:c5:a2:0b:8c:48:02:c1:d9:7f:b7:0e:1d:
c6:a4:95:43:3d:7c:97:40:01:89:3e:f4:27:12:25:
1d:7d:53:66:5e:18:40:32:7a:0c:81:8d:7f:e5:56:
91:e5:80:f6:87:49:55:84:ff:af:79:05:35:5f:b4:
b9:ca:f8:9a:d5:6f:10:2c:33:25:7a:54:0c:4c:3c:
00:c0:b7:6b:c5:72:43:5d:59:72:07:96:e2:fa:95:
c0:77:ba:1e:a3:41:2c:e8:fc:ed:1d:c0:d9:65:4f:
19:9e:d2:d7:65:68:c5:f0:0d:d2:75:15:51:03:07:
6e:b5:83:64:9c:08:82:7f:fe:e3:56:42:a3:5e:40:
3a:d5:e8:35:85:6d:34:d8:14:f9:53:8b:e7:35:f1:
2e:93:20:a2:7b:ff:83:33:ae:b7:bd:31:67:4d:18:
2c:76:24:44:6c:ad:67:8f:eb:8c:49:f5:96:2c:14:
6b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0D:AE:A7:BE:5E:D1:BE:07:D5:1E:47:6B:12:7E:02:3A:F8:00:3C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/020f6713-961a-446c-8dde-4a4231902f33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff8:3400::/40
Signature Algorithm: sha256WithRSAEncryption
c4:b2:89:a6:59:0d:b3:18:db:b2:f1:71:0f:9d:6a:79:71:cd:
75:da:9f:3e:bd:c2:80:f3:d6:f4:83:5b:4a:76:69:9f:22:3e:
ad:d8:d2:83:ea:6b:01:8c:31:c7:92:15:42:35:de:2c:d6:0c:
32:29:b8:fa:62:45:78:53:e7:0a:bd:ba:fb:e7:96:c4:a7:3d:
52:b8:79:19:bf:b7:0f:1a:52:0e:43:00:39:78:d2:f0:f1:63:
53:1d:50:e8:81:8c:1b:4c:7a:a4:1e:71:cf:80:80:33:e8:62:
f3:da:c6:84:55:be:08:21:e6:85:64:5e:c7:c0:1e:8b:86:75:
0e:51:cb:19:ca:8e:a0:4b:c8:b0:61:87:af:67:72:6d:48:2f:
91:d5:e0:7f:44:ce:67:51:f9:b1:3b:d5:f5:bf:0f:f3:bb:bf:
c0:32:ca:dc:85:6a:0c:b4:05:7d:d7:82:d7:dc:3f:75:58:f6:
45:3f:37:64:f7:9d:9d:db:52:fa:98:e5:0c:78:4b:96:42:d5:
92:db:d6:81:62:b6:c3:19:58:90:fa:35:a7:ea:a9:4a:9d:38:
8d:31:d4:1f:f6:22:7e:8f:61:31:87:8b:2d:19:96:ca:aa:2d:
d1:0a:d6:6f:39:9f:c3:b2:ec:71:60:07:1a:3d:07:f3:c8:9a:
f5:df:c9:51
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:49:44 2025 by rpki-client