Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f91b8ca-e789-405a-8ad4-962f4aa4471b.roa
File: 2f91b8ca-e789-405a-8ad4-962f4aa4471b.roa (raw, json)
Hash identifier: 3ko/4cMNZ++F1NoAfpjTO8menD9UyWob1DHMeHxHM9A=
Subject key identifier: 25:B0:49:3C:6B:87:16:83:B1:3B:CF:24:D6:BC:2A:FE:DD:4E:3C:12
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 751C7FDF4E3C6A4E7B21A46F19AFF908062E2DCD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f91b8ca-e789-405a-8ad4-962f4aa4471b.roa
Signing time: Sun 02 Nov 2025 00:31:15 +0000
ROA not before: Sun 02 Nov 2025 00:31:15 +0000
ROA not after: Sun 07 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f60:4000::/39 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:1c:7f:df:4e:3c:6a:4e:7b:21:a4:6f:19:af:f9:08:06:2e:2d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 2 00:31:15 2025 GMT
Not After : Dec 7 23:59:59 2025 GMT
Subject: serialNumber=c70aeb96af47795bba116f7fe97d6bc06e7cd42773bf3aa9f0f02a9683a3fdcc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:77:48:e9:5b:86:b2:65:2c:90:8e:b3:a7:f8:
80:f0:74:45:bd:29:96:0e:66:cb:04:d8:61:3e:ac:
26:c4:8f:77:1b:f3:2f:f8:bc:ef:4f:b3:fe:df:49:
55:31:02:e1:47:c3:06:0e:71:93:d5:65:0c:58:30:
40:e5:39:ae:85:dc:74:fe:1f:38:3a:14:dd:46:e1:
95:2f:e9:00:45:0e:1f:0f:87:a0:fb:47:21:56:4d:
fe:e1:4a:60:a9:6b:0f:f3:b4:fb:aa:72:42:6b:9d:
bc:84:74:7e:e1:13:07:b0:1f:65:97:22:15:2e:1d:
d0:49:9a:c3:46:ca:0d:aa:82:ff:68:51:fa:b8:58:
1e:5a:a9:c9:1e:90:da:19:c7:12:ea:cb:3e:db:b7:
3a:7a:38:ff:a9:24:c6:a3:bf:cc:19:5d:12:d8:57:
b0:1c:ab:1a:e1:0f:d1:a8:eb:87:68:8f:20:7d:52:
76:8a:93:cd:51:07:d6:82:70:a9:34:b0:92:b8:30:
57:85:6b:a9:06:04:9c:20:22:4a:fe:5f:a6:6d:74:
b8:f9:55:eb:ee:75:c2:db:d5:ce:52:ac:e1:bd:38:
e2:d7:38:34:1f:05:ed:41:27:85:52:55:b1:d4:77:
4f:1b:55:59:a8:21:c7:9f:c5:8f:7b:e6:ed:5e:3a:
7f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B0:49:3C:6B:87:16:83:B1:3B:CF:24:D6:BC:2A:FE:DD:4E:3C:12
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f91b8ca-e789-405a-8ad4-962f4aa4471b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f60:4000::/39
Signature Algorithm: sha256WithRSAEncryption
09:36:d7:70:dc:52:a5:33:55:d2:ec:0e:6f:82:d6:bb:9b:8f:
15:be:84:a1:84:32:4b:41:58:41:ae:54:3b:f2:ca:ca:85:b9:
4a:18:fc:0b:bc:89:1b:b0:c0:27:d6:18:61:ee:5f:bc:d5:9a:
fd:ad:e7:fe:b8:dd:b3:4f:82:09:b9:ce:e3:42:0a:8c:ca:c0:
70:e0:14:5d:58:4e:8e:b3:d5:59:64:c8:27:49:c2:f2:87:7a:
e3:7e:43:23:69:44:22:d3:dd:c2:3c:ac:2e:dc:a9:ef:3b:44:
68:b6:ca:e2:47:46:a2:d7:ce:00:61:73:a5:ef:80:a0:b1:59:
2c:1b:3e:e5:48:56:16:06:0d:df:28:ca:b9:59:96:56:30:80:
06:13:c0:92:4b:42:e9:2c:77:01:f9:bd:66:6f:d2:52:95:64:
eb:38:4d:87:96:b5:0e:b9:e5:27:f9:a1:bc:42:a9:2a:46:0d:
38:4f:ba:fa:83:33:82:78:13:22:7f:dc:49:21:eb:90:9d:b7:
37:37:40:f6:14:11:ee:0f:47:62:be:51:c6:b4:5d:95:85:74:
b2:29:ac:92:63:ff:76:c0:a9:c8:70:d5:b9:f8:fc:b8:96:7f:
74:95:08:1b:6f:2d:6c:55:c6:48:d0:f9:3c:00:f9:a4:b6:22:
ea:c4:64:82
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:44:25 2025 by rpki-client