Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3850c479-4d9d-4ed3-a0ac-ffb91dd85878.roa
File: 3850c479-4d9d-4ed3-a0ac-ffb91dd85878.roa (raw, json)
Hash identifier: 0293zshvMMWosdpZ+GeIBdWIAYeENIZ7rAwdERtje9w=
Subject key identifier: 03:04:56:04:DC:CF:22:72:B9:E2:EB:CF:E6:19:13:E2:6A:D5:E9:0B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4AE43E689F3D253D4920ED5B66BA455D30B23F0B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3850c479-4d9d-4ed3-a0ac-ffb91dd85878.roa
Signing time: Tue 28 Oct 2025 13:58:34 +0000
ROA not before: Tue 28 Oct 2025 13:58:34 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f1e:c400::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:e4:3e:68:9f:3d:25:3d:49:20:ed:5b:66:ba:45:5d:30:b2:3f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 13:58:34 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=b05403bf9f3a1703189c36f65273e33891d2198cad6b21d90c11c8722ccedd9c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3d:dc:07:3a:6f:0f:6a:e5:14:45:bc:59:51:
94:53:09:0f:a4:90:80:80:fa:4d:60:c8:79:af:6b:
bc:b3:ce:93:ed:5d:58:12:2d:f7:b9:64:5a:22:f4:
e2:c2:3f:c5:d4:ea:5e:18:f2:52:63:3c:4b:ba:d6:
95:60:3f:e7:4f:a6:82:d2:cb:5f:06:8a:30:53:7d:
a5:f6:37:83:d8:43:46:49:e8:ef:55:3c:aa:de:5e:
aa:ab:ab:70:e8:dc:89:81:7b:87:b5:db:ae:76:97:
11:63:8f:c4:ea:c3:48:de:33:a9:a5:89:f6:84:f3:
c3:f5:84:7e:46:f3:0e:be:5d:2a:8c:9a:02:c5:3e:
7e:fe:7a:06:5c:f2:37:24:e7:69:9c:01:0e:f4:37:
6e:89:a6:54:76:ec:e7:62:84:7f:52:6e:d3:f9:29:
e6:12:9c:6a:93:02:3f:1e:00:35:91:67:dd:4b:f3:
29:3b:d0:6c:b8:e3:14:2a:06:2f:e1:ce:c7:e8:a1:
c6:d6:90:61:57:ae:e4:8b:7d:56:54:50:c7:20:60:
04:69:78:e5:7c:c9:5f:e9:97:cb:d4:15:ad:59:3b:
7f:8d:60:35:a9:a7:60:28:eb:cc:aa:d4:cb:15:8b:
72:2e:a1:ac:a4:db:2d:6d:08:aa:99:57:fc:c7:3c:
4f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:04:56:04:DC:CF:22:72:B9:E2:EB:CF:E6:19:13:E2:6A:D5:E9:0B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3850c479-4d9d-4ed3-a0ac-ffb91dd85878.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f1e:c400::/38
Signature Algorithm: sha256WithRSAEncryption
5f:4b:a2:61:75:97:ff:80:7a:01:0f:a3:70:79:a4:eb:d9:6e:
42:aa:c4:e6:90:46:29:ba:d5:12:f1:2b:9a:ae:42:a1:c7:0e:
48:3b:74:ac:58:7b:9a:14:10:9d:b4:1f:62:dd:01:19:26:5b:
19:31:5b:7f:d2:85:7c:f2:4d:16:21:2e:f9:fa:86:6b:8f:37:
43:0c:c4:3b:b0:85:33:dd:58:ba:2a:4d:1c:b6:df:68:b3:a2:
9e:18:31:58:66:f8:21:52:49:1c:c9:f1:1f:97:ea:99:6d:41:
fa:36:41:a6:b4:a7:2c:95:27:e1:4f:61:72:ee:c7:0a:3a:b5:
2f:01:b0:ad:63:a3:dd:36:75:8e:16:da:fe:d8:b1:64:15:1e:
b2:45:d7:da:d8:cf:05:90:5c:be:6c:aa:31:45:35:e8:ac:d9:
7e:27:03:08:73:c0:2c:dc:0f:dd:d3:d8:75:e1:29:2c:07:ed:
c1:df:79:a2:56:f3:90:b5:6a:e2:41:6d:73:d8:8b:5e:9e:26:
d4:73:79:45:94:1d:7b:88:a0:9a:5c:71:4c:f7:f5:e9:07:38:
f2:dc:cb:11:db:d6:78:67:25:b2:b7:ff:0d:a5:6c:2b:0c:2f:
cb:f7:a8:d0:2d:39:28:bc:e8:3f:89:c7:39:6c:da:a6:67:96:
6a:22:98:25
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUSuQ+aJ89JT1JIO1bZrpFXTCyPwswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDI4MTM1ODM0WhcNMjUxMjAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BiMDU0MDNiZjlmM2ExNzAzMTg5YzM2ZjY1MjczZTMzODkx
ZDIxOThjYWQ2YjIxZDkwYzExYzg3MjJjY2VkZDljMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCePdwHOm8PauUURbxZUZRTCQ+kkICA+k1gyHmva7yzzpPt
XVgSLfe5ZFoi9OLCP8XU6l4Y8lJjPEu61pVgP+dPpoLSy18GijBTfaX2N4PYQ0ZJ
6O9VPKreXqqrq3Do3ImBe4e12652lxFjj8Tqw0jeM6mlifaE88P1hH5G8w6+XSqM
mgLFPn7+egZc8jck52mcAQ70N26JplR27OdihH9SbtP5KeYSnGqTAj8eADWRZ91L
8yk70Gy44xQqBi/hzsfoocbWkGFXruSLfVZUUMcgYARpeOV8yV/pl8vUFa1ZO3+N
YDWpp2Ao68yq1MsVi3Iuoayk2y1tCKqZV/zHPE9fAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUAwRWBNzPInK54uvP5hkT4mrV6QswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzM4NTBjNDc5LTRkOWQtNGVkMy1hMGFjLWZmYjkxZGQ4NTg3OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgImAB8exDANBgkqhkiG9w0BAQsFAAOCAQEAX0uiYXWX/4B6AQ+jcHmk69lu
QqrE5pBGKbrVEvErmq5CoccOSDt0rFh7mhQQnbQfYt0BGSZbGTFbf9KFfPJNFiEu
+fqGa483QwzEO7CFM91YuipNHLbfaLOinhgxWGb4IVJJHMnxH5fqmW1B+jZBprSn
LJUn4U9hcu7HCjq1LwGwrWOj3TZ1jhba/tixZBUeskXX2tjPBZBcvmyqMUU16KzZ
ficDCHPALNwP3dPYdeEpLAftwd95olbzkLVq4kFtc9iLXp4m1HN5RZQde4igmlxx
TPf16Qc48tzLEdvWeGclsrf/DaVsKwwvy/eo0C05KLzoP4nHOWzapmeWaiKYJQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:25:20 2025 by rpki-client