Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d439b2b-8291-4d7c-8bc8-81770a6741a8.roa
File: 4d439b2b-8291-4d7c-8bc8-81770a6741a8.roa (raw, json)
Hash identifier: aPf+B97eAqG7oyV2uOveqel+j/Wh5+44e33VliEXX6w=
Subject key identifier: F0:23:F0:62:F5:1F:B8:48:53:B5:B4:7E:04:DF:25:8A:74:62:DE:16
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1CC64332BBA7B6FB7024C1F4B3E5D3F4B345A0FE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d439b2b-8291-4d7c-8bc8-81770a6741a8.roa
Signing time: Fri 31 Oct 2025 00:30:11 +0000
ROA not before: Fri 31 Oct 2025 00:30:11 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f22:c000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:c6:43:32:bb:a7:b6:fb:70:24:c1:f4:b3:e5:d3:f4:b3:45:a0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 31 00:30:11 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=825c371795002d1f1cd3700bbd24dbce52f2ae1d52cfbb7319003a443815e81b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:63:19:0c:93:80:48:94:e3:a0:fc:ba:0f:17:
70:67:b9:2b:39:85:eb:47:ba:b1:16:56:4a:23:e9:
35:0b:44:26:3e:10:b8:da:3a:7f:33:3c:42:b5:7e:
8c:85:d5:eb:19:99:f8:76:0d:65:f1:68:61:ff:da:
f0:94:13:52:45:77:a2:a1:4f:2e:b0:29:f7:8d:70:
d2:8c:0c:48:a2:81:0e:25:45:a7:d2:cb:e2:0c:21:
1c:97:f4:88:9e:6d:29:3c:4d:63:aa:56:b2:e7:b6:
f9:f1:82:72:8c:02:54:6b:5c:4f:f1:bb:ce:92:91:
2c:b9:39:48:91:46:49:56:41:70:76:4c:e0:7e:35:
37:c5:c6:6f:47:33:06:84:c6:71:81:7a:55:47:5c:
24:09:4c:2b:00:19:0f:bb:dc:e1:0a:2a:95:bc:97:
5b:04:c5:ab:f9:8c:f0:74:70:38:5a:06:ed:78:c9:
d5:55:85:0e:af:35:73:c1:cc:03:3f:c7:a7:0d:1a:
ea:01:2b:39:95:57:a5:ff:e0:3b:c1:1e:b2:d5:3a:
d1:3a:3c:55:2c:18:2b:c1:6d:46:a0:5e:c4:28:cf:
2f:08:53:96:4a:80:c1:2b:46:89:19:0d:15:f9:10:
9a:77:4d:1f:fd:cf:d2:75:b4:d7:fb:40:52:43:e7:
30:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:23:F0:62:F5:1F:B8:48:53:B5:B4:7E:04:DF:25:8A:74:62:DE:16
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d439b2b-8291-4d7c-8bc8-81770a6741a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f22:c000::/36
Signature Algorithm: sha256WithRSAEncryption
d9:0b:c7:4a:dc:57:73:48:a2:85:69:41:8d:b3:37:b6:0e:d5:
8d:8d:2b:1d:28:f7:0e:ed:76:37:46:50:3f:53:06:6e:f5:57:
3a:90:14:4b:44:b4:79:d6:c2:e9:f4:77:c7:ba:2f:1a:5c:5a:
a0:96:cf:cf:f6:18:21:01:a3:cd:96:59:e5:2c:3a:8d:90:6d:
46:95:e9:9c:e1:3d:c4:49:9d:7e:e4:ee:54:fc:da:55:a1:8f:
f1:89:44:19:50:31:0d:d3:4d:40:a9:8c:9c:c9:df:b5:99:01:
41:b6:c7:17:c4:1a:6c:cf:c1:44:ad:ea:6a:46:7b:4d:0d:1b:
a6:77:fc:00:55:a8:53:12:77:b9:bb:1b:eb:f9:c2:38:a6:32:
84:dd:1f:ff:17:94:9d:3d:3f:45:50:b9:50:81:a7:03:1c:58:
dc:39:f3:3b:5c:72:3b:a9:af:30:07:fb:eb:85:6b:44:c5:2b:
2f:f5:59:8f:bf:77:5d:f3:d4:96:9e:4f:48:a7:54:07:dd:25:
42:6d:fa:ac:86:07:8e:5f:c3:65:e0:96:49:31:bc:6c:99:90:
27:dc:77:0c:9f:34:38:b7:11:57:82:1a:29:41:5f:54:91:3d:
16:7b:e1:59:b9:f3:56:67:3e:8f:eb:cb:16:e5:f0:da:d1:d9:
1f:d7:d3:c4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:55:41 2025 by rpki-client