Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/639d1eb6-41be-4551-8f7d-17ca4586ed5f.roa
File: 639d1eb6-41be-4551-8f7d-17ca4586ed5f.roa (raw, json)
Hash identifier: hhIa0PEUfjpC1cFgUYh/XdWVsGhjI8W9/ceNsysOAAU=
Subject key identifier: 1A:7F:42:DA:73:D7:EA:16:56:EF:F0:27:8B:41:88:45:47:EE:61:3E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1CC77F9C400C1C73EF157D63486A62756DA091D9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/639d1eb6-41be-4551-8f7d-17ca4586ed5f.roa
Signing time: Sat 01 Nov 2025 00:10:12 +0000
ROA not before: Sat 01 Nov 2025 00:10:12 +0000
ROA not after: Sat 06 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:41a0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:c7:7f:9c:40:0c:1c:73:ef:15:7d:63:48:6a:62:75:6d:a0:91:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 1 00:10:12 2025 GMT
Not After : Dec 6 23:59:59 2025 GMT
Subject: serialNumber=3a06514ebed674662e5fce6296eb15178fcc1fc90786c7e5050bf943224eb094, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:20:c5:62:0f:4f:65:89:4f:e6:c3:9b:c3:97:
e3:27:18:85:50:ad:6f:c3:63:8f:25:ee:b0:4d:73:
e1:f8:79:fa:bc:0f:c1:cf:f8:27:a8:54:5d:44:78:
8e:c3:d0:f7:1a:66:4f:0c:45:2f:d4:07:54:7e:56:
d8:49:2d:90:4c:53:e4:af:7d:29:27:12:61:ba:71:
2b:4a:e4:11:c2:19:98:52:e7:5c:03:2c:10:7e:69:
9e:67:8a:50:db:e1:7c:17:fd:7c:56:16:5a:ab:3a:
48:c3:bb:7d:f1:a5:dd:39:d3:2c:87:5d:31:6b:35:
90:ca:a8:bc:81:be:90:36:f1:57:d7:63:6a:80:3e:
c6:be:65:1c:50:09:97:a2:14:7f:7b:fe:8c:c0:24:
99:29:f3:c7:84:e7:56:4c:80:b8:74:21:b2:70:1d:
93:fc:24:ab:71:db:21:f3:e9:a3:81:1a:81:da:a9:
c8:ac:06:01:56:19:a7:22:1c:5a:c5:92:94:f7:4c:
fe:e9:c8:26:f8:f8:1b:bc:4f:f9:cd:df:9c:47:15:
cd:07:24:2d:bb:ff:f3:27:27:28:27:42:3b:f5:be:
98:97:73:7c:9f:2d:19:48:d5:5c:94:5b:30:2b:3e:
ed:77:7b:bd:99:7d:60:52:53:f2:85:85:24:16:a6:
d1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7F:42:DA:73:D7:EA:16:56:EF:F0:27:8B:41:88:45:47:EE:61:3E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/639d1eb6-41be-4551-8f7d-17ca4586ed5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:41a0::/48
Signature Algorithm: sha256WithRSAEncryption
aa:20:40:85:ed:01:b8:80:a1:46:f5:2b:c2:a9:39:4b:c1:af:
e9:a4:4c:79:93:9a:40:8c:55:0b:70:8f:52:80:91:37:e7:81:
e9:88:f5:ca:59:67:39:51:ff:d8:13:e1:bb:90:9c:67:8b:ec:
5b:0b:88:6f:b7:7c:4f:63:81:6f:c7:5e:7a:3d:0f:c2:48:fb:
82:4c:17:f0:2e:5d:16:2c:7c:ee:5b:53:b6:01:61:ed:46:90:
04:14:9b:14:88:f6:cd:50:7e:81:2c:d3:1f:38:94:38:c7:77:
0a:63:af:60:7e:ae:c3:5d:ac:25:cb:7a:75:2f:58:9b:11:11:
00:3a:f4:af:d1:6b:a0:6b:09:c1:46:62:19:50:4e:97:1a:fc:
8c:13:e7:35:2d:5a:03:7b:45:06:4a:2f:8e:11:ad:1a:14:1d:
70:65:72:9e:e6:5c:07:29:85:53:17:da:9f:28:89:d0:7e:25:
8b:c7:d2:73:e0:d9:83:e5:a1:2c:86:4f:98:f5:1c:91:2d:e9:
c3:e5:b5:45:22:79:1e:c7:52:ec:a4:90:4e:ad:f4:f1:95:2f:
59:76:6c:19:19:c1:9d:6a:bf:f8:37:e0:af:10:3e:07:22:8c:
a0:0f:2d:d0:57:08:17:aa:8e:f3:8a:91:2c:31:e9:aa:20:cd:
68:6e:9d:ff
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUHMd/nEAMHHPvFX1jSGpidW2gkdkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTAxMDAxMDEyWhcNMjUxMjA2MjM1OTU5
WjB6MUkwRwYDVQQFE0AzYTA2NTE0ZWJlZDY3NDY2MmU1ZmNlNjI5NmViMTUxNzhm
Y2MxZmM5MDc4NmM3ZTUwNTBiZjk0MzIyNGViMDk0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvIMViD09liU/mw5vDl+MnGIVQrW/DY48l7rBNc+H4efq8
D8HP+CeoVF1EeI7D0PcaZk8MRS/UB1R+VthJLZBMU+SvfSknEmG6cStK5BHCGZhS
51wDLBB+aZ5nilDb4XwX/XxWFlqrOkjDu33xpd050yyHXTFrNZDKqLyBvpA28VfX
Y2qAPsa+ZRxQCZeiFH97/ozAJJkp88eE51ZMgLh0IbJwHZP8JKtx2yHz6aOBGoHa
qcisBgFWGaciHFrFkpT3TP7pyCb4+Bu8T/nN35xHFc0HJC27//MnJygnQjv1vpiX
c3yfLRlI1VyUWzArPu13e72ZfWBSU/KFhSQWptEtAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUGn9C2nPX6hZW7/Ani0GIRUfuYT4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzYzOWQxZWI2LTQxYmUtNDU1MS04ZjdkLTE3Y2E0NTg2ZWQ1Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB//QaAwDQYJKoZIhvcNAQELBQADggEBAKogQIXtAbiAoUb1K8KpOUvB
r+mkTHmTmkCMVQtwj1KAkTfngemI9cpZZzlR/9gT4buQnGeL7FsLiG+3fE9jgW/H
Xno9D8JI+4JMF/AuXRYsfO5bU7YBYe1GkAQUmxSI9s1QfoEs0x84lDjHdwpjr2B+
rsNdrCXLenUvWJsREQA69K/Ra6BrCcFGYhlQTpca/IwT5zUtWgN7RQZKL44RrRoU
HXBlcp7mXAcphVMX2p8oidB+JYvH0nPg2YPloSyGT5j1HJEt6cPltUUieR7HUuyk
kE6t9PGVL1l2bBkZwZ1qv/g34K8QPgcijKAPLdBXCBeqjvOKkSwx6aogzWhunf8=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:52:12 2025 by rpki-client