Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b657d4e-52fc-4f40-8116-3ac214b5ec11.roa
File: 8b657d4e-52fc-4f40-8116-3ac214b5ec11.roa (raw, json)
Hash identifier: 9WE41h3tlNgwb7e5MTVKnXC2MWyLPeZMQG57wHm3tYg=
Subject key identifier: 41:40:08:06:43:AD:0A:5A:5C:EF:54:D0:0F:14:9E:01:2D:8E:7B:11
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2DE38848FB40566FE8F714B9C731F6D5C13344E0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b657d4e-52fc-4f40-8116-3ac214b5ec11.roa
Signing time: Fri 31 Oct 2025 00:20:05 +0000
ROA not before: Fri 31 Oct 2025 00:20:05 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f12:c000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:e3:88:48:fb:40:56:6f:e8:f7:14:b9:c7:31:f6:d5:c1:33:44:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 31 00:20:05 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=c16ca20722b3219065e419567f8094990ab17420f178e83d4f9628147c003eef, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:bf:e9:13:75:6c:c9:37:84:b7:14:0b:74:2d:
0e:9f:d2:f9:3e:52:2d:69:cb:f3:90:7c:e9:e9:8a:
ad:96:22:99:1e:bb:d6:94:64:1d:75:9e:f5:0a:47:
b3:9d:50:e6:4b:69:5d:f9:92:ef:91:6e:2d:68:1d:
ac:32:9b:3a:de:2e:e6:88:6d:25:43:69:21:72:c2:
1b:c3:b0:fb:4d:98:00:66:8a:64:be:d4:1c:32:d6:
72:92:a5:bc:ef:3a:cb:ad:41:82:b8:fc:68:77:a1:
83:92:30:b9:13:e5:9f:fa:e1:2e:7b:46:16:05:b6:
f2:4d:71:76:7a:34:6a:91:a1:3c:3f:f1:23:67:61:
1b:93:69:a7:f9:27:ea:d9:6d:9b:a3:3b:e1:22:70:
1f:be:aa:db:80:77:58:f9:94:1e:d7:68:0f:13:11:
d8:cb:b1:c4:3b:6c:05:f0:bb:d8:9c:46:fb:3f:aa:
23:83:6e:6c:a1:1f:c5:1b:01:c9:47:38:84:3f:d9:
df:af:5a:c4:da:01:83:24:2f:d2:a3:1f:49:2a:6b:
6f:09:d3:cd:ec:ac:f3:4f:42:18:85:90:cb:67:62:
6d:84:6a:e7:42:74:20:bb:1e:21:c8:60:46:76:dc:
c4:9e:1a:fd:4d:1e:60:e1:85:98:8c:1f:e7:00:d2:
60:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:40:08:06:43:AD:0A:5A:5C:EF:54:D0:0F:14:9E:01:2D:8E:7B:11
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b657d4e-52fc-4f40-8116-3ac214b5ec11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f12:c000::/36
Signature Algorithm: sha256WithRSAEncryption
82:55:e0:7e:8d:81:94:3d:a0:3f:56:23:b1:f0:dd:0a:1c:c4:
a4:31:22:b2:56:e2:d9:4d:e2:77:c1:d5:72:eb:5e:85:9d:05:
53:ca:10:70:9f:98:b9:a1:00:71:a9:e6:25:eb:61:f3:87:d7:
68:36:18:d9:80:aa:f6:a9:68:1f:8e:38:db:45:97:e4:da:31:
0e:74:41:a0:e4:1f:43:8b:8a:b2:ed:3c:e4:50:11:e8:8b:f4:
97:05:7a:d3:cf:f3:ce:38:06:6b:ad:fb:71:02:5c:48:79:09:
d3:2f:59:3c:b5:d2:af:75:83:66:47:5a:e1:69:0b:c6:a5:a4:
32:77:2f:dc:a7:dd:cc:50:21:22:dc:58:55:14:27:19:83:49:
4b:d7:2b:6f:57:d6:1d:56:2c:3b:94:2d:36:7d:46:5e:da:96:
a1:d0:0d:81:ef:22:a9:e5:b5:17:57:96:2d:87:36:d9:52:c7:
c2:7c:43:3f:e6:d4:5f:a6:6a:5e:45:5d:33:e3:5e:a7:2f:ae:
5d:65:9f:49:9a:63:aa:13:f5:21:67:e5:6d:75:b2:54:1e:31:
ce:64:79:17:d5:f9:0d:6a:7b:b9:09:32:19:44:4b:d2:aa:b2:
44:e4:18:c1:af:a0:1d:5f:28:3b:46:95:14:e6:5c:26:01:da:
98:f8:cf:36
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:52:54 2025 by rpki-client