Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bf05dc7-a430-401f-b2ad-6d559f8c6242.roa
File: 8bf05dc7-a430-401f-b2ad-6d559f8c6242.roa (raw, json)
Hash identifier: xpSzJP4M2Yc31rDR1O1EKCFNSbQnhaZQH436dqduE7I=
Subject key identifier: F4:B2:65:DC:4F:52:78:92:6D:84:13:5C:71:FA:DB:8E:5F:A3:BE:B5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7FA3361CBDE2052A48EF55EA696A9266CE9E851B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bf05dc7-a430-401f-b2ad-6d559f8c6242.roa
Signing time: Sun 26 Oct 2025 00:21:47 +0000
ROA not before: Sun 26 Oct 2025 00:21:47 +0000
ROA not after: Sun 30 Nov 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1ff9:5000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:a3:36:1c:bd:e2:05:2a:48:ef:55:ea:69:6a:92:66:ce:9e:85:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 26 00:21:47 2025 GMT
Not After : Nov 30 23:59:59 2025 GMT
Subject: serialNumber=3a2e79fff098c675f94c16cb236a03947df419ff4dec904a9e9c2071a48054ba, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:12:9d:80:8e:ce:fc:52:d2:60:13:fb:d7:4c:
e5:d7:33:1c:12:f4:73:54:e0:f1:65:e5:7c:13:7d:
8d:c5:49:79:36:d6:d7:1c:f2:6c:3d:4e:80:40:2b:
f6:47:42:79:25:db:20:d0:71:ac:76:8b:25:f2:23:
42:b1:03:fc:11:48:18:98:97:bd:2a:e2:b7:dc:c8:
ef:b5:1f:85:f8:02:3c:98:4e:3a:e4:c1:d4:31:59:
00:ef:b2:ff:8f:0d:bc:f9:65:a1:2a:6b:25:eb:b9:
56:42:c1:75:22:0e:7e:c2:92:80:a7:9c:3e:a1:ff:
94:09:b1:f1:dd:33:fa:5d:47:11:d1:db:98:09:a7:
72:78:42:7a:db:e1:e2:6a:a5:47:bd:71:eb:12:e7:
b8:0f:ea:d7:3e:9a:42:dc:4e:2d:a1:2e:b2:28:5b:
8f:46:79:11:0e:42:40:59:93:27:b4:21:42:02:a8:
40:3a:6e:01:45:56:c4:df:7b:6b:70:fc:42:34:91:
c8:75:f4:da:02:58:71:9a:58:e4:44:34:a9:f0:ff:
15:0d:4f:bb:9b:5a:5b:a5:df:1b:fd:90:4a:62:b6:
fe:56:cc:52:73:a1:ec:b5:43:6f:a6:56:a1:b3:de:
33:0c:0a:3b:3a:6c:59:0b:84:0c:43:64:dc:f1:87:
ea:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B2:65:DC:4F:52:78:92:6D:84:13:5C:71:FA:DB:8E:5F:A3:BE:B5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bf05dc7-a430-401f-b2ad-6d559f8c6242.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff9:5000::/40
Signature Algorithm: sha256WithRSAEncryption
a7:7b:48:77:06:8b:c6:69:28:77:5a:1c:c3:f1:05:3c:08:6b:
a7:de:25:49:e1:b4:da:99:ab:ba:04:e8:5e:30:a6:74:6e:c2:
06:41:34:3c:b4:0c:92:97:5b:5d:58:6a:0a:ca:65:2e:41:75:
a1:1f:fc:04:53:08:0c:63:56:35:f6:26:ba:58:e4:6c:f1:e4:
25:ed:cd:5c:21:a6:e3:eb:2f:94:83:eb:e2:a9:13:2a:04:4d:
79:63:9a:a3:7d:89:5d:3c:84:46:a9:a5:72:34:b5:93:3f:91:
a6:59:04:89:b9:c1:0e:16:e4:fb:f5:d9:f2:76:84:8a:fc:c8:
3c:1b:bb:2e:60:e4:2d:2d:5d:d1:fd:53:9e:78:8d:29:3f:07:
99:8f:f1:5b:07:a6:21:e0:32:33:45:00:92:42:db:8a:84:2e:
eb:17:ee:f4:2a:25:09:85:60:c8:e0:89:db:82:ee:8f:54:54:
b0:b0:9f:51:c6:eb:44:97:1c:68:5c:cf:9c:4e:20:fc:6c:58:
57:05:72:e4:69:ff:fa:b2:02:ec:da:9d:4e:e5:5c:33:aa:fc:
4b:a7:92:99:dd:a2:a2:b4:10:6b:c7:a2:9a:67:18:5c:05:7a:
4e:b8:33:cf:b5:3a:ea:3f:b6:69:13:23:0c:6d:af:a4:87:24:
8e:28:6d:36
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:58:49 2025 by rpki-client