Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93b69459-75d4-4dec-8cde-00c58196e12f.roa
File: 93b69459-75d4-4dec-8cde-00c58196e12f.roa (raw, json)
Hash identifier: KhLrFguyKRAyXGADf0RAKSAYhSidcIVZSD2IH9tbkd4=
Subject key identifier: 44:32:24:69:6A:0E:EA:62:45:54:88:48:0F:A8:DE:0B:50:37:6A:0B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 36ED44CF972DA81CCDF4F03F6A959519A0ADBFE4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93b69459-75d4-4dec-8cde-00c58196e12f.roa
Signing time: Wed 22 Oct 2025 00:00:50 +0000
ROA not before: Wed 22 Oct 2025 00:00:50 +0000
ROA not after: Wed 26 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fed:4080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:ed:44:cf:97:2d:a8:1c:cd:f4:f0:3f:6a:95:95:19:a0:ad:bf:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 22 00:00:50 2025 GMT
Not After : Nov 26 23:59:59 2025 GMT
Subject: serialNumber=fdcd1735d87c4374f569b96e7c0225eb777c037f85673c55278b4aad628fe753, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f9:bd:12:6b:b9:70:b3:14:b2:50:80:df:3b:
e6:53:8e:35:09:26:ef:a8:f3:e3:a3:65:ac:fe:71:
e5:55:41:49:ab:50:8e:c2:59:22:72:57:48:6b:79:
07:17:35:8e:e8:ad:c6:b3:5d:7a:84:ee:f9:6b:6e:
6d:91:10:9a:41:f0:b8:40:00:99:5a:f5:2a:a0:89:
95:00:6e:f6:ee:c9:70:3f:54:d1:6e:5c:23:a7:f4:
a8:69:29:16:08:43:f9:8d:4e:ad:6c:60:2b:b8:06:
39:c1:cc:21:6e:ec:96:27:7d:95:fb:16:39:fd:e5:
56:b1:56:a0:6a:88:a4:57:b7:ec:cd:c3:04:ee:66:
d0:4b:5b:ee:60:2b:45:04:fa:67:b7:ca:00:22:a8:
cb:14:c4:67:01:6b:b2:59:67:2a:0e:0d:e4:a9:b1:
e8:f3:da:ab:e6:56:82:61:28:56:20:fc:5e:13:80:
f5:ec:06:3a:19:9e:91:2e:6a:cb:36:60:b9:12:4d:
6e:0e:48:04:aa:1b:1e:d0:0e:13:8e:a0:46:82:be:
39:93:f2:ce:26:39:73:9a:c6:63:3b:6d:5c:37:f1:
74:4c:d7:d5:e3:fd:30:a4:a6:43:95:29:4c:55:ff:
d3:7f:3e:90:f8:3c:40:fc:36:5e:ad:6d:0a:38:84:
98:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:32:24:69:6A:0E:EA:62:45:54:88:48:0F:A8:DE:0B:50:37:6A:0B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93b69459-75d4-4dec-8cde-00c58196e12f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fed:4080::/48
Signature Algorithm: sha256WithRSAEncryption
75:f3:3e:93:9f:86:fb:15:4d:11:24:00:3d:bc:ca:c4:51:d2:
c7:f3:83:ef:ac:db:28:31:6e:5d:36:3c:c6:3c:f8:d7:f6:55:
02:87:e5:ac:d3:a6:4e:e9:20:ba:1d:16:e2:cf:9d:48:1e:fd:
40:c6:21:79:64:5d:66:2a:db:06:63:df:ac:08:e2:bc:d0:dd:
86:da:27:c3:5e:a3:78:4a:26:ee:73:56:24:ab:0a:de:e5:c3:
ff:07:e1:39:76:71:59:9e:01:c2:36:b8:c2:c8:17:06:78:e7:
66:a4:eb:d1:c8:a4:d1:b4:11:1f:db:3c:8e:89:80:b9:c7:f0:
fa:3e:cf:a0:96:6f:b4:8f:83:dd:b1:aa:a0:ae:66:47:46:13:
c1:8d:da:8d:a1:b2:99:79:51:67:3d:02:97:24:6b:e5:34:73:
b6:e7:09:5d:1c:43:a3:19:3a:b5:00:e7:0e:76:a6:53:d2:25:
12:5b:b4:01:65:16:2b:69:1d:81:5c:8c:cc:e6:88:a5:a4:e5:
79:1d:3b:6b:c5:4e:72:c1:01:11:12:84:01:7c:01:c3:c9:63:
60:5f:12:73:27:eb:57:ce:0f:5c:84:c4:f9:c3:5c:20:97:f9:
20:45:52:0a:2a:60:e2:2e:c0:45:ff:51:b0:28:97:b6:8c:73:
c4:fa:5c:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:40:25 2025 by rpki-client