Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2ba8a17-d3ee-4ca1-97a8-f2b2374e8c86.roa
File: a2ba8a17-d3ee-4ca1-97a8-f2b2374e8c86.roa (raw, json)
Hash identifier: rarPGQA09PTqcfOAIXWFoJsU2nFhkJ4TsKT7TkMlgQc=
Subject key identifier: C3:AF:41:ED:7C:56:AC:2A:54:49:74:C5:2F:85:21:7A:A6:29:FA:82
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 44CBD0848ED51F54D8BCADD7CCF2E48881B9628F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2ba8a17-d3ee-4ca1-97a8-f2b2374e8c86.roa
Signing time: Wed 29 Oct 2025 00:30:53 +0000
ROA not before: Wed 29 Oct 2025 00:30:53 +0000
ROA not after: Wed 03 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff2:8090::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:cb:d0:84:8e:d5:1f:54:d8:bc:ad:d7:cc:f2:e4:88:81:b9:62:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 29 00:30:53 2025 GMT
Not After : Dec 3 23:59:59 2025 GMT
Subject: serialNumber=d7e0c6f9efb6b71518ff4acf22199e35a8e0586249ef2ac69a6ca7f547f9ff9b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:39:79:6b:1c:e0:d9:82:d1:9e:ae:80:82:
0b:e1:2b:23:17:59:37:00:90:79:de:a6:97:f8:5d:
c5:2d:51:d8:c8:f6:9f:22:59:67:58:e4:16:05:96:
8c:c9:de:9e:ae:fd:80:7b:96:da:3d:58:b3:04:e7:
2d:c7:bf:48:b4:a9:d0:81:29:16:c3:cc:9a:1b:82:
88:33:10:4c:0d:be:e5:a0:3e:d2:24:10:98:32:2e:
f7:5f:75:1c:f4:e8:7d:76:85:5c:73:fe:e9:61:af:
86:74:92:2f:6e:29:f6:b9:b9:29:b1:3b:1b:fa:b2:
a5:0f:6b:5e:d2:e4:84:9b:9f:18:65:f5:67:cd:2d:
48:81:cc:ff:76:e5:11:0a:7a:1e:00:fe:29:9d:5a:
a6:79:d6:57:cd:11:f4:c8:2c:8b:12:ba:78:37:4d:
07:c4:83:12:22:96:7c:e1:42:b0:b5:65:ac:59:db:
b1:86:53:21:8b:23:52:f5:c4:7c:8b:99:7b:48:91:
51:02:89:6f:74:73:1c:2b:c4:71:0f:a7:3c:ad:0e:
a7:48:ba:77:0a:e4:0f:b5:e6:ae:2b:d7:79:6a:d6:
8a:a2:3d:6b:83:f9:85:ba:63:83:2b:c1:af:13:c2:
42:65:4f:3f:42:c9:f8:49:e8:92:32:8e:a0:c5:20:
b2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AF:41:ED:7C:56:AC:2A:54:49:74:C5:2F:85:21:7A:A6:29:FA:82
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2ba8a17-d3ee-4ca1-97a8-f2b2374e8c86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff2:8090::/48
Signature Algorithm: sha256WithRSAEncryption
4d:e1:00:51:55:24:71:3e:55:6d:df:64:a6:49:9a:46:30:42:
84:95:64:9c:a4:cf:0a:9b:fd:ae:e2:75:70:22:e6:bc:80:11:
cb:c3:fc:98:f6:d3:a7:cb:6a:23:15:54:89:77:dd:41:a2:24:
69:70:11:18:7e:b8:cd:e0:2d:ad:e1:5f:b3:c1:91:1d:a6:03:
ce:5e:e5:91:66:aa:ba:e4:8e:3f:6e:2d:51:a7:c9:a3:76:7e:
25:f3:8f:09:98:99:c4:36:ac:11:9f:ce:f0:41:9e:bc:7b:fd:
c2:ac:63:2d:e2:f4:a5:0b:6f:55:80:64:59:05:c4:31:42:53:
10:f8:c2:53:44:b5:e4:16:ca:0a:48:ca:5c:85:e4:38:47:4f:
fd:46:55:e7:25:7f:ee:2a:f5:7f:b0:af:38:f5:d7:88:96:c8:
72:24:a2:3b:fb:18:9b:77:1e:48:48:6c:73:d4:3b:86:84:27:
ba:b0:35:60:35:85:95:6a:bb:c0:15:02:89:ba:f9:34:8a:95:
4a:ff:11:72:3a:01:74:ef:f7:2d:7d:04:eb:f5:f6:47:f2:cf:
bd:c7:e7:7c:7a:1f:5c:79:b8:22:27:9a:11:d7:f7:de:65:d5:
e3:9d:8d:5d:af:68:99:e6:ac:79:6e:3e:42:16:99:60:dc:88:
1b:55:e2:bc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:04:25 2025 by rpki-client