Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac1b893c-0547-4d22-8001-9d738235d5e5.roa
File: ac1b893c-0547-4d22-8001-9d738235d5e5.roa (raw, json)
Hash identifier: EJL0cr2A96a+HvFatl5lNA2c+Bnp340FRz9e5EXz+LE=
Subject key identifier: 0E:B7:89:FC:DB:71:0E:F5:90:D2:C8:74:00:F7:93:FD:CE:34:7F:31
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 701BE053546B18CC6C7E4DCB4B1D3FF874ED6AE4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac1b893c-0547-4d22-8001-9d738235d5e5.roa
Signing time: Sat 01 Nov 2025 00:40:13 +0000
ROA not before: Sat 01 Nov 2025 00:40:13 +0000
ROA not after: Sat 06 Dec 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1fb9:5000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:1b:e0:53:54:6b:18:cc:6c:7e:4d:cb:4b:1d:3f:f8:74:ed:6a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 1 00:40:13 2025 GMT
Not After : Dec 6 23:59:59 2025 GMT
Subject: serialNumber=d1514d280ad69f3ff4e8e69346b184119885e3ac3441552cc630d339ca6150b0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:48:e2:06:62:a5:0f:15:5e:9e:d0:2a:e1:
0f:e5:4d:32:c5:14:fa:65:ac:ff:e2:a2:fd:c3:8f:
48:8f:f6:6c:4b:2f:dc:f7:fd:29:ce:02:da:a4:3c:
f6:a3:5f:a8:65:d6:24:47:d9:8a:b5:4a:0b:c6:12:
b1:fc:4a:88:ee:e5:8c:f0:b1:70:1d:b4:a0:f6:4a:
ff:2a:87:1c:46:22:2a:e1:ff:53:f9:3d:8b:91:db:
30:65:f9:a4:eb:d7:2d:17:eb:8a:eb:aa:fb:7a:63:
14:70:86:bb:c3:d9:7f:6b:97:1d:1c:15:8f:8f:0b:
67:5f:11:d7:a2:42:5c:4c:e6:1b:8f:b7:5e:aa:ab:
2f:0b:87:dd:0a:d3:41:0e:2d:7b:3e:58:a1:3e:18:
38:cc:cc:db:96:c8:c0:da:49:41:4d:ad:78:38:98:
db:33:37:5a:14:7c:ee:94:57:42:fc:18:c4:e0:c2:
d8:33:82:ea:64:1a:6b:25:d4:d2:9e:58:2b:63:aa:
d9:88:a9:ee:41:1f:16:9a:03:05:fe:f5:6e:bb:f2:
ed:39:11:7f:19:1d:b2:8b:5c:1a:58:b2:aa:c5:9d:
12:57:0c:68:85:a1:1e:0d:4d:15:e1:3e:00:04:52:
4d:45:38:94:7b:5e:29:c2:9f:e1:47:0a:d2:02:c5:
9e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B7:89:FC:DB:71:0E:F5:90:D2:C8:74:00:F7:93:FD:CE:34:7F:31
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac1b893c-0547-4d22-8001-9d738235d5e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fb9:5000::/40
Signature Algorithm: sha256WithRSAEncryption
a2:15:eb:05:6d:93:95:f5:2f:15:d0:2c:e9:8c:9f:3c:45:6d:
fb:e0:91:6b:ea:18:e4:fd:82:2e:43:db:44:17:be:c0:a6:ba:
e8:77:90:55:3c:95:c6:63:70:27:a2:ac:bb:16:db:b7:78:30:
8a:c2:cb:9b:2c:c8:d4:a8:96:8a:17:6d:84:5c:71:18:4c:82:
db:b3:7d:cc:57:76:94:15:e0:94:b5:91:bf:b7:26:3f:d8:d8:
69:b2:68:ea:96:ad:06:ff:e9:f7:55:6a:0c:6c:79:4f:5f:e0:
0f:c4:b7:70:7b:9f:a3:30:78:86:21:8e:1f:f5:60:55:3c:5e:
fe:22:d9:24:05:1a:21:37:26:a5:41:8a:62:5d:be:a7:ad:f8:
0a:a3:84:a1:dd:55:73:a3:fb:9f:fa:60:fc:1d:90:b6:27:a5:
93:82:3c:09:68:b2:1e:d8:5f:56:24:16:ac:10:82:ac:df:58:
31:dc:31:7c:d0:71:c6:a8:3b:7e:23:de:c6:a6:af:85:47:68:
17:df:15:04:e4:42:19:87:60:0c:d3:de:20:1c:c1:48:cb:68:
4b:b1:60:7f:a3:9f:9e:33:3a:99:6d:39:bf:3c:5f:de:9c:87:
fe:9f:19:a4:4f:30:bc:3a:42:4c:15:ac:c9:7f:92:3d:23:0b:
21:6f:34:f4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:31:36 2025 by rpki-client