Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be83d719-2355-41b1-a762-eb7db3a7c65f.roa
File: be83d719-2355-41b1-a762-eb7db3a7c65f.roa (raw, json)
Hash identifier: cwQHuQfp8oqIePGPCHlXkAdGNVUcvAnWLe0UkT+AOwk=
Subject key identifier: C3:52:87:1D:0A:70:66:AF:0C:0F:C3:EC:60:57:BE:B8:7B:D7:DA:CA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2156B9B3E7D42461562EF84DC97DF2AF2F338469
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be83d719-2355-41b1-a762-eb7db3a7c65f.roa
Signing time: Sat 01 Nov 2025 00:51:01 +0000
ROA not before: Sat 01 Nov 2025 00:51:01 +0000
ROA not after: Sat 06 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff4:1000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:56:b9:b3:e7:d4:24:61:56:2e:f8:4d:c9:7d:f2:af:2f:33:84:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 1 00:51:01 2025 GMT
Not After : Dec 6 23:59:59 2025 GMT
Subject: serialNumber=943837b4a09055612236fff01ae1b05ecce521fe97f21a3eb362c0af2287db73, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3d:7d:6e:4a:7f:03:b2:7c:55:df:e7:02:f2:
2e:44:32:22:8f:93:11:40:67:4c:7d:4a:4c:67:ae:
ba:8a:5e:ba:22:49:50:0b:7a:f7:d5:a6:1a:f2:b6:
a2:bc:ff:95:bb:8c:db:d6:00:3d:f5:71:4f:ac:27:
b2:ab:99:20:db:1e:45:74:da:31:00:fd:0e:14:a9:
68:28:a7:12:02:a8:51:21:24:63:a6:21:74:43:ce:
f5:3e:92:51:de:55:7b:ac:e1:64:a5:1e:b6:4f:d4:
57:03:b0:ad:30:86:10:12:e4:c0:9a:bc:b3:67:39:
be:29:2c:8c:b0:3e:65:f3:f5:2f:4e:5e:21:68:9d:
ee:5a:04:44:2a:dd:f2:b3:84:99:72:c6:f4:80:92:
95:f1:8a:28:0a:5e:26:5b:a8:6c:b1:39:77:3d:76:
58:6f:a8:1d:ef:69:73:66:7e:f3:cc:40:01:81:a4:
0a:3c:a8:58:f4:2b:0b:fa:24:48:2c:5a:a4:85:2f:
80:5f:0d:73:95:7c:33:58:80:48:8c:83:d0:fb:46:
69:a2:48:7a:31:3a:88:22:62:83:92:3b:00:6c:fd:
61:29:9f:e3:30:ce:08:ff:73:b2:3e:03:7e:75:c0:
4b:ba:a0:f3:d1:f2:a8:f4:c1:c2:ed:b2:2c:24:3a:
c8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:52:87:1D:0A:70:66:AF:0C:0F:C3:EC:60:57:BE:B8:7B:D7:DA:CA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be83d719-2355-41b1-a762-eb7db3a7c65f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff4:1000::/40
Signature Algorithm: sha256WithRSAEncryption
7a:8d:8c:6f:b2:73:87:fa:e4:1b:50:27:c2:e9:fb:96:d0:fb:
cf:e7:5d:4d:4e:24:a5:2f:ae:28:36:d2:1d:a4:e1:18:64:6a:
7a:24:13:f0:f1:2d:9f:80:e1:cc:e4:e9:74:a6:78:5f:7b:0d:
a6:8f:65:e4:6a:ab:80:d8:e0:56:f8:66:cc:7d:a4:b3:87:a8:
bc:d3:f4:0f:cd:04:0a:b2:b0:7d:f3:8f:31:cf:f9:e6:45:6a:
28:27:3a:c8:1a:3c:33:d1:48:02:0a:8c:10:fa:02:7c:d8:78:
bb:6e:34:81:02:2e:4a:9c:b7:64:22:fa:46:41:c1:ee:e7:35:
95:7f:13:e1:ea:10:0c:3b:64:1a:27:49:02:30:14:12:64:89:
86:19:96:64:ba:7d:3d:d3:93:7e:00:34:d8:4a:1f:03:b8:21:
c1:72:1e:83:cb:d0:94:8b:34:66:ea:4f:9b:83:85:a6:e4:65:
f9:7d:78:b1:0f:3d:76:48:9c:77:79:ed:29:ae:15:ce:8f:0d:
85:21:aa:4e:ca:23:69:61:20:66:9d:8a:45:82:fa:4b:d8:be:
3f:40:be:85:ef:45:6b:c3:9d:1b:66:ec:e7:0b:ac:7d:21:1d:
6c:43:b5:22:4d:f7:72:73:76:74:87:b6:41:bc:23:61:3e:b6:
4c:dd:c8:67
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:49:28 2025 by rpki-client