Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6d34fe3-6c6a-4c49-903b-bcae88048613.roa
File: d6d34fe3-6c6a-4c49-903b-bcae88048613.roa (raw, json)
Hash identifier: FmlnzCDOWgLBha8RxCg4GJO11PF1waHhhHdhq1pW/T4=
Subject key identifier: 75:8A:99:38:95:8B:46:00:0B:B4:A8:A2:ED:80:FF:10:D7:D5:1F:8F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 62174CA14064B579A7A8E62A3E56AE0042F5B3B6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6d34fe3-6c6a-4c49-903b-bcae88048613.roa
Signing time: Wed 29 Oct 2025 07:25:05 +0000
ROA not before: Wed 29 Oct 2025 07:25:05 +0000
ROA not after: Wed 03 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fea:7480::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:17:4c:a1:40:64:b5:79:a7:a8:e6:2a:3e:56:ae:00:42:f5:b3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 29 07:25:05 2025 GMT
Not After : Dec 3 23:59:59 2025 GMT
Subject: serialNumber=ab9522fe57f76cb4ec51fbcd4f0ac6400e4574d29f0f050e49a80c8b04bdfd15, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e5:77:55:65:47:56:15:61:1a:71:85:a1:a0:
36:d3:31:fc:88:ac:ca:2e:2b:53:b4:ae:1b:ff:16:
d6:c0:11:a0:44:5d:f0:1b:dd:28:51:42:21:2e:cc:
62:d8:e7:33:d6:59:fb:4f:26:b9:f8:9f:85:d3:4b:
74:12:cd:d3:cc:a1:48:5b:1f:0d:db:e7:79:29:57:
eb:07:56:a4:86:d1:06:57:62:f1:67:df:f0:6d:be:
1d:89:0d:91:3e:bd:65:10:8d:d0:ad:01:90:f7:0d:
24:57:bc:0b:61:ea:a7:3f:98:e5:24:e7:ba:db:26:
1a:74:90:fd:69:d7:fe:69:5f:bd:9c:0c:c9:86:30:
02:dd:3f:48:31:58:43:0c:91:54:16:b8:fe:ca:ca:
dd:37:05:38:2e:0b:1d:ec:c4:a4:f8:0d:c8:66:0d:
d7:24:e3:28:8a:bb:bf:04:25:cb:06:8c:1f:74:c7:
81:e5:f8:93:d9:60:19:6c:d3:93:90:f1:69:ef:63:
9b:4d:5e:99:1f:96:00:18:44:50:90:c1:3f:53:f3:
b2:4c:c1:b7:de:4d:0d:fd:c4:cf:e4:fe:30:1b:3f:
aa:cb:62:c2:ce:90:e0:4f:76:e1:d6:34:83:e1:8b:
34:6a:20:2f:73:a6:19:ff:3d:5e:2a:a6:78:23:e1:
96:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8A:99:38:95:8B:46:00:0B:B4:A8:A2:ED:80:FF:10:D7:D5:1F:8F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6d34fe3-6c6a-4c49-903b-bcae88048613.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fea:7480::/48
Signature Algorithm: sha256WithRSAEncryption
36:e0:77:ab:d2:61:07:ca:4e:d9:f6:43:07:3a:88:2d:85:af:
8c:dd:34:75:f5:9e:f0:15:66:66:b2:8f:41:00:de:92:5b:9d:
8d:e4:34:5b:45:8b:b3:00:c1:5a:72:e2:d8:d7:40:5e:08:bf:
41:19:be:f6:c9:e9:e5:92:ad:43:b4:14:ef:b8:2c:ad:dd:e9:
0e:53:a7:31:cb:7b:dd:5b:c9:9c:e3:4a:af:03:47:33:35:fa:
9d:04:95:85:95:60:b7:34:99:4c:e7:86:f2:38:39:65:bf:e0:
44:b4:9f:16:64:2e:02:ac:66:c7:1f:da:80:c6:b0:2e:2f:7a:
4a:09:56:3a:96:12:ba:1e:d1:8e:a7:b6:87:65:10:fb:ea:aa:
6e:32:56:bc:7f:9b:14:f4:d3:be:0d:a0:65:a2:c7:75:88:41:
87:ea:a5:c4:12:28:bb:10:d2:18:4b:17:46:a5:26:2e:76:dd:
9d:7c:bc:b8:32:e5:75:7b:c5:ba:3b:6f:8a:21:0c:c7:c4:ff:
26:01:4a:f9:64:c8:ad:18:a3:6e:08:a5:a7:39:ac:4a:50:00:
65:24:3f:9c:a8:01:3e:ba:1c:5b:39:1f:83:35:57:1a:79:ca:
e3:a7:b7:58:87:37:28:fa:08:6d:d2:ae:63:7b:c5:88:18:c8:
7d:82:23:20
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:39:00 2025 by rpki-client