Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dacd7120-216c-4fe9-b36c-04025c1e0df5.roa
File: dacd7120-216c-4fe9-b36c-04025c1e0df5.roa (raw, json)
Hash identifier: ChQI9y6SHhNi8qKF+sLP7yFteC4F49qxgjaaqRNZ+HI=
Subject key identifier: 5E:E5:9D:1A:00:9C:E3:F6:CD:BE:E3:41:82:83:12:52:41:C3:6A:85
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 56EB6B4E7A81069CE55545054104B25728DAFBAD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dacd7120-216c-4fe9-b36c-04025c1e0df5.roa
Signing time: Fri 31 Oct 2025 01:00:06 +0000
ROA not before: Fri 31 Oct 2025 01:00:06 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff8:ec00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:eb:6b:4e:7a:81:06:9c:e5:55:45:05:41:04:b2:57:28:da:fb:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 31 01:00:06 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=ed599570a52aacfb872175db9d11fad4fcc9650030f6cbb60b242d3eaf6d2134, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8c:a0:0f:8d:9f:90:6e:0c:e3:52:4f:b5:41:
61:b9:20:0d:8b:1e:f4:1d:e4:05:0c:47:8d:4f:6a:
af:37:2b:61:56:fc:ce:f1:31:a8:db:c6:bb:d1:b0:
7c:35:7a:e7:c7:47:b5:a4:49:02:8e:03:3c:a8:80:
e6:ad:b2:50:61:1c:f6:41:c5:ce:05:5e:76:cb:7a:
4b:df:fb:0a:9c:3e:1c:33:9f:22:37:ac:64:1e:4d:
e9:13:3c:df:2e:57:f8:c4:5e:3e:fb:1c:bd:8d:11:
6f:e6:d7:7c:ac:df:09:a7:26:15:f6:a9:17:dd:48:
85:4d:f1:5f:02:c9:5f:84:0a:33:e4:37:fc:06:5c:
04:fa:3e:23:09:d1:bd:b5:bc:d4:8b:06:51:36:90:
bb:e0:77:d5:f6:c7:3b:c6:c3:23:7d:de:28:60:40:
99:0b:f8:b8:ad:ee:46:c3:dd:e9:82:38:fc:59:be:
f1:42:24:10:00:42:2b:ac:b2:60:fb:cd:69:55:e9:
8b:ae:19:3f:4f:0e:d7:36:45:0d:ff:99:ee:59:0d:
d1:b5:35:c1:a3:51:d4:aa:ba:92:e9:be:0b:35:4e:
45:1c:68:f1:91:2f:06:4c:68:de:64:49:37:18:b3:
90:23:3f:ab:e3:07:b6:e2:82:0e:10:99:9a:27:88:
b1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E5:9D:1A:00:9C:E3:F6:CD:BE:E3:41:82:83:12:52:41:C3:6A:85
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dacd7120-216c-4fe9-b36c-04025c1e0df5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff8:ec00::/40
Signature Algorithm: sha256WithRSAEncryption
7d:57:e2:fe:19:52:8e:8d:05:a4:87:55:85:5a:b8:ab:c6:b6:
26:3a:f3:9a:e7:f2:fc:eb:d2:84:f1:9b:b5:84:41:95:0e:1f:
eb:65:58:75:4e:24:42:b5:50:86:c6:55:be:46:4b:b9:1a:8e:
80:ff:ac:2e:61:46:33:df:e5:a6:e6:30:0f:ca:ae:28:f6:bc:
ce:2a:97:ed:98:2c:56:69:fe:d0:3a:a4:7b:02:1c:23:62:55:
90:ce:36:a1:81:68:c1:ef:a7:29:3f:11:57:83:93:e1:09:1d:
bf:87:1f:b3:1e:99:4c:22:1f:47:bf:10:a9:96:8f:39:a5:a1:
db:47:80:eb:f6:63:25:57:e7:58:21:04:20:88:12:76:74:9f:
ef:1a:86:1a:b9:3c:03:c1:2c:a5:82:df:50:ab:9b:90:48:4c:
33:50:e7:80:9e:0b:c4:67:51:e2:f4:5d:be:29:ba:4b:28:69:
ef:45:39:64:1e:a5:79:8c:13:0e:8e:f4:9f:9a:4d:0b:b5:32:
86:51:d6:ad:aa:62:26:c5:03:3a:25:3c:80:c8:6f:e2:a1:f3:
e5:3e:e7:0f:f3:c5:ef:db:9f:cd:84:ad:01:af:11:de:3e:6e:
c5:94:d9:3d:62:a0:e8:b4:4e:2b:48:5e:74:d3:94:ed:cf:c4:
8d:38:c1:1c
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUVutrTnqBBpzlVUUFQQSyVyja+60wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDMxMDEwMDA2WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BlZDU5OTU3MGE1MmFhY2ZiODcyMTc1ZGI5ZDExZmFkNGZj
Yzk2NTAwMzBmNmNiYjYwYjI0MmQzZWFmNmQyMTM0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDXjKAPjZ+QbgzjUk+1QWG5IA2LHvQd5AUMR41Paq83K2FW
/M7xMajbxrvRsHw1eufHR7WkSQKOAzyogOatslBhHPZBxc4FXnbLekvf+wqcPhwz
nyI3rGQeTekTPN8uV/jEXj77HL2NEW/m13ys3wmnJhX2qRfdSIVN8V8CyV+ECjPk
N/wGXAT6PiMJ0b21vNSLBlE2kLvgd9X2xzvGwyN93ihgQJkL+Lit7kbD3emCOPxZ
vvFCJBAAQiussmD7zWlV6YuuGT9PDtc2RQ3/me5ZDdG1NcGjUdSqupLpvgs1TkUc
aPGRLwZMaN5kSTcYs5AjP6vjB7bigg4QmZoniLH/AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUXuWdGgCc4/bNvuNBgoMSUkHDaoUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2RhY2Q3MTIwLTIxNmMtNGZlOS1iMzZjLTA0MDI1YzFlMGRmNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/47DANBgkqhkiG9w0BAQsFAAOCAQEAfVfi/hlSjo0FpIdVhVq4q8a2
Jjrzmufy/OvShPGbtYRBlQ4f62VYdU4kQrVQhsZVvkZLuRqOgP+sLmFGM9/lpuYw
D8quKPa8ziqX7ZgsVmn+0DqkewIcI2JVkM42oYFowe+nKT8RV4OT4Qkdv4cfsx6Z
TCIfR78QqZaPOaWh20eA6/ZjJVfnWCEEIIgSdnSf7xqGGrk8A8EspYLfUKubkEhM
M1DngJ4LxGdR4vRdvim6Syhp70U5ZB6leYwTDo70n5pNC7UyhlHWrapiJsUDOiU8
gMhv4qHz5T7nD/PF79ufzYStAa8R3j5uxZTZPWKg6LROK0hedNOU7c/EjTjBHA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:32:53 2025 by rpki-client