Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e02a8835-d035-4e0b-951a-27f71b3a4549.roa
File: e02a8835-d035-4e0b-951a-27f71b3a4549.roa (raw, json)
Hash identifier: N/e/SY7GTcZDr3ZifRZDyHQMsr6qNTOc1PV5F3nLVOg=
Subject key identifier: DC:3C:5E:A6:F3:78:83:7B:30:24:74:85:2A:40:70:CD:57:FE:B9:07
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 596EAE58CA49A7A78B1702C2E9F4B4AD00B6C15D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e02a8835-d035-4e0b-951a-27f71b3a4549.roa
Signing time: Fri 31 Oct 2025 00:51:16 +0000
ROA not before: Fri 31 Oct 2025 00:51:16 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f32:ec00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:6e:ae:58:ca:49:a7:a7:8b:17:02:c2:e9:f4:b4:ad:00:b6:c1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 31 00:51:16 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=9eeb71f4b56a3e5a37d9bb3c9acefd8793861adbbd8c75a545d775425e37e42e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:73:b8:b7:97:be:1d:2a:1e:b4:34:67:aa:86:
23:a9:8e:4d:69:ae:80:8f:c3:55:d8:47:fa:fb:ad:
d4:b8:fa:67:6b:bd:7d:e6:dc:5f:f0:7b:6f:2b:4a:
e4:b7:13:73:1b:2c:07:0b:f8:e3:b7:ca:36:2f:58:
1a:29:b2:2d:21:e5:91:16:b2:5f:b6:b8:a7:94:d1:
c9:2a:1b:02:a4:ca:d5:97:0e:03:59:9d:a5:1d:62:
c7:8b:0e:17:23:a5:fb:78:63:e3:b9:f8:54:32:17:
f9:57:94:24:09:0e:f7:ce:4d:d7:73:fd:5a:d6:4d:
95:7f:4e:50:91:3e:d2:03:d0:aa:9d:06:c4:6c:dd:
db:9b:6f:68:0f:de:ae:cf:db:44:6a:fd:f0:3c:a6:
ed:77:43:0b:99:8d:e9:96:fa:03:eb:3b:e3:23:ee:
30:71:33:c8:d5:a7:65:da:6b:86:67:6c:43:43:db:
36:5e:c4:c8:c0:c0:43:34:cf:99:fa:64:fd:52:82:
2d:bc:e0:87:8e:0f:9f:e8:3d:a6:95:72:6e:33:65:
91:0c:64:41:f6:f5:9f:b4:1e:51:74:3d:66:12:4b:
2f:75:32:f5:e3:5f:8e:90:2e:6c:8e:7d:af:4f:19:
5c:11:e2:36:fc:c3:42:81:e3:8d:b9:8b:bb:8c:b4:
8b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3C:5E:A6:F3:78:83:7B:30:24:74:85:2A:40:70:CD:57:FE:B9:07
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e02a8835-d035-4e0b-951a-27f71b3a4549.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f32:ec00::/40
Signature Algorithm: sha256WithRSAEncryption
8a:1c:1d:3a:02:21:27:a4:df:b8:75:64:94:27:45:25:94:90:
1b:f8:dc:af:71:f5:03:77:21:89:d7:19:72:7b:f5:9d:c2:4e:
84:ca:a0:52:50:ea:1e:ae:ee:60:c5:d9:31:3f:57:8c:a7:79:
be:a0:8f:cb:7e:a2:59:5d:6a:ca:1e:8c:90:64:53:4c:7d:39:
94:b8:85:81:27:b3:0e:88:d4:aa:7f:1d:b0:c3:56:2b:12:81:
6f:ed:76:ff:ba:5e:96:a3:43:8e:53:f0:1a:bc:6e:ac:f3:79:
c4:98:87:90:a2:64:5f:dc:01:06:73:e1:8a:ba:9c:9e:0c:35:
66:fe:2b:14:4e:b0:11:10:9d:0b:9f:d3:ff:36:e8:90:e1:07:
40:bb:c8:62:98:bd:0d:8e:26:31:ab:b8:1f:a8:63:5f:32:4f:
f5:8e:c6:54:5b:53:71:38:25:b2:bc:ec:02:92:c8:0a:29:1e:
5a:b0:ce:0e:14:4f:bd:a6:53:3d:29:57:f2:d8:fd:4e:02:24:
e3:e4:0b:91:90:ac:80:01:e8:d9:64:2a:69:1a:a0:52:f7:a2:
06:26:4d:21:00:c4:9d:08:db:f7:db:6c:ef:10:3c:ea:11:8f:
cf:88:cd:b5:5f:e2:78:c5:0d:9e:58:05:b2:9c:48:d4:30:7f:
e4:76:32:3e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:42:33 2025 by rpki-client