Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee2f6e4c-9ada-44f9-8601-b528dce85cc3.roa
File: ee2f6e4c-9ada-44f9-8601-b528dce85cc3.roa (raw, json)
Hash identifier: /ss37daZvi7ikoSeVKseS8WvT0Y5CTLALw5pc/Efaw4=
Subject key identifier: C2:30:06:58:EE:DD:F7:41:D6:54:4A:5A:D5:B5:89:D6:D9:98:9D:33
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0450CA49AEAE6FA1A60BF49B4C72AF3FB2B5B7F9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee2f6e4c-9ada-44f9-8601-b528dce85cc3.roa
Signing time: Fri 31 Oct 2025 00:30:11 +0000
ROA not before: Fri 31 Oct 2025 00:30:11 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f22:c000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:50:ca:49:ae:ae:6f:a1:a6:0b:f4:9b:4c:72:af:3f:b2:b5:b7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 31 00:30:11 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=e04196549489d869c0679cfe7ed7b6c8092f6c67567e3ce547cc2272155132dc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6b:f9:73:bb:cd:22:09:71:b4:ef:10:e3:9a:
e9:21:ea:9d:0b:b9:10:11:07:72:fe:19:ca:0d:51:
d6:19:6e:83:8d:57:bd:ff:78:b2:00:d2:47:ba:77:
3d:0e:ac:d3:27:2f:27:97:e8:72:68:44:74:4b:33:
aa:93:a3:13:f6:88:30:4f:2f:fc:64:f7:bc:81:8c:
8f:0a:bc:ba:44:fa:20:c3:db:cb:8a:d2:29:8d:0d:
99:47:15:24:c7:3f:b5:03:02:66:6e:9d:6b:b1:44:
91:96:b9:61:ff:a0:a9:91:6e:b6:4a:c3:88:1c:a9:
b6:fd:44:ec:96:75:9d:73:93:f0:23:d5:31:7d:35:
9d:d1:25:40:70:61:f6:e6:22:c3:b4:36:ed:4b:a2:
05:75:f0:91:39:46:c1:1c:51:98:02:cc:f2:9c:4c:
ed:c2:67:8f:fa:b1:a8:86:86:4f:9b:90:c4:ef:6f:
47:82:4f:29:b0:fc:ea:89:85:e2:4c:bb:03:45:4d:
ae:a5:73:8a:07:9a:80:ad:9d:39:3d:06:93:34:a1:
10:de:9c:2c:d9:a0:b2:ad:41:65:99:d8:fc:76:f7:
c7:bb:2f:f8:74:10:cf:89:98:b7:11:26:fa:03:ae:
51:39:fd:1b:e1:fa:2e:59:76:48:f6:de:5c:8e:e7:
42:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:30:06:58:EE:DD:F7:41:D6:54:4A:5A:D5:B5:89:D6:D9:98:9D:33
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee2f6e4c-9ada-44f9-8601-b528dce85cc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f22:c000::/36
Signature Algorithm: sha256WithRSAEncryption
c9:b7:f3:b4:fb:d3:16:5a:3c:16:16:15:de:dc:90:62:0b:c4:
a3:60:06:7c:6d:cd:9a:ae:a1:0d:c4:37:33:a2:c9:3b:2f:7a:
3f:39:e4:a4:ce:45:be:ec:2f:b1:6f:f4:fe:98:ad:24:20:8a:
e9:7d:99:8b:19:a8:e1:b8:02:3c:f4:86:b7:42:2d:61:17:0e:
a3:e9:68:d6:0e:91:80:8d:69:be:73:78:e4:21:49:99:1b:63:
51:0d:f7:df:36:80:34:8f:6c:c2:33:aa:44:84:cc:02:3b:76:
0d:90:ac:f8:c5:a9:cb:b5:e3:eb:d8:e7:76:db:50:75:4a:2c:
49:a5:7d:90:63:40:cd:51:ed:fd:76:6a:10:8c:34:88:3e:6a:
5c:c1:45:db:51:e6:78:03:27:e3:d5:73:c9:b0:8d:ea:d4:ff:
8a:6e:ea:e9:5e:31:7a:61:c0:fe:6c:a4:e8:c0:31:7f:79:19:
3a:d6:fe:89:d0:39:1e:29:e4:52:3d:d2:3f:5a:90:38:83:0c:
8f:74:c4:a9:8e:17:19:7d:37:21:22:d2:33:03:a3:03:de:18:
ce:35:5b:93:82:9a:e5:e2:c7:e1:98:00:ba:af:2e:7a:04:e9:
db:62:48:90:e6:e0:45:8c:0d:2f:0e:c7:aa:36:5c:d1:d8:cd:
ac:13:8a:51
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:26:05 2025 by rpki-client