Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1ead8e0-2b7b-4215-be70-a64ccbb675b1.roa
File: f1ead8e0-2b7b-4215-be70-a64ccbb675b1.roa (raw, json)
Hash identifier: zejR65iKKTiDzj/Ho3hCoUyR2CmMa0XmyolsBYVnIzQ=
Subject key identifier: 24:FD:B3:BD:EF:FF:1E:CB:48:2E:FC:B9:AE:F8:B7:DE:F6:82:89:2F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3E3707DF4A58D92B9133CC6631989619A938FF54
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1ead8e0-2b7b-4215-be70-a64ccbb675b1.roa
Signing time: Tue 04 Nov 2025 00:00:06 +0000
ROA not before: Tue 04 Nov 2025 00:00:06 +0000
ROA not after: Tue 09 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f29:c000::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:37:07:df:4a:58:d9:2b:91:33:cc:66:31:98:96:19:a9:38:ff:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 4 00:00:06 2025 GMT
Not After : Dec 9 23:59:59 2025 GMT
Subject: serialNumber=942194476b1b08dd2e70e53bbc1fbb4b81d65bc2a33389bb0dcfece07067adac, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:de:f7:69:e7:37:b1:22:0d:8f:82:ac:f6:57:
2e:75:9b:60:5c:3b:da:81:aa:d4:d5:59:8c:ad:45:
0b:ad:dd:2e:86:cd:78:04:41:49:66:bd:74:9b:22:
0e:c9:8d:da:73:79:0a:ee:ea:9e:9d:d3:b2:0a:20:
70:64:16:07:e0:8f:2d:41:0c:cf:c8:dd:5c:2f:ba:
62:5f:45:2d:84:a6:0f:15:67:24:ba:71:cf:d9:6c:
56:9b:6b:c1:24:b6:ef:05:7d:6e:86:a9:f1:81:15:
9d:5d:3f:15:7d:0c:38:4f:2a:74:a6:81:05:3c:b7:
38:43:fd:79:c7:0c:24:37:c8:23:5c:f1:94:6b:75:
59:43:ee:67:12:b5:22:1b:8f:e8:b4:69:f4:32:8f:
d3:f8:d2:11:63:83:59:b3:12:0b:d8:86:72:d5:a4:
3f:5c:58:3a:76:9a:21:3d:ab:a9:d5:27:0d:43:9d:
49:7b:12:c5:36:47:fa:8d:18:7d:48:02:4c:68:5f:
a4:0f:48:75:51:76:6b:fc:ec:5b:1e:ee:b8:15:4e:
15:c1:13:d9:38:2b:e2:48:ba:f4:cd:12:98:fb:af:
b2:16:01:21:95:b5:12:28:d1:e5:6f:0e:bd:ae:fb:
c3:67:0a:1d:3c:c3:41:c3:09:44:4a:6a:cc:74:8d:
8f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FD:B3:BD:EF:FF:1E:CB:48:2E:FC:B9:AE:F8:B7:DE:F6:82:89:2F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1ead8e0-2b7b-4215-be70-a64ccbb675b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f29:c000::/37
Signature Algorithm: sha256WithRSAEncryption
b3:9e:ec:17:6f:a8:44:1d:ee:74:66:2e:d1:66:c6:85:4d:66:
09:ec:b0:a2:45:26:6b:aa:45:cb:a7:e0:39:50:15:d3:67:3d:
b0:a1:77:56:ff:50:dd:40:f6:e7:7b:9d:51:c1:16:bc:2b:e3:
88:26:12:9b:a1:f3:63:b8:5d:8c:93:ef:b5:e1:ab:43:fb:42:
10:d9:5c:6b:7c:03:7d:25:7a:a6:03:59:8f:e6:63:4a:ce:27:
5c:0f:c2:12:21:0a:e3:12:35:99:92:b5:45:db:d8:e0:32:90:
e2:bf:49:3d:e0:53:46:0a:aa:ed:91:a8:d3:8b:87:50:18:3d:
59:12:91:7e:94:3f:88:80:1e:58:b8:d3:e8:0e:1d:79:86:2f:
af:51:fc:14:f6:82:20:d9:c2:17:a4:58:18:c6:5e:77:e0:f5:
b5:a5:95:57:8d:60:e6:d7:c5:38:6d:ba:6e:b5:a4:68:88:67:
97:d7:a8:21:8b:b6:a0:eb:48:fa:61:55:46:48:47:2b:52:99:
07:7f:c0:e0:e6:ba:99:d8:41:89:38:96:83:6f:da:de:39:d3:
f8:3b:bd:22:fc:0f:b2:0c:ee:1d:a4:71:da:b4:78:79:0b:cc:
15:82:27:1e:7b:04:a1:8a:1f:20:2b:9f:b5:4d:78:2e:08:58:
05:ef:fa:c6
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUPjcH30pY2SuRM8xmMZiWGak4/1QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTA0MDAwMDA2WhcNMjUxMjA5MjM1OTU5
WjB6MUkwRwYDVQQFE0A5NDIxOTQ0NzZiMWIwOGRkMmU3MGU1M2JiYzFmYmI0Yjgx
ZDY1YmMyYTMzMzg5YmIwZGNmZWNlMDcwNjdhZGFjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCW3vdp5zexIg2Pgqz2Vy51m2BcO9qBqtTVWYytRQut3S6G
zXgEQUlmvXSbIg7JjdpzeQru6p6d07IKIHBkFgfgjy1BDM/I3VwvumJfRS2Epg8V
ZyS6cc/ZbFaba8Ektu8FfW6GqfGBFZ1dPxV9DDhPKnSmgQU8tzhD/XnHDCQ3yCNc
8ZRrdVlD7mcStSIbj+i0afQyj9P40hFjg1mzEgvYhnLVpD9cWDp2miE9q6nVJw1D
nUl7EsU2R/qNGH1IAkxoX6QPSHVRdmv87Fse7rgVThXBE9k4K+JIuvTNEpj7r7IW
ASGVtRIo0eVvDr2u+8NnCh08w0HDCURKasx0jY+nAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUJP2zve//HstILvy5rvi33vaCiS8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2YxZWFkOGUwLTJiN2ItNDIxNS1iZTcwLWE2NGNjYmI2NzViMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgMmAB8pwDANBgkqhkiG9w0BAQsFAAOCAQEAs57sF2+oRB3udGYu0WbGhU1m
CeywokUma6pFy6fgOVAV02c9sKF3Vv9Q3UD253udUcEWvCvjiCYSm6HzY7hdjJPv
teGrQ/tCENlca3wDfSV6pgNZj+ZjSs4nXA/CEiEK4xI1mZK1RdvY4DKQ4r9JPeBT
Rgqq7ZGo04uHUBg9WRKRfpQ/iIAeWLjT6A4deYYvr1H8FPaCINnCF6RYGMZed+D1
taWVV41g5tfFOG26brWkaIhnl9eoIYu2oOtI+mFVRkhHK1KZB3/A4Oa6mdhBiTiW
g2/a3jnT+Du9IvwPsgzuHaRx2rR4eQvMFYInHnsEoYofICuftU14LghYBe/6xg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:42:28 2025 by rpki-client