Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbcf0b8a-04a9-4238-93ad-61e36c22e027.roa
File: fbcf0b8a-04a9-4238-93ad-61e36c22e027.roa (raw, json)
Hash identifier: +IK/+1CtWk4Muhk8sy+KrC6FfCoDQ8RZcJiOeVmetnc=
Subject key identifier: B3:A1:AF:89:E8:87:4A:4F:9E:28:74:49:9C:8E:C6:F0:FC:E9:19:46
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 608EEFC4CEF503008000C34158D431387E7B2C22
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbcf0b8a-04a9-4238-93ad-61e36c22e027.roa
Signing time: Wed 29 Oct 2025 00:30:13 +0000
ROA not before: Wed 29 Oct 2025 00:30:13 +0000
ROA not after: Wed 03 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff3:2000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:8e:ef:c4:ce:f5:03:00:80:00:c3:41:58:d4:31:38:7e:7b:2c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 29 00:30:13 2025 GMT
Not After : Dec 3 23:59:59 2025 GMT
Subject: serialNumber=21fa32fd816f6a6ce2c5c48f41e1428fa8ec022aa342216ff02e607bf59a50f9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:25:11:9d:c2:84:f9:9c:2f:3b:df:2b:5e:fc:
5d:c8:a2:29:c7:23:75:a8:a7:1c:52:d7:b9:23:d1:
2d:72:8b:fc:46:87:62:3a:d9:43:ea:70:0a:d3:bb:
69:96:86:38:29:bd:45:2e:05:55:14:d7:d0:f0:95:
21:96:77:4b:8b:64:1d:10:47:f5:e3:79:08:4f:ee:
c4:f8:83:41:d9:d0:fc:b8:9c:f3:49:ce:0f:b7:75:
e3:ff:a1:8b:4a:d4:7b:3e:0b:96:6b:22:6f:3f:dd:
63:7d:47:3d:7f:07:aa:3e:01:ec:02:5b:34:57:18:
10:d2:96:84:a2:50:a1:7c:54:a9:97:bc:7f:cb:75:
4b:24:5c:c0:cb:15:8a:07:e1:24:54:1f:c3:be:be:
cf:be:02:7e:6a:6a:84:fe:46:94:69:55:54:1b:37:
b0:3c:d0:fa:04:67:3f:0b:6f:11:e1:c4:63:00:fb:
84:9c:d8:85:96:d2:ae:20:bf:f8:01:eb:fd:d3:a4:
ea:26:16:d1:5a:71:fa:04:44:91:37:d5:1e:9d:6f:
66:f5:82:26:ad:db:fa:16:4d:dd:85:43:57:57:9c:
ca:5c:8a:8c:06:6f:04:94:0f:d3:c0:2d:b3:da:c0:
8b:c0:72:7c:fb:07:d3:1e:72:48:c9:e6:02:94:59:
fa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A1:AF:89:E8:87:4A:4F:9E:28:74:49:9C:8E:C6:F0:FC:E9:19:46
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbcf0b8a-04a9-4238-93ad-61e36c22e027.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff3:2000::/40
Signature Algorithm: sha256WithRSAEncryption
bf:9e:23:89:58:29:2c:87:29:6b:e4:85:5f:6f:bf:ec:62:f9:
8a:b7:ed:32:ef:9e:4b:4c:2a:42:61:cb:22:d5:f2:22:c3:47:
86:ad:f2:27:f9:9c:6e:99:7e:4f:8d:d8:d7:7b:df:a7:da:b7:
8d:e9:8d:59:ee:a0:3a:ea:b0:87:cd:f7:04:7a:97:44:6e:79:
af:77:9e:76:41:3b:f6:14:b5:41:18:50:d2:d9:32:04:63:a6:
29:08:ed:7f:45:cc:63:ee:da:97:f1:6d:0c:ca:ba:c2:fb:b2:
92:b6:17:75:7e:e4:ca:9d:e4:9a:af:a9:0d:de:20:9a:0a:23:
71:2e:e9:cc:d8:2e:66:25:6c:f4:48:4d:34:ba:1a:3a:a5:ea:
c1:1d:ad:67:57:60:58:a1:3e:5e:82:c4:0e:0f:eb:b7:55:45:
82:07:7c:36:32:b5:8d:cd:9b:16:b0:76:31:bc:e5:a1:7a:9e:
b7:92:14:38:c1:52:b4:76:17:b9:e3:74:0d:23:f9:91:0a:a0:
97:bb:32:a2:b5:bb:fe:8a:ee:3d:10:65:75:69:03:e7:9e:69:
fb:98:6e:a4:43:5b:23:ea:24:44:38:0e:e4:cc:f9:85:2e:9f:
40:0f:87:50:2d:ef:7c:50:16:68:95:96:80:9f:98:47:e3:78:
89:ad:ef:6d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:52:32 2025 by rpki-client