Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18fda923-6882-4956-9d4c-50f19c96087e.roa
File: 18fda923-6882-4956-9d4c-50f19c96087e.roa (raw, json)
Hash identifier: Rts4fnMRiiMVadBEGeXoNu+8zoHl7ml6km+hgJr6/CI=
Subject key identifier: 66:77:8E:17:CA:07:50:D4:F6:9D:91:2F:15:7A:5B:7F:83:1F:C4:64
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 56AD472E7B9462784B7CA9075E9FCD59C1EFBFAC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18fda923-6882-4956-9d4c-50f19c96087e.roa
Signing time: Sat 08 Nov 2025 00:41:10 +0000
ROA not before: Sat 08 Nov 2025 00:41:10 +0000
ROA not after: Sat 13 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fec:1000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:ad:47:2e:7b:94:62:78:4b:7c:a9:07:5e:9f:cd:59:c1:ef:bf:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 8 00:41:10 2025 GMT
Not After : Dec 13 23:59:59 2025 GMT
Subject: serialNumber=9310030dc559193842bfd155e502dcb284e3bc15af484ab9a821d68881225d4f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8d:fb:0b:ed:c6:40:cb:96:7f:94:e5:2f:a0:
ec:40:bd:9f:28:95:37:01:18:d8:4f:fc:2a:94:70:
08:e0:f9:8d:de:c3:82:3f:e3:d7:f4:06:6d:69:1e:
e5:95:3d:50:49:56:ac:21:66:52:08:1a:3c:4c:72:
b2:b0:7a:f2:29:59:98:45:16:64:d9:a0:89:e7:de:
3d:a5:4d:28:59:3a:61:64:bc:fe:06:e3:bb:b3:43:
7f:43:36:6c:21:b5:8f:9f:22:54:d5:ea:9f:0a:e3:
ed:95:0f:17:08:bf:19:84:5d:41:01:b2:49:46:e8:
38:4b:b7:90:ee:d5:c3:db:d8:54:21:06:8e:50:37:
35:0e:2c:5b:c9:9d:1f:6e:33:7a:50:48:ec:66:5f:
e3:60:b3:59:33:c1:ff:37:16:d5:eb:dc:2c:d1:af:
fe:26:72:28:85:9a:25:0b:c2:2f:c2:87:ae:64:8e:
d6:80:6e:2d:0b:2a:c7:b3:ff:3a:5a:ec:b7:43:6f:
df:dc:10:dc:83:38:0b:1e:20:33:0e:eb:e4:79:fa:
30:c3:ce:de:9f:f7:df:5f:94:87:2c:1e:c6:de:5b:
f5:fa:86:5c:f6:7f:d4:bd:e1:32:f2:fe:37:36:19:
3b:bf:4d:d0:b7:4a:49:0b:9b:3f:a2:63:13:c0:79:
26:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:77:8E:17:CA:07:50:D4:F6:9D:91:2F:15:7A:5B:7F:83:1F:C4:64
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18fda923-6882-4956-9d4c-50f19c96087e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fec:1000::/48
Signature Algorithm: sha256WithRSAEncryption
9b:bc:68:a3:9f:ad:07:9b:77:e2:e3:55:f2:25:f6:e6:2a:b3:
f1:91:bf:e8:eb:e1:70:61:d8:39:53:e1:2a:2b:b3:2e:c0:d6:
0d:ed:ca:99:5f:05:cb:d9:cf:89:4e:41:9c:1d:9c:75:ad:12:
9f:91:d5:bf:b8:81:39:9c:ad:52:97:9d:87:55:3b:09:5e:7b:
09:6e:d4:fb:5e:38:d7:5d:e3:81:62:d6:ba:0b:b6:c5:78:3a:
2a:ae:10:05:24:78:b4:76:8c:24:21:b9:73:62:4f:b8:9c:fe:
4b:70:29:77:e4:8b:df:10:45:3f:1d:5b:44:1c:f7:eb:e9:f2:
ea:2b:06:40:71:5c:32:e5:d9:d8:30:f8:ce:9f:02:d5:ed:d8:
6a:38:30:38:37:a3:81:07:8e:ff:42:69:84:64:89:d5:6d:71:
f8:ec:e6:1c:59:21:f5:12:c1:5c:4d:dd:3f:df:91:5e:d4:13:
49:2f:24:6a:6e:42:f6:fd:ea:41:bb:fc:76:d2:16:b9:1f:23:
4a:9a:e1:09:e6:47:26:b1:5c:1a:8e:9a:13:1a:59:59:51:42:
6a:07:15:8a:fe:27:92:86:07:71:bc:90:15:6b:f8:56:0f:56:
da:bf:e3:7b:d7:bd:08:7c:ab:dd:d3:95:6c:64:0d:3a:85:38:
69:4e:f5:f8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 18 05:50:59 2025 by rpki-client