Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2af3cff2-866a-4113-89c5-1f4d664924c6.roa
File: 2af3cff2-866a-4113-89c5-1f4d664924c6.roa (raw, json)
Hash identifier: sHP+CevUWSpdU1/TTb3C7crvcPVCPMbUjVv5Ns7mYNs=
Subject key identifier: 6E:F5:B3:AF:73:7D:A2:8E:66:E6:5E:FE:CB:05:B3:F1:3A:91:18:96
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 02E9AF61EBAEF9D45538BAB9CA4CEEE27CF6A4DE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2af3cff2-866a-4113-89c5-1f4d664924c6.roa
Signing time: Wed 01 Oct 2025 00:12:40 +0000
ROA not before: Wed 01 Oct 2025 00:12:40 +0000
ROA not after: Wed 05 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f01:4806::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:e9:af:61:eb:ae:f9:d4:55:38:ba:b9:ca:4c:ee:e2:7c:f6:a4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 1 00:12:40 2025 GMT
Not After : Nov 5 23:59:59 2025 GMT
Subject: serialNumber=3717d53f6442256c99508b93514cd4a370d9a3ee54c5ef9061ac4e92bbb4a2f3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:da:4c:58:99:de:44:43:17:f5:7f:92:19:
c5:be:9d:d7:0c:b2:56:dd:4f:be:09:45:cf:69:23:
73:69:20:a7:74:73:b3:93:75:13:bc:e1:ac:2a:71:
50:fa:59:db:b2:92:83:3f:cc:39:24:51:5e:7d:b7:
b4:5e:0b:6c:77:5b:fd:29:5e:ec:6d:54:dc:24:b5:
92:34:08:8e:ec:5a:4c:c4:26:11:f0:3a:e7:f2:70:
97:f8:03:24:1f:f9:99:d3:bf:28:85:ca:4a:d6:1d:
3a:c4:a1:9a:68:32:33:1f:e6:74:a2:0d:d6:71:40:
9b:fb:a5:12:70:c4:df:b8:11:70:66:65:9c:11:92:
a3:06:2e:62:e8:9b:58:67:8b:10:81:c0:2c:f3:69:
11:32:01:75:d6:1e:b0:54:c6:44:0c:77:ad:f5:db:
24:45:fa:e9:95:47:36:ac:a4:19:6b:69:63:cb:71:
90:e6:67:74:57:aa:b6:95:5c:b5:92:a2:4d:56:ca:
07:2c:15:c8:10:d0:19:f2:b2:73:83:fa:34:e3:08:
e4:4c:d2:3d:ea:6c:00:7b:12:87:63:d9:26:aa:96:
27:3a:d7:f0:a3:21:d3:5d:3f:55:f7:2d:f7:66:1a:
fb:9d:fc:81:e5:8e:6b:df:7d:4f:e9:7f:0a:20:62:
e6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F5:B3:AF:73:7D:A2:8E:66:E6:5E:FE:CB:05:B3:F1:3A:91:18:96
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2af3cff2-866a-4113-89c5-1f4d664924c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f01:4806::/47
Signature Algorithm: sha256WithRSAEncryption
3f:d9:0d:3a:c9:98:d2:ae:65:ec:21:bb:7a:6d:fe:c4:df:b7:
ae:db:10:73:53:1e:03:a6:22:0d:d2:39:5d:e6:7c:22:04:5e:
21:94:21:22:86:52:9d:4e:9d:6c:8b:08:dc:91:38:44:76:52:
82:33:53:c4:41:4e:22:11:f7:fd:68:85:5e:33:9e:c9:62:70:
f7:b2:0d:42:2f:6d:76:8d:a1:e3:d8:a9:a9:cb:4d:66:c6:fa:
d8:98:9e:4f:c1:16:78:75:25:60:67:86:84:53:18:4c:fb:a7:
cd:e8:af:be:c4:8e:fe:77:f4:10:b4:32:ce:b2:94:31:2b:2d:
e3:20:76:f4:07:fe:6d:df:55:0c:15:92:1f:0c:5e:9a:41:c1:
6a:cc:87:84:e0:ae:21:95:f1:78:c1:0f:ff:16:1f:5f:64:38:
23:bc:94:dc:ae:10:86:f7:c8:e0:0a:23:af:de:8b:65:e2:ba:
f3:0a:21:e3:3e:89:ed:1a:6d:53:b1:4d:69:a9:40:03:56:90:
0a:cf:94:c2:f4:45:36:67:8e:cb:ed:04:80:dd:00:24:00:24:
7f:ca:e6:31:52:11:df:1d:1e:04:24:d6:04:af:d6:01:83:59:
23:c2:f1:4d:7f:8b:b8:ff:52:e7:76:43:57:59:ca:65:45:14:
f7:81:b5:b1
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUAumvYeuu+dRVOLq5ykzu4nz2pN4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDAxMDAxMjQwWhcNMjUxMTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AzNzE3ZDUzZjY0NDIyNTZjOTk1MDhiOTM1MTRjZDRhMzcw
ZDlhM2VlNTRjNWVmOTA2MWFjNGU5MmJiYjRhMmYzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCtOdpMWJneREMX9X+SGcW+ndcMslbdT74JRc9pI3NpIKd0
c7OTdRO84awqcVD6WduykoM/zDkkUV59t7ReC2x3W/0pXuxtVNwktZI0CI7sWkzE
JhHwOufycJf4AyQf+ZnTvyiFykrWHTrEoZpoMjMf5nSiDdZxQJv7pRJwxN+4EXBm
ZZwRkqMGLmLom1hnixCBwCzzaREyAXXWHrBUxkQMd6312yRF+umVRzaspBlraWPL
cZDmZ3RXqraVXLWSok1WygcsFcgQ0BnysnOD+jTjCORM0j3qbAB7Eodj2Saqlic6
1/CjIdNdP1X3LfdmGvud/IHljmvffU/pfwogYuYxAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUbvWzr3N9oo5m5l7+ywWz8TqRGJYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzJhZjNjZmYyLTg2NmEtNDExMy04OWM1LTFmNGQ2NjQ5MjRjNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAB8BSAYwDQYJKoZIhvcNAQELBQADggEBAD/ZDTrJmNKuZewhu3pt/sTf
t67bEHNTHgOmIg3SOV3mfCIEXiGUISKGUp1OnWyLCNyROER2UoIzU8RBTiIR9/1o
hV4znslicPeyDUIvbXaNoePYqanLTWbG+tiYnk/BFnh1JWBnhoRTGEz7p83or77E
jv539BC0Ms6ylDErLeMgdvQH/m3fVQwVkh8MXppBwWrMh4TgriGV8XjBD/8WH19k
OCO8lNyuEIb3yOAKI6/ei2XiuvMKIeM+ie0abVOxTWmpQANWkArPlML0RTZnjsvt
BIDdACQAJH/K5jFSEd8dHgQk1gSv1gGDWSPC8U1/i7j/Uud2Q1dZymVFFPeBtbE=
-----END CERTIFICATE-----
Generated at Wed Oct 8 19:42:47 2025 by rpki-client