Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ca403da-d6a0-4278-a8dd-47f9e1498b89.roa
File: 3ca403da-d6a0-4278-a8dd-47f9e1498b89.roa (raw, json)
Hash identifier: mno9rBF7WaVZwsYOYcrVX716l0YhVVmfMscSOZ1ilbg=
Subject key identifier: 2A:FD:4F:92:94:7C:4D:5E:87:EE:BE:FF:72:5A:8D:67:FE:07:7F:BF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3C60CBEBBE7E48FAA9913845E4054B7AFB58C551
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ca403da-d6a0-4278-a8dd-47f9e1498b89.roa
Signing time: Mon 06 Oct 2025 15:41:23 +0000
ROA not before: Mon 06 Oct 2025 15:41:23 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1ffd:80a0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:60:cb:eb:be:7e:48:fa:a9:91:38:45:e4:05:4b:7a:fb:58:c5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 6 15:41:23 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=62a201f5e830555e728d1678fab255fb40985cd65e78458205e9358729e66b00, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c7:99:7b:85:74:5b:54:7d:5c:35:54:e2:ff:
2b:32:bb:3b:c1:b3:2c:96:74:b5:9e:6f:f2:40:96:
64:9c:4a:a1:6c:f1:9b:79:9b:17:01:c6:46:31:6a:
a7:c1:cf:e5:73:ed:8c:e5:b6:c1:71:27:08:a1:dc:
08:72:4d:7d:88:7b:38:58:92:03:da:85:60:5a:75:
92:e5:f1:6a:28:36:50:d0:9e:d4:f8:dd:51:09:d3:
92:66:43:f0:b4:b8:b6:ad:0f:b4:12:0c:5d:52:aa:
e9:aa:67:d6:88:01:2f:d0:ec:0c:b0:21:04:91:37:
70:c7:82:70:bb:f7:cf:d8:78:cb:fc:1c:5c:4f:03:
a3:37:9b:30:67:79:55:03:9c:9a:ab:13:f2:05:65:
7a:97:45:1f:83:4c:67:67:a6:39:23:73:ac:13:fd:
c9:d7:fc:62:8c:08:68:65:d7:8d:fe:76:97:95:26:
d2:d6:83:f8:10:dd:06:57:c5:44:b5:8f:e0:28:b9:
27:dc:d3:98:05:6c:89:f6:dc:1d:60:00:11:09:91:
8c:2e:4a:80:21:d3:cb:03:a4:0c:66:58:90:2b:21:
b8:1b:f1:19:c6:70:2a:a6:c8:ae:c1:3e:df:50:01:
e9:5d:8e:57:e1:26:cb:78:35:13:a4:36:36:14:e6:
fd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FD:4F:92:94:7C:4D:5E:87:EE:BE:FF:72:5A:8D:67:FE:07:7F:BF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ca403da-d6a0-4278-a8dd-47f9e1498b89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffd:80a0::/48
Signature Algorithm: sha256WithRSAEncryption
b7:48:c3:30:7f:41:31:40:e1:a4:78:31:12:7a:94:c4:68:ed:
cf:7a:b9:04:81:2b:1e:45:52:b2:6d:f7:66:81:0d:55:61:ef:
18:4d:05:bd:f8:de:cb:6e:27:4d:83:bb:47:bb:df:de:11:15:
cc:c4:6b:b4:af:2d:27:27:a6:f7:a2:8d:23:af:66:a5:d4:cb:
91:f9:42:c5:e7:59:1f:fe:19:a8:f8:5e:2b:09:56:4e:d2:ac:
ab:02:7d:d1:2a:f9:8c:98:e5:4c:4f:fb:6e:fa:8d:44:35:7b:
a2:28:52:a6:b1:21:e1:56:ea:d0:9e:82:80:d2:7d:ca:7e:50:
33:1a:54:bf:77:d8:1f:6f:57:88:63:5e:d4:e6:6b:46:fc:8d:
e9:a0:b2:e3:cd:a5:89:6b:74:a5:a4:29:25:5a:80:e2:7a:ee:
2c:bb:96:eb:0b:dc:7b:f3:53:a4:9a:eb:a0:1d:57:60:59:f9:
87:8e:da:1a:b8:7b:e0:9b:f7:74:fd:92:c7:3c:47:d9:5c:7b:
ce:92:78:4f:c3:7a:91:39:fd:0a:c2:7c:71:83:cd:f5:09:cd:
28:b7:79:cf:2c:79:d7:e9:e0:c4:b9:5e:9d:39:a7:d1:2e:a3:
52:51:92:d9:26:d0:19:a9:65:eb:25:4b:ef:50:92:27:71:69:
66:bd:e6:f2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 8 19:39:58 2025 by rpki-client