Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40224638-a28e-4f61-9972-f1bcb7774c46.roa
File: 40224638-a28e-4f61-9972-f1bcb7774c46.roa (raw, json)
Hash identifier: +gGNgnYq2rmKXZ4OZuq6UFd6OGqQeNh+I4eppFgpiKQ=
Subject key identifier: F4:4E:2B:78:BE:3B:FE:7C:24:1D:A0:CB:C0:13:5E:70:82:C1:53:7A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0FE05B6CE4CB3B740E5A6BA04A5974AFB611E12C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40224638-a28e-4f61-9972-f1bcb7774c46.roa
Signing time: Sat 08 Nov 2025 01:00:10 +0000
ROA not before: Sat 08 Nov 2025 01:00:10 +0000
ROA not after: Sat 13 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fa0:2c00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:e0:5b:6c:e4:cb:3b:74:0e:5a:6b:a0:4a:59:74:af:b6:11:e1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 8 01:00:10 2025 GMT
Not After : Dec 13 23:59:59 2025 GMT
Subject: serialNumber=4662c5d5b79dc877119a2b10266b05cca08acd289bcdf1fdac6538736407cb44, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f4:4a:61:80:2d:cd:e1:97:f8:96:b3:a4:5f:
37:71:df:e2:d7:90:e2:c4:d5:8a:ce:bd:91:46:2a:
58:18:45:b9:c0:f5:7c:df:a7:24:9e:7f:fb:9a:19:
50:9b:67:47:81:19:f5:9d:c8:dd:79:35:2f:f1:e8:
28:47:86:4d:57:36:69:62:f0:a2:a1:10:5a:23:e3:
94:5f:74:09:95:76:f8:4f:fb:16:85:f4:b5:ad:cc:
41:95:f4:39:80:f5:23:ac:6d:58:4c:9a:ea:d1:1a:
78:d1:cd:db:1d:02:91:47:d5:23:8c:3d:b0:a9:50:
df:cf:81:b7:a6:29:12:cd:99:d0:75:3d:4b:1a:22:
53:19:98:88:bc:7c:fb:13:49:4b:7e:13:32:bb:fe:
50:f8:06:ea:ea:9c:b1:48:ce:c9:82:a7:07:e8:1b:
04:84:c5:23:be:ba:45:ad:b7:fe:15:0a:a5:7d:72:
2c:48:e7:ea:71:90:ef:fc:7d:18:d7:79:dc:f6:f5:
b1:de:67:20:f4:8d:84:b0:28:d4:d6:d5:0f:04:35:
25:84:2d:15:dc:a2:86:28:06:89:71:e0:f9:5c:4e:
3a:71:cb:5f:5b:49:fe:ce:49:bf:15:50:c6:3b:58:
c4:4d:6a:a2:31:32:b5:2f:a5:b9:82:f0:cb:e0:e0:
02:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4E:2B:78:BE:3B:FE:7C:24:1D:A0:CB:C0:13:5E:70:82:C1:53:7A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40224638-a28e-4f61-9972-f1bcb7774c46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fa0:2c00::/40
Signature Algorithm: sha256WithRSAEncryption
74:78:51:aa:df:9d:a8:e6:f5:c2:8b:dc:ae:dd:7f:a8:58:a0:
21:3c:d7:ed:23:25:63:1f:cb:d8:bb:1a:c4:05:fd:0d:06:32:
f4:8d:70:24:7e:54:f1:37:88:4d:5a:07:40:54:29:39:3d:c4:
de:00:b8:76:28:92:68:92:09:83:98:31:fe:2e:73:79:bb:d0:
a3:b0:78:13:ca:cd:cc:89:3a:3b:47:b4:56:aa:7a:35:8d:f8:
dd:fe:e6:81:8f:07:21:57:8b:2b:7c:50:96:2b:d7:d7:2b:44:
df:b0:b4:b5:a5:a1:0c:67:54:fa:d1:47:00:f6:13:2c:af:a9:
b7:55:6e:e4:3e:bb:98:40:35:34:ba:ad:4d:1d:39:10:cf:51:
0f:33:c6:f5:cd:17:cc:3c:d5:cb:3e:9d:3d:d4:ae:99:95:0f:
3a:37:5c:b5:6d:1c:aa:84:20:c2:38:d8:56:65:6f:9e:48:24:
f5:bf:1c:9c:e7:76:f9:33:70:e0:61:8f:84:62:b5:03:0f:1e:
11:c1:99:9d:95:4b:44:11:32:46:aa:45:fa:a5:ef:f0:d9:03:
ac:5f:d1:da:12:e7:40:12:15:6c:a0:c8:46:5a:5d:87:38:a8:
2b:21:1a:c4:86:bc:9c:48:d7:74:cb:9b:b4:af:ba:bf:15:c5:
7c:80:9a:89
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUD+BbbOTLO3QOWmugSll0r7YR4SwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTA4MDEwMDEwWhcNMjUxMjEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A0NjYyYzVkNWI3OWRjODc3MTE5YTJiMTAyNjZiMDVjY2Ew
OGFjZDI4OWJjZGYxZmRhYzY1Mzg3MzY0MDdjYjQ0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDW9EphgC3N4Zf4lrOkXzdx3+LXkOLE1YrOvZFGKlgYRbnA
9XzfpySef/uaGVCbZ0eBGfWdyN15NS/x6ChHhk1XNmli8KKhEFoj45RfdAmVdvhP
+xaF9LWtzEGV9DmA9SOsbVhMmurRGnjRzdsdApFH1SOMPbCpUN/PgbemKRLNmdB1
PUsaIlMZmIi8fPsTSUt+EzK7/lD4BurqnLFIzsmCpwfoGwSExSO+ukWtt/4VCqV9
cixI5+pxkO/8fRjXedz29bHeZyD0jYSwKNTW1Q8ENSWELRXcooYoBolx4PlcTjpx
y19bSf7OSb8VUMY7WMRNaqIxMrUvpbmC8Mvg4AK9AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU9E4reL47/nwkHaDLwBNecILBU3owHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQwMjI0NjM4LWEyOGUtNGY2MS05OTcyLWYxYmNiNzc3NGM0Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB+gLDANBgkqhkiG9w0BAQsFAAOCAQEAdHhRqt+dqOb1wovcrt1/qFig
ITzX7SMlYx/L2LsaxAX9DQYy9I1wJH5U8TeITVoHQFQpOT3E3gC4diiSaJIJg5gx
/i5zebvQo7B4E8rNzIk6O0e0Vqp6NY343f7mgY8HIVeLK3xQlivX1ytE37C0taWh
DGdU+tFHAPYTLK+pt1Vu5D67mEA1NLqtTR05EM9RDzPG9c0XzDzVyz6dPdSumZUP
OjdctW0cqoQgwjjYVmVvnkgk9b8cnOd2+TNw4GGPhGK1Aw8eEcGZnZVLRBEyRqpF
+qXv8NkDrF/R2hLnQBIVbKDIRlpdhzioKyEaxIa8nEjXdMubtK+6vxXFfICaiQ==
-----END CERTIFICATE-----
Generated at Tue Nov 18 05:50:41 2025 by rpki-client