Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/445ec936-4ab3-46e7-bfa6-2ffd1095678c.roa
File: 445ec936-4ab3-46e7-bfa6-2ffd1095678c.roa (raw, json)
Hash identifier: cqT+/oAPXj0fUpbyyG6pzN6s2omGCvsxAFVoq0o2RH0=
Subject key identifier: 0F:18:0F:8C:AB:03:92:A7:69:32:DF:2D:A2:AD:89:0B:6A:76:24:91
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6DD24DF187ADF6202F201552A6CAE072D66BE868
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/445ec936-4ab3-46e7-bfa6-2ffd1095678c.roa
Signing time: Tue 23 Sep 2025 15:11:39 +0000
ROA not before: Tue 23 Sep 2025 15:11:39 +0000
ROA not after: Tue 28 Oct 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1fb9:c000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:d2:4d:f1:87:ad:f6:20:2f:20:15:52:a6:ca:e0:72:d6:6b:e8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 23 15:11:39 2025 GMT
Not After : Oct 28 23:59:59 2025 GMT
Subject: serialNumber=630e50b40ba5ce9a2878312ac93037db2c451bf1b3bdc82954ecc8dc666486b9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c3:da:d0:52:8e:1e:9c:56:9e:a1:8e:d8:0e:
a9:cd:f8:6a:34:db:67:f8:43:16:de:9e:02:3a:36:
94:d4:82:78:3a:31:36:69:8f:4b:83:6e:64:3d:5b:
d3:b4:88:8a:fd:4b:d2:4d:3c:38:ca:18:9b:af:60:
e5:dc:ec:7e:ab:69:a8:1a:8f:3c:fc:f9:a6:81:55:
c6:1b:c5:74:64:65:a7:dd:d4:a4:48:59:d5:21:72:
7f:51:88:96:2a:cf:02:89:fc:56:ca:66:43:13:7e:
a4:a1:9d:72:9d:0f:6d:79:d9:a4:37:46:d0:50:ce:
9e:d8:1f:e3:38:65:c0:6b:7d:cb:c2:4e:e9:e1:d1:
57:40:f8:f8:ba:4e:d2:03:5f:74:99:e0:42:fb:a5:
1c:6e:de:6a:b1:ff:73:22:fe:0f:81:4e:a7:60:ff:
5c:a1:2d:a9:57:5b:16:ad:38:2b:10:c0:43:39:95:
17:ba:fd:d8:bb:97:eb:2c:3b:e9:2d:63:a4:9b:ae:
ad:fc:0a:b0:a5:ba:3c:3f:e9:1b:cf:5e:9d:52:6b:
11:16:84:b1:11:de:5e:8e:77:30:6b:7c:8c:b4:a9:
23:89:1d:1f:37:f3:f1:ee:02:6a:63:ec:5e:9c:1a:
82:f9:b5:0d:53:cc:86:d6:8d:33:7a:40:59:a1:92:
dc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:18:0F:8C:AB:03:92:A7:69:32:DF:2D:A2:AD:89:0B:6A:76:24:91
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/445ec936-4ab3-46e7-bfa6-2ffd1095678c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fb9:c000::/40
Signature Algorithm: sha256WithRSAEncryption
45:5c:a8:27:59:95:bb:a3:ce:6d:6c:47:78:58:c5:a0:59:2a:
be:08:89:08:40:f6:ba:2f:0a:61:05:b6:d4:94:d0:2b:1f:13:
30:b3:28:77:94:56:3d:dd:4d:45:ea:2b:17:82:f5:ff:5f:dd:
3a:47:35:99:a8:07:ab:ff:d3:0b:cb:7a:c0:d3:0b:3e:33:bb:
ee:ec:16:c8:17:87:0e:7e:08:70:ac:bf:c5:1c:36:67:90:88:
9f:34:9d:3e:f9:7e:6e:ee:8d:57:4c:55:1e:e7:32:9e:3f:13:
6e:3c:da:e9:1b:5c:bc:03:85:98:ff:5b:ab:d6:07:2d:44:3d:
05:13:16:e2:7c:5e:0f:76:bb:58:09:78:32:d5:24:2e:37:2a:
c1:02:de:fb:3a:23:5c:b5:ef:ee:55:62:6e:95:31:95:e1:e0:
47:71:25:48:dc:02:d5:6f:85:be:b4:d6:ca:d2:21:d9:3c:f1:
79:fc:85:bc:1e:09:67:37:84:80:cf:69:54:60:84:d3:94:f6:
a0:91:49:2e:30:f4:76:25:87:d5:ef:56:9e:d0:b0:7a:6f:37:
29:33:0c:b2:c3:74:6f:d2:b3:f7:23:dc:2a:72:51:67:cc:bb:
2f:f3:c2:8a:ff:a2:e2:2a:9c:9a:35:39:aa:14:f7:35:d2:16:
17:22:09:e0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Oct 8 19:44:52 2025 by rpki-client