Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a057948-fd14-4f67-83ba-77013a7d02bd.roa
File: 4a057948-fd14-4f67-83ba-77013a7d02bd.roa (raw, json)
Hash identifier: o+5Ajwg1U2a91eOrcslFnvupu4RP5UknMZTO7CWt6KI=
Subject key identifier: DD:46:63:9E:9B:80:A4:7F:99:3F:20:F4:2E:27:48:F9:B9:F9:80:D4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 377017E06B9B32A7052B4FF43A36983312AA4745
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a057948-fd14-4f67-83ba-77013a7d02bd.roa
Signing time: Sat 27 Sep 2025 00:11:11 +0000
ROA not before: Sat 27 Sep 2025 00:11:11 +0000
ROA not after: Sat 01 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f68:4020::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:70:17:e0:6b:9b:32:a7:05:2b:4f:f4:3a:36:98:33:12:aa:47:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 27 00:11:11 2025 GMT
Not After : Nov 1 23:59:59 2025 GMT
Subject: serialNumber=36fab1c53dce1489166452332765352194246bad8116a6c06ac91792d5b33fd8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d6:35:b5:7a:ed:70:1e:00:c8:e2:61:c6:42:
b3:9d:55:23:d1:05:ef:99:bc:b9:4a:1d:88:45:72:
fa:c7:c6:89:10:6a:9f:01:40:d6:41:8b:9e:b5:03:
38:54:7c:67:d2:d5:7d:bf:69:44:c3:20:58:02:32:
e8:50:ee:9a:7d:cb:cb:88:96:80:96:d6:d4:b2:8c:
25:9b:b1:2c:1c:ed:ff:fd:08:89:d0:57:da:26:d0:
06:7b:1b:4b:32:cf:bb:35:ba:2b:e5:a3:3b:5f:3e:
46:5f:10:f9:98:58:89:75:31:b6:08:ef:b3:26:7d:
5b:4b:57:01:d1:74:95:43:5f:ae:80:19:c0:e4:f4:
21:bf:04:aa:89:d7:83:68:b6:3d:e5:2d:4c:e3:f6:
9a:5d:da:7f:06:d2:98:d2:60:5b:01:b6:fe:7e:4f:
47:f2:71:9a:e9:10:0d:3a:6f:ef:bc:fc:81:98:f8:
be:b7:24:76:5c:2e:44:78:40:3a:f4:7f:29:c3:c9:
b2:51:63:35:20:85:72:74:33:df:79:67:d5:54:aa:
6a:42:f3:5d:9d:ae:27:19:bd:c1:e2:89:48:0c:56:
c3:da:dc:c6:29:0a:9d:c4:04:82:2b:9e:29:ad:0b:
3a:db:25:18:30:a0:08:b4:97:47:36:bc:b6:a0:7c:
c9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:46:63:9E:9B:80:A4:7F:99:3F:20:F4:2E:27:48:F9:B9:F9:80:D4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a057948-fd14-4f67-83ba-77013a7d02bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f68:4020::/46
Signature Algorithm: sha256WithRSAEncryption
56:6f:91:8c:cf:7a:00:37:ed:d0:dc:36:64:e8:e4:c8:28:a6:
72:99:57:e0:cf:68:66:2f:61:d1:db:0c:51:b0:0d:8d:3e:5b:
af:b8:0d:68:32:87:d2:7e:a5:1d:ef:3a:09:06:7a:70:e9:4e:
23:6f:a2:10:6d:00:3b:92:f3:99:36:17:82:ab:3b:bf:cd:19:
40:e7:62:65:1e:95:1d:6f:c6:7a:ef:c4:96:db:9b:45:70:0c:
08:e0:50:e6:04:d7:7c:d8:91:f4:70:7a:fa:27:52:8a:e8:84:
b8:fe:c1:ce:fb:d1:88:c5:cd:ef:b3:41:25:65:b7:71:d3:52:
df:7e:70:48:72:9d:28:86:d9:7c:e6:ab:eb:be:d2:77:1a:07:
54:f2:3d:1a:06:41:77:2a:49:7d:5a:da:d5:e7:a5:0c:99:26:
4b:46:a2:e2:a2:dd:08:8f:cd:67:79:40:6c:a0:a5:b1:45:aa:
38:d4:c3:59:d7:a3:e8:45:7b:65:66:ef:24:90:85:ca:2f:45:
2f:12:72:4d:e8:47:11:8e:27:3c:0d:1c:6f:96:c7:88:88:a7:
b7:97:ba:08:60:66:bd:09:41:d7:a0:cb:60:62:cf:20:87:36:
1a:ef:c4:1b:00:8f:b0:94:ad:11:a1:00:37:e7:a3:b0:26:ee:
cc:79:bf:5e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 8 19:44:36 2025 by rpki-client