Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58b003ad-659d-48ca-bc92-c152dc631bee.roa
File: 58b003ad-659d-48ca-bc92-c152dc631bee.roa (raw, json)
Hash identifier: FRqVZA7cPptGvxfPaMjszRzG5E96+wOBOcHFX4pCFD0=
Subject key identifier: 31:CD:79:32:24:AC:A6:B7:19:B0:E1:1E:FF:BC:74:38:F6:3F:06:55
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6E70A374D357010198CA360CB5A6C17266A92127
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58b003ad-659d-48ca-bc92-c152dc631bee.roa
Signing time: Wed 12 Nov 2025 00:50:54 +0000
ROA not before: Wed 12 Nov 2025 00:50:54 +0000
ROA not after: Wed 17 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f36:2000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:70:a3:74:d3:57:01:01:98:ca:36:0c:b5:a6:c1:72:66:a9:21:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 12 00:50:54 2025 GMT
Not After : Dec 17 23:59:59 2025 GMT
Subject: serialNumber=89c21c5871c45b9b38ae0a37a6c31c7edd8e30a61af189dd0053b30852dfe738, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a0:d8:3d:8f:fd:4f:6b:22:d7:9d:e4:7b:81:
e4:4e:fb:89:69:da:b7:b6:82:7e:0d:9d:fd:fa:cf:
ec:9a:5e:71:34:2b:80:43:e3:d1:92:5a:dc:c3:36:
0c:db:f1:85:ce:12:75:d2:f3:ec:d0:30:be:5e:5c:
9c:fb:04:63:c5:6e:73:8d:ab:c6:de:94:4f:8a:7f:
0f:3d:03:de:14:b1:17:de:a6:3f:a9:d5:80:37:c1:
29:c3:8f:bf:8f:1b:a7:d4:af:ff:b7:67:f6:15:02:
21:64:ea:b2:f5:14:f8:1a:29:fa:d3:13:71:9b:89:
e3:a9:5b:bb:66:1c:46:7d:88:6a:5c:24:7b:14:54:
dc:d0:92:f9:15:d9:1d:1a:cf:a0:bd:3f:c7:1c:38:
67:f0:1a:a0:a8:31:d9:85:9c:49:b7:4b:74:2d:0f:
14:f0:c2:5f:58:f8:ea:3a:02:21:0a:ec:3c:48:7d:
5b:96:ae:46:b6:7a:2d:28:4a:0a:14:0a:82:d2:f6:
1b:1c:3b:4b:7e:ac:27:e8:bd:a1:4d:6c:e6:bc:d1:
c0:48:fb:3d:61:b6:e6:57:e6:8b:e7:bd:b5:a9:78:
48:55:7a:51:09:00:fc:9c:b4:07:5c:72:8f:98:11:
6c:82:2a:79:b4:83:15:db:f7:f8:49:8d:34:aa:da:
ee:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CD:79:32:24:AC:A6:B7:19:B0:E1:1E:FF:BC:74:38:F6:3F:06:55
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58b003ad-659d-48ca-bc92-c152dc631bee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f36:2000::/40
Signature Algorithm: sha256WithRSAEncryption
62:ec:01:46:fe:8c:3c:6c:aa:05:61:98:b5:7a:4b:51:28:6b:
36:c1:a7:2f:65:95:10:38:36:81:90:e8:81:a6:18:cd:f6:10:
19:99:d4:89:18:81:92:1a:b9:86:fe:7c:64:4b:cf:c8:29:19:
ca:8e:74:eb:36:17:b9:70:44:30:a7:85:5e:46:fa:05:a5:07:
4a:98:d2:83:c7:d3:8c:88:19:83:ed:bd:6a:ad:be:f4:34:70:
fd:c4:77:38:25:3b:c3:87:31:cd:c4:34:a3:86:dc:19:b7:f6:
17:12:84:80:e2:4c:d0:73:42:18:61:4c:88:24:60:a1:ad:ac:
98:b6:01:92:60:82:d4:55:81:bc:3e:59:0a:85:24:16:dc:0c:
48:f6:5e:dd:2e:d7:8b:35:1b:db:05:89:46:8c:93:eb:b2:42:
21:15:3b:28:df:63:44:a1:28:d7:90:4c:84:78:1f:07:81:56:
3e:e5:16:e2:21:5d:98:4a:60:c1:2a:00:8c:3c:7a:df:6a:7e:
da:99:c1:83:40:9f:b2:17:2e:d0:8d:40:8c:7e:8e:21:e8:8f:
31:97:47:47:d2:82:b6:53:c0:68:79:0a:96:f7:fa:8d:9f:9f:
f2:fa:b2:0f:93:26:0c:92:ad:55:20:b6:ae:bd:d8:a1:b9:92:
0a:16:86:20
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 18 09:36:48 2025 by rpki-client