Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/687d161b-7fc8-4c1d-92a0-dd65e41c55eb.roa
File: 687d161b-7fc8-4c1d-92a0-dd65e41c55eb.roa (raw, json)
Hash identifier: T79d57PMACIXDfsJQ8gRtmBuNaCJG3rno+Oq/+7iPZY=
Subject key identifier: 54:80:E7:97:6D:43:3F:C2:0D:57:FB:8F:3C:D5:B2:19:07:69:46:E8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1FB50ADC377E466214154A46BE51C1CBA6538EC1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/687d161b-7fc8-4c1d-92a0-dd65e41c55eb.roa
Signing time: Tue 07 Oct 2025 00:41:15 +0000
ROA not before: Tue 07 Oct 2025 00:41:15 +0000
ROA not after: Tue 11 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f00:81b0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:b5:0a:dc:37:7e:46:62:14:15:4a:46:be:51:c1:cb:a6:53:8e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 7 00:41:15 2025 GMT
Not After : Nov 11 23:59:59 2025 GMT
Subject: serialNumber=cb5b650a32240b4979271c147690e5cad03b86ccb79d88b9abfbd88e2a48816e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:54:85:a3:f5:a2:57:99:c4:fa:93:47:62:9a:
a7:32:f6:99:7b:92:56:09:41:a8:da:68:17:5a:23:
53:3b:91:bd:45:5b:78:1a:c6:4a:bb:06:49:50:f1:
be:5b:3f:f4:6d:e3:61:8d:8f:9b:a4:86:0d:da:6b:
99:94:ca:1e:fb:75:82:57:49:fc:5d:23:a7:d9:48:
07:34:f9:09:ed:6d:89:3c:6b:24:4a:d3:36:7f:39:
34:06:14:aa:40:e6:df:41:2d:cd:79:81:6a:22:5f:
9b:10:c6:4d:cd:a1:13:2b:6b:92:1b:ad:21:e1:f1:
78:8a:28:9d:27:03:63:4e:8c:01:87:2c:ca:d2:86:
62:a8:3b:0b:ee:de:b1:f0:5a:8f:be:a2:cb:1a:93:
0d:a1:c8:1e:f7:d2:ef:8c:13:1c:86:d1:63:b1:5a:
f5:8c:34:7f:f6:46:43:6f:38:dc:54:07:ff:6c:63:
31:61:28:ed:88:5c:89:e1:2b:5d:c0:ef:0c:34:bb:
19:64:bc:ad:8d:88:57:23:ea:fc:a4:38:a8:cc:cd:
ea:26:26:0f:b4:4b:75:13:0e:d7:74:98:ce:4d:ec:
c8:0e:3d:b1:7c:d1:bc:a2:1c:e1:22:7a:4f:ee:9c:
2f:15:66:d8:f8:14:0c:4e:13:4b:df:28:b3:e1:b7:
ef:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:80:E7:97:6D:43:3F:C2:0D:57:FB:8F:3C:D5:B2:19:07:69:46:E8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/687d161b-7fc8-4c1d-92a0-dd65e41c55eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f00:81b0::/48
Signature Algorithm: sha256WithRSAEncryption
41:09:e4:26:eb:77:97:f8:fa:4b:1d:9f:e0:ce:2b:fc:08:8a:
ad:00:57:59:f0:cf:c6:fe:f7:4c:87:12:66:91:8d:11:ca:6d:
09:a9:bf:d0:cd:3f:16:ec:9f:49:9d:6f:35:d5:9c:c1:33:ee:
65:dc:a0:0f:8b:c3:3b:7a:99:11:a8:c2:73:c5:26:b1:02:13:
57:39:c4:aa:bd:de:1e:77:af:8c:a9:ec:28:08:93:65:c2:fb:
43:46:2f:7d:e8:b6:5a:f4:38:e6:c5:40:1f:f8:be:a5:e4:d0:
7d:38:df:a4:c6:e4:d4:39:cf:9e:7e:a5:40:4f:0d:ea:d2:e0:
2f:85:bb:43:c2:6d:cc:d2:36:68:8b:7e:b2:f6:14:94:c5:5b:
62:f4:2b:c2:31:e4:7f:6a:b0:ef:6a:ca:f7:72:6c:86:d7:5e:
36:2f:a2:6e:cb:60:2a:47:d4:bb:a0:4d:cc:f8:39:b3:0b:69:
34:21:b2:03:62:03:3a:1d:43:9d:3a:65:2c:f3:db:d6:e3:bc:
7b:26:c4:cd:07:ff:24:c7:2d:8a:60:54:21:d3:2a:02:37:6c:
b0:51:ae:d5:ee:1a:17:4e:04:5a:94:3a:f5:da:9a:f5:ec:24:
cf:0c:be:15:99:f1:05:b1:22:c0:c7:d2:68:53:67:fb:d1:2c:
54:13:d6:4f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 8 19:42:44 2025 by rpki-client