Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75e564e6-dc69-4fde-a5ef-ec9609456180.roa
File: 75e564e6-dc69-4fde-a5ef-ec9609456180.roa (raw, json)
Hash identifier: +TtJju1Nlr984nKxjwNOr5RdanGcasUp463Zzm0meAw=
Subject key identifier: 0B:00:5B:AF:A1:FC:02:35:B7:7F:FD:B1:F1:96:A5:47:18:AA:A5:C3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3B1A22FF3F701CE7352360EFB0151B3082A5C9EB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75e564e6-dc69-4fde-a5ef-ec9609456180.roa
Signing time: Wed 12 Nov 2025 01:11:01 +0000
ROA not before: Wed 12 Nov 2025 01:11:01 +0000
ROA not after: Wed 17 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff1:3400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:1a:22:ff:3f:70:1c:e7:35:23:60:ef:b0:15:1b:30:82:a5:c9:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 12 01:11:01 2025 GMT
Not After : Dec 17 23:59:59 2025 GMT
Subject: serialNumber=5f9a391b5d2c0d6388424a958297b3bbdf81435c97a2eb925e75eb9dff3353ea, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b4:7e:f5:14:87:74:64:98:ae:d6:ea:06:f7:
71:eb:c8:d7:1d:33:5b:24:38:11:94:9f:d5:20:7e:
10:09:1d:28:04:67:a9:80:64:d2:80:2b:cd:58:63:
4c:47:f5:da:f8:95:e7:d2:d0:ca:58:59:d1:12:76:
ab:3d:f2:20:ed:56:f9:01:4a:4e:19:1f:0f:39:a0:
3d:df:f6:73:db:89:3d:70:35:6e:80:49:c3:1d:d7:
35:7c:9b:34:8b:99:fe:34:9d:2a:d4:b5:3c:00:76:
6f:06:3c:6f:96:41:00:c5:20:d6:79:28:26:4b:74:
1e:7d:0f:42:d2:2d:a3:b0:2c:10:e3:38:fd:b8:e8:
73:6e:5e:4a:96:86:8d:d9:d1:ee:4a:9e:fa:ae:a5:
da:47:82:bb:f1:55:1c:50:40:ae:21:d2:50:10:b3:
e6:a6:f1:fe:4e:45:67:6e:84:44:ee:93:f3:49:cc:
8a:92:2c:64:46:61:2b:f0:db:12:05:c0:8d:42:61:
b9:ca:7b:ce:61:7d:0b:31:97:b4:5a:9d:61:89:49:
a0:12:74:7a:c3:9a:da:3f:7f:04:d2:31:24:b2:9d:
33:59:46:7d:39:6b:fa:5d:9f:05:fb:e8:47:4e:91:
43:67:80:82:20:6d:80:9e:eb:40:a3:ec:1b:70:4e:
dd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:00:5B:AF:A1:FC:02:35:B7:7F:FD:B1:F1:96:A5:47:18:AA:A5:C3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75e564e6-dc69-4fde-a5ef-ec9609456180.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff1:3400::/40
Signature Algorithm: sha256WithRSAEncryption
d3:e3:d8:4f:aa:30:e7:f2:35:04:86:2a:72:f9:29:6e:c1:2e:
40:c0:dd:a2:ee:e3:d7:d3:64:3f:71:49:2b:75:80:aa:48:af:
e9:b5:96:9b:62:48:b1:fb:d6:79:72:04:09:f9:6d:ea:79:a4:
a5:e6:0a:3b:0e:65:9d:31:47:d8:27:b0:49:31:5d:14:00:b0:
33:92:a6:73:5d:97:b3:09:e9:2c:aa:64:87:5e:af:15:ee:f8:
7c:d7:99:38:19:15:46:7c:c4:e2:c4:dc:5f:49:cc:ee:65:1c:
46:65:ef:d6:52:7b:bc:82:c3:98:52:00:b6:9c:48:16:d6:c5:
b6:e8:64:c6:42:43:f2:0a:2f:8b:2f:4f:a8:6d:61:fc:53:9d:
19:45:73:7e:cb:c9:42:8d:fe:8c:93:2a:26:14:ae:9d:39:86:
a2:6a:91:db:17:53:4e:e4:5e:de:c2:ab:2f:91:7c:0a:71:35:
a7:99:8d:9b:a9:87:17:63:75:bd:f9:03:c2:f9:68:b2:85:11:
22:fc:17:f0:fe:9c:f5:83:77:ef:32:da:d9:54:6c:57:56:02:
6c:a2:93:32:4c:b8:9e:db:31:36:c5:89:4f:5a:77:15:ac:3d:
6b:eb:0b:66:46:71:a9:4a:86:6a:49:e5:eb:35:6d:4a:b5:dc:
90:7f:41:44
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 18 05:51:25 2025 by rpki-client