Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bca30d4-8ea5-4d58-8cca-f2ed9a0754b6.roa
File: 9bca30d4-8ea5-4d58-8cca-f2ed9a0754b6.roa (raw, json)
Hash identifier: A4SzFndLPfpLVK2ugLohoh+cg/c1dJOZxGV1h8PK6Xo=
Subject key identifier: AA:DF:B3:C1:A8:A6:9F:91:68:B0:BA:EE:13:F8:69:3F:2A:65:03:3B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 273220FB6505BB749E92FC61C66BF9F8782DC824
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bca30d4-8ea5-4d58-8cca-f2ed9a0754b6.roa
Signing time: Wed 12 Nov 2025 00:31:08 +0000
ROA not before: Wed 12 Nov 2025 00:31:08 +0000
ROA not after: Wed 17 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fb9:4000::/39 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:32:20:fb:65:05:bb:74:9e:92:fc:61:c6:6b:f9:f8:78:2d:c8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 12 00:31:08 2025 GMT
Not After : Dec 17 23:59:59 2025 GMT
Subject: serialNumber=bc4127999d3d64df3e7cf7d33368abfd31a63119acc3fa9dd9dcbb4e3b55ea4b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8c:ad:eb:d4:15:42:a9:0a:1a:eb:86:40:56:
95:fc:52:1b:d2:a1:7f:17:9e:2b:b4:31:89:ad:6e:
f1:94:c4:51:b5:6a:54:56:4b:17:46:62:52:ce:c7:
e9:a4:9c:f1:0f:59:93:2a:fe:18:88:2c:fa:45:c6:
55:31:63:de:a9:08:ae:db:d6:f3:0f:4a:5b:58:5e:
2c:dc:6f:6e:1f:0b:1a:85:64:75:4b:2e:6c:da:d1:
d9:f1:f6:94:5d:e1:9e:59:08:fd:8e:c3:61:76:a9:
fd:cc:52:42:a3:fd:b6:2f:ee:5e:0e:f5:fc:ee:4c:
44:6d:ad:6a:be:ff:2e:ea:89:4e:34:2d:1d:93:85:
03:28:64:e7:9f:c8:f0:fa:bf:4f:4a:08:07:18:39:
a3:cf:fb:a3:e9:c7:66:3e:24:60:56:6e:94:2b:c6:
2d:ca:5c:0a:45:0b:c9:1f:4f:21:66:61:3c:7d:1d:
da:4b:b6:9e:78:9d:d4:45:d5:e4:e5:7f:c4:22:83:
a0:df:bf:69:02:b4:a1:80:86:6f:eb:97:c6:2e:ee:
61:f1:2b:d3:be:c9:a1:fa:a6:a1:4f:fb:c1:aa:1b:
2c:ba:d1:c4:6f:a6:56:b6:5b:c3:f8:9f:ac:a9:b8:
b0:d6:ff:4d:e3:be:03:3f:06:ec:e7:ae:f3:7a:08:
9b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DF:B3:C1:A8:A6:9F:91:68:B0:BA:EE:13:F8:69:3F:2A:65:03:3B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bca30d4-8ea5-4d58-8cca-f2ed9a0754b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fb9:4000::/39
Signature Algorithm: sha256WithRSAEncryption
15:87:f6:b0:fc:2e:14:c4:f4:38:e0:19:1e:07:78:f7:28:c8:
38:4c:01:b9:89:4b:38:6f:0d:fc:b9:f2:fe:2e:54:a3:89:4e:
83:b3:0e:93:a8:7e:74:8a:9f:4f:b7:7e:4e:76:c1:96:db:46:
e4:f1:f0:a4:d6:5d:ab:82:9b:8a:89:35:dc:75:1f:45:c8:41:
40:59:d4:7d:a7:d0:40:4a:9a:43:a3:fb:fb:91:d8:7c:2e:b8:
3f:6f:ec:ab:8e:2a:7e:30:1c:4c:37:f9:a3:5f:74:83:5a:38:
b3:8e:c8:09:ab:9c:f6:fd:f7:84:5d:d0:76:58:65:1c:e4:0e:
12:eb:fa:bb:fb:94:ef:78:75:80:f7:f1:f1:48:6f:00:4d:d5:
75:20:66:e9:27:44:71:b6:ae:08:c5:be:fb:4c:be:69:f4:ed:
05:43:75:f1:6a:fa:3d:f1:96:df:e0:6c:33:9f:ad:86:6f:3d:
55:54:55:e6:c6:1a:21:ed:55:3f:86:a5:98:6d:a0:97:1a:e4:
27:d5:f0:10:3c:6f:86:97:6c:37:3a:18:fe:cf:5f:10:a3:c0:
76:ea:a9:30:c5:ad:f1:9d:85:07:73:d6:29:e6:54:96:c2:c4:
89:bf:bb:83:82:94:e8:5c:b1:e7:7c:b0:02:1c:74:14:96:02:
25:ca:40:7a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 18 09:36:51 2025 by rpki-client