Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/add77e04-b465-4ecc-a23d-6fbdefc2af34.roa
File: add77e04-b465-4ecc-a23d-6fbdefc2af34.roa (raw, json)
Hash identifier: D0GTVdxb5rw8HKsjZBND26ReKZgH2H7KZ8l5DLJqCrQ=
Subject key identifier: BF:F5:5E:60:22:F9:CD:C2:7D:50:02:AB:A7:86:39:37:95:73:A5:71
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1DD592A1242519F0936F7E7DAF4A25680BEA79FC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/add77e04-b465-4ecc-a23d-6fbdefc2af34.roa
Signing time: Sat 08 Nov 2025 00:31:43 +0000
ROA not before: Sat 08 Nov 2025 00:31:43 +0000
ROA not after: Sat 13 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fec:5000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:d5:92:a1:24:25:19:f0:93:6f:7e:7d:af:4a:25:68:0b:ea:79:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 8 00:31:43 2025 GMT
Not After : Dec 13 23:59:59 2025 GMT
Subject: serialNumber=e5ae5f810bb3e82187a7735b82d31546e8ad427b3540b2db89af934d21e6e0ce, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e7:5c:01:4a:08:76:5c:a9:28:ad:0c:49:11:
00:de:3d:8f:35:69:98:69:6d:4b:52:58:04:d9:5d:
99:4b:e9:a8:94:ec:db:c3:90:a7:89:7e:58:d3:74:
1d:3b:d0:fb:8a:e2:40:d5:89:ac:22:35:d9:b9:70:
8b:28:e2:91:40:b5:b6:2d:41:48:2b:85:32:44:ce:
b8:81:4a:fe:39:de:27:e5:79:d3:be:c0:88:84:7f:
6c:f6:e4:23:ad:5c:27:e9:ee:27:8d:59:d9:14:2a:
7a:93:66:4d:4a:11:75:82:22:fc:fa:cd:a7:9d:2a:
38:e2:51:89:87:79:b0:86:cf:0a:0e:47:94:30:25:
5e:e3:68:01:1d:94:cf:77:73:12:e8:de:30:27:aa:
6c:98:35:72:ab:a3:85:66:20:32:04:39:dd:c0:bd:
3d:5b:fc:08:33:4f:bb:b1:c0:1e:67:e1:19:d2:e5:
59:e2:e4:6a:9b:12:c6:24:bc:8b:ee:af:54:55:d6:
44:07:ae:2c:09:c0:56:ae:ba:79:a3:0d:21:7b:8d:
95:dd:51:f0:58:ec:de:af:ec:25:b1:d3:34:09:96:
54:e4:d4:31:95:cd:58:4e:43:ec:f5:64:06:e2:94:
be:ca:d6:d1:41:bb:e1:59:62:4b:c0:1b:80:bd:2c:
3d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F5:5E:60:22:F9:CD:C2:7D:50:02:AB:A7:86:39:37:95:73:A5:71
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/add77e04-b465-4ecc-a23d-6fbdefc2af34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fec:5000::/48
Signature Algorithm: sha256WithRSAEncryption
60:82:69:a2:12:e7:65:51:00:16:4c:bb:df:2a:be:09:cc:f2:
dd:96:58:03:84:eb:be:72:77:2e:14:b8:2f:3f:a2:13:47:8b:
08:8c:5f:ac:2f:5b:7e:e0:f3:1c:5c:67:b4:dc:20:a8:4a:df:
c4:f8:aa:57:88:61:64:0a:73:c7:6d:f6:9a:12:a0:fe:95:2f:
ef:c2:ff:56:2a:59:79:c3:36:b8:b5:ba:a9:98:22:fc:0d:d3:
5c:3e:b0:c6:2b:75:60:52:e6:48:bf:66:56:2b:16:db:0b:32:
bc:6b:84:73:c0:e7:f4:75:f3:70:02:3a:1e:04:69:28:7a:b0:
fc:d9:d3:b4:87:a7:1d:50:5c:8f:5e:1d:bb:65:b2:4b:a6:c7:
f1:10:4a:f4:5b:1a:07:4b:13:38:dd:a8:69:ab:ee:a9:7c:15:
62:d1:c4:a9:a8:67:c3:fa:75:6f:ae:c1:51:ab:77:dc:d6:b3:
66:77:48:d7:0e:28:f9:8f:db:5f:12:0d:a9:b2:c9:3a:37:a7:
39:06:02:f9:ee:13:f2:31:e6:8b:b2:9a:19:c0:3b:81:55:a3:
3e:a1:d4:ce:96:00:d2:21:98:02:c0:bf:10:3b:21:34:58:08:
58:96:88:00:c2:c4:76:c9:d0:83:b0:c3:cd:fe:2c:5b:47:2d:
e8:41:a2:c0
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUHdWSoSQlGfCTb359r0olaAvqefwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTA4MDAzMTQzWhcNMjUxMjEzMjM1OTU5
WjB6MUkwRwYDVQQFE0BlNWFlNWY4MTBiYjNlODIxODdhNzczNWI4MmQzMTU0NmU4
YWQ0MjdiMzU0MGIyZGI4OWFmOTM0ZDIxZTZlMGNlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCd51wBSgh2XKkorQxJEQDePY81aZhpbUtSWATZXZlL6aiU
7NvDkKeJfljTdB070PuK4kDViawiNdm5cIso4pFAtbYtQUgrhTJEzriBSv453ifl
edO+wIiEf2z25COtXCfp7ieNWdkUKnqTZk1KEXWCIvz6zaedKjjiUYmHebCGzwoO
R5QwJV7jaAEdlM93cxLo3jAnqmyYNXKro4VmIDIEOd3AvT1b/AgzT7uxwB5n4RnS
5Vni5GqbEsYkvIvur1RV1kQHriwJwFauunmjDSF7jZXdUfBY7N6v7CWx0zQJllTk
1DGVzVhOQ+z1ZAbilL7K1tFBu+FZYkvAG4C9LD3nAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUv/VeYCL5zcJ9UAKrp4Y5N5VzpXEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FkZDc3ZTA0LWI0NjUtNGVjYy1hMjNkLTZmYmRlZmMyYWYzNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/sUAAwDQYJKoZIhvcNAQELBQADggEBAGCCaaIS52VRABZMu98qvgnM
8t2WWAOE675ydy4UuC8/ohNHiwiMX6wvW37g8xxcZ7TcIKhK38T4qleIYWQKc8dt
9poSoP6VL+/C/1YqWXnDNri1uqmYIvwN01w+sMYrdWBS5ki/ZlYrFtsLMrxrhHPA
5/R183ACOh4EaSh6sPzZ07SHpx1QXI9eHbtlskumx/EQSvRbGgdLEzjdqGmr7ql8
FWLRxKmoZ8P6dW+uwVGrd9zWs2Z3SNcOKPmP218SDamyyTo3pzkGAvnuE/Ix5ouy
mhnAO4FVoz6h1M6WANIhmALAvxA7ITRYCFiWiADCxHbJ0IOww83+LFtHLehBosA=
-----END CERTIFICATE-----
Generated at Tue Nov 18 10:39:20 2025 by rpki-client