Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4fe7f4e-07c0-4e8e-8785-70f421b52563.roa
File: b4fe7f4e-07c0-4e8e-8785-70f421b52563.roa (raw, json)
Hash identifier: UP1/B3BB1UajoyM+XhvoIcpXyTvjCUDx4l1TdsNT++o=
Subject key identifier: DF:B2:CD:D8:8B:38:1F:2E:97:40:43:62:2C:4C:20:C8:A9:B0:B9:92
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3549B16C46EE68744DBAD08AAA26AD1B7A92D345
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4fe7f4e-07c0-4e8e-8785-70f421b52563.roa
Signing time: Tue 11 Nov 2025 00:50:08 +0000
ROA not before: Tue 11 Nov 2025 00:50:08 +0000
ROA not after: Tue 16 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:74c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:49:b1:6c:46:ee:68:74:4d:ba:d0:8a:aa:26:ad:1b:7a:92:d3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 11 00:50:08 2025 GMT
Not After : Dec 16 23:59:59 2025 GMT
Subject: serialNumber=12712afbf9ad768300624b0e98878059e52d1d831cd0ed11314694547892f5e7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8d:17:22:e2:69:98:da:77:7d:6e:a9:a1:0e:
c5:95:84:b3:e2:c3:cf:88:31:44:30:38:7e:ca:c9:
de:98:65:d5:2f:0e:51:ab:54:64:23:59:43:22:21:
29:ab:2d:c1:11:f4:03:e3:bf:72:72:83:2e:98:ab:
3c:26:5b:3a:96:ca:fc:c0:43:5d:bd:5a:e1:7d:d3:
14:e8:26:1d:6b:e9:52:51:f7:dd:a7:51:8c:c8:da:
b9:92:37:dc:7a:22:ac:72:36:8f:29:2a:dc:d5:a2:
44:fa:4e:6e:a7:ee:40:37:bd:46:a5:2b:38:1f:37:
1f:b1:9b:12:30:ef:c6:61:42:21:50:3e:1e:9a:ee:
a3:c4:6b:3f:ed:77:40:82:ae:f1:8f:fc:ee:a2:f7:
ee:cf:59:73:29:f8:62:9e:37:11:ca:f2:2a:75:2c:
82:e0:16:02:04:9b:6b:2a:2b:f7:8a:62:88:9d:43:
93:29:f6:02:da:09:17:d1:f8:01:b7:69:5e:f8:aa:
a5:69:fc:09:b0:a5:aa:9e:ea:93:d8:85:34:f6:fb:
af:9a:70:34:2d:32:02:24:b4:a7:53:77:c4:a0:9b:
10:74:6e:28:a4:31:22:c0:8e:f2:c7:f1:f6:d4:5c:
c4:87:e0:bb:d8:9b:d6:67:de:1a:f7:8f:c9:b4:50:
92:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B2:CD:D8:8B:38:1F:2E:97:40:43:62:2C:4C:20:C8:A9:B0:B9:92
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4fe7f4e-07c0-4e8e-8785-70f421b52563.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:74c0::/48
Signature Algorithm: sha256WithRSAEncryption
6d:a2:58:d6:b7:f0:4b:0e:76:de:66:aa:14:97:87:93:c2:f3:
e4:65:5c:db:ee:a9:a4:0a:61:8e:2d:2d:47:40:90:6e:8a:89:
42:77:09:31:67:c2:c8:61:a7:ae:38:58:d2:93:e5:6b:83:77:
3b:90:f3:83:4f:fc:49:c1:2b:6e:26:a6:f8:be:77:6e:32:18:
c6:2f:e0:c6:2c:60:8d:e5:70:bc:7f:4a:ab:ce:20:4f:bf:00:
db:ff:f1:fb:56:af:6b:f6:e1:77:62:a6:43:d7:a4:95:0e:3a:
d2:dc:e5:e7:fe:60:5f:e3:dc:74:02:39:07:08:e1:e6:be:29:
12:29:33:c0:c9:8e:91:bb:f9:bf:80:88:2d:c6:a2:93:20:63:
22:49:0d:af:96:96:34:c3:89:ed:8d:03:4f:97:1d:5d:01:ed:
c5:07:66:78:57:23:eb:81:51:9f:31:02:dd:79:79:fc:e2:3c:
f6:06:f8:49:56:5a:4e:9e:53:00:10:10:8c:96:fd:d7:e5:28:
48:06:1d:7f:45:80:f6:fb:64:c5:1b:2f:ec:30:c4:86:ab:64:
8a:4e:cc:d6:c6:32:7c:b6:d8:b1:e6:25:95:ee:8c:82:b6:9a:
a9:d3:8e:7c:77:94:63:6a:ad:dd:03:ce:58:79:d6:10:e3:7b:
0f:5f:6f:21
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 18 09:37:07 2025 by rpki-client