Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5838a01-e498-4db5-99d7-b8519767f3f3.roa
File: b5838a01-e498-4db5-99d7-b8519767f3f3.roa (raw, json)
Hash identifier: cm1Fn1gg2La1+rBGZa+Nt3m8rnZY9pLJH5aDJZHcpKE=
Subject key identifier: AF:8B:64:59:12:8B:D9:BA:D6:DC:DF:6A:34:39:81:52:67:FB:AA:DD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 582EAAD5197EB81DB6E3AE624327011C4104B3F6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5838a01-e498-4db5-99d7-b8519767f3f3.roa
Signing time: Sat 08 Nov 2025 01:00:12 +0000
ROA not before: Sat 08 Nov 2025 01:00:12 +0000
ROA not after: Sat 13 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fec:4000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:2e:aa:d5:19:7e:b8:1d:b6:e3:ae:62:43:27:01:1c:41:04:b3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 8 01:00:12 2025 GMT
Not After : Dec 13 23:59:59 2025 GMT
Subject: serialNumber=458f4f8de76cd087cb1ae87a1c56b1967737d46077ab69b48be6004e2a88262a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:32:28:d1:0e:08:87:37:4c:5b:69:8e:a1:11:
8d:2c:ab:a0:a1:cf:4a:64:98:3f:22:69:b4:cf:3b:
8f:27:d4:9e:1c:c6:b0:e9:f3:87:8f:b3:0d:b6:76:
27:a3:b6:a2:a2:34:37:6d:d0:0f:b1:ee:d5:13:64:
b4:ed:54:cd:8a:a1:65:c9:16:09:e4:16:c0:e2:8d:
73:83:a7:1a:be:3d:02:06:1f:88:e4:b0:61:ee:17:
f9:35:ae:f5:13:66:ab:a4:70:f4:e2:95:11:53:3f:
f0:ce:57:30:c2:cf:19:00:c8:80:79:c8:51:83:3b:
13:95:6f:6e:65:80:80:9f:a9:2e:88:3e:b5:cf:e2:
83:e1:3c:36:a0:30:75:fc:9f:fc:30:92:62:49:0a:
02:26:ec:02:0a:84:dd:84:c6:ef:46:cb:03:dd:9a:
74:49:9c:88:98:e1:10:a7:18:c4:20:6c:6e:01:d1:
4f:85:0f:62:d0:10:bc:76:44:ea:0d:26:f6:13:3c:
23:a8:86:7e:c4:fd:27:9a:8e:9e:cc:4d:10:ea:f0:
17:a1:dc:48:e5:8a:7b:c3:e1:da:86:70:fd:07:6c:
05:ab:05:69:24:c5:82:ac:b6:d6:92:95:40:9e:fa:
03:14:72:f9:15:84:86:4e:61:8c:10:8b:72:fd:de:
02:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8B:64:59:12:8B:D9:BA:D6:DC:DF:6A:34:39:81:52:67:FB:AA:DD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5838a01-e498-4db5-99d7-b8519767f3f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fec:4000::/48
Signature Algorithm: sha256WithRSAEncryption
c3:b9:f9:b6:66:6e:7f:3a:da:79:42:36:10:f5:3d:bc:0f:28:
a6:f4:6a:99:2a:d3:e5:6f:b3:96:6b:3c:01:6b:4b:00:44:6c:
fc:23:10:85:39:ca:6c:d2:3d:37:07:2c:db:c1:db:8f:96:4b:
19:c8:6f:84:d3:20:bf:e3:c1:8f:5b:2e:5f:07:3f:55:f0:72:
af:4c:84:a2:28:fc:aa:1a:8f:62:8b:43:e7:f9:9f:43:3c:7f:
b0:3e:3e:03:e8:de:09:c0:ad:af:d6:df:26:33:84:fd:bc:3f:
76:2c:c4:e6:ce:ca:7d:e8:54:74:3b:d5:84:03:c2:8b:e8:08:
16:1d:b8:78:28:24:ca:b0:84:4f:88:8c:02:63:c5:70:48:f3:
92:6c:89:bc:64:a4:6d:dc:1e:f9:df:0f:53:41:97:c3:08:8b:
ca:72:ee:61:82:f8:ce:cb:2a:46:45:9e:7a:24:31:25:8c:49:
b0:37:ad:0a:71:3c:56:95:1b:93:2f:0a:fd:16:f4:04:f4:59:
ee:e9:81:31:1c:07:5c:f7:29:0e:2a:6f:3c:e0:c7:c2:d4:10:
56:9a:be:0f:25:8a:a3:08:b8:79:a7:49:db:7f:a5:6a:dc:db:
80:d3:f8:07:a5:a5:98:5b:a8:b3:64:57:82:03:b8:56:3e:18:
be:1d:7b:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 18 09:37:00 2025 by rpki-client