Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2229bc5-9ad2-48a5-bcc8-8eba56b063d6.roa
File: c2229bc5-9ad2-48a5-bcc8-8eba56b063d6.roa (raw, json)
Hash identifier: +XIpz8i5HfoXSWbPkwqQQbmInZSfMrGldIQCcXQPOj8=
Subject key identifier: 4B:2A:08:63:C9:41:3C:92:11:13:C9:2D:5D:79:FD:42:93:D2:AC:06
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2324C02C47D2042BA4D734A3AD65AF56B5FFCBDD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2229bc5-9ad2-48a5-bcc8-8eba56b063d6.roa
Signing time: Wed 12 Nov 2025 02:30:16 +0000
ROA not before: Wed 12 Nov 2025 02:30:16 +0000
ROA not after: Wed 17 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f13:4000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:24:c0:2c:47:d2:04:2b:a4:d7:34:a3:ad:65:af:56:b5:ff:cb:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 12 02:30:16 2025 GMT
Not After : Dec 17 23:59:59 2025 GMT
Subject: serialNumber=573a5cb92ed07beb24767094f34038c7002e5f80277a56a9033b720ab6019b42, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:57:15:af:a5:c1:c7:b8:1b:33:15:6e:f2:a6:
46:9f:96:ce:b6:5a:54:70:15:32:8b:51:15:45:5b:
9d:5a:58:84:23:74:d5:f7:50:b5:aa:af:fd:b7:f7:
df:e8:05:ea:b8:c5:96:83:b2:61:c2:c0:d2:a2:c8:
7b:1b:d0:c1:84:3f:0d:fd:f7:42:c9:0d:28:07:e2:
92:a3:f9:1b:37:ac:92:70:0a:3b:0a:39:69:5e:9a:
28:99:73:8b:e0:f3:b2:98:b6:ec:1e:0d:63:8d:2f:
2e:68:7a:f5:4f:f0:76:b4:a9:07:7c:65:cf:62:4e:
cf:40:a7:b1:a5:a2:f8:5d:72:ac:70:a4:79:b9:e8:
e1:98:4c:94:a5:fc:eb:e8:7a:e4:f9:9d:71:6c:22:
a7:4b:27:c4:aa:ff:42:14:10:06:03:5e:c6:12:8d:
f6:1f:b2:ed:ff:8e:ba:f4:e0:7e:50:a5:74:da:de:
b7:5c:e7:83:6e:15:5f:4a:d2:fa:44:1c:71:30:58:
2a:c9:2a:50:e3:d0:1d:34:b6:3a:58:50:24:4c:b2:
00:bf:bd:99:d0:5c:b0:ac:2f:f5:11:78:bb:44:a2:
77:7e:5f:92:0c:16:cd:27:93:ce:86:e8:da:02:ec:
28:36:d1:fc:be:b3:a4:42:07:8a:aa:67:75:ad:30:
78:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2A:08:63:C9:41:3C:92:11:13:C9:2D:5D:79:FD:42:93:D2:AC:06
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2229bc5-9ad2-48a5-bcc8-8eba56b063d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f13:4000::/36
Signature Algorithm: sha256WithRSAEncryption
2f:4d:a5:8c:77:0e:43:47:f0:20:a8:f4:d2:59:29:15:6c:9b:
99:e2:02:28:e8:b1:aa:67:b3:bb:e4:43:ac:1d:ad:23:d9:9e:
e9:f9:56:a0:f1:fa:4f:2a:ea:41:b7:cb:54:79:92:72:8e:b6:
7a:65:dc:c3:31:6a:c9:35:f0:5f:16:cb:f4:5f:c2:93:24:20:
7f:2a:d0:ac:6f:08:b8:e3:04:8e:fd:0f:93:c2:ca:0d:f5:77:
7b:f7:16:c7:c5:ce:75:d5:d3:ed:a6:d6:41:c6:86:78:e4:8f:
df:03:11:cb:ce:ea:13:2c:a2:70:b9:6b:06:16:ec:cb:f6:12:
08:f3:78:40:28:7b:c7:65:03:cc:c2:ad:e3:44:46:d4:db:26:
90:bb:21:c9:ff:5e:11:64:d7:86:be:b7:5c:67:c1:c8:14:5b:
4a:83:a9:08:d0:84:32:2d:5a:a1:de:e2:07:5b:ae:c7:f3:9b:
dd:e4:a7:ba:f7:3a:89:de:88:1a:38:9c:b7:1d:6b:b3:ba:f1:
e7:4f:64:de:ff:54:cb:82:19:61:e6:7a:83:b1:7b:cb:f5:b2:
a8:a9:b9:d7:4b:43:58:83:c8:c7:37:4c:86:fe:65:3e:e4:0d:
1f:d6:d6:d4:4b:0e:8b:5a:23:e6:ba:7d:83:ae:16:f0:69:4f:
54:09:17:02
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 18 10:39:29 2025 by rpki-client