Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5b2853e-a8ed-4b26-b6c5-fde579facaa2.roa
File: c5b2853e-a8ed-4b26-b6c5-fde579facaa2.roa (raw, json)
Hash identifier: PlgkpiU3O6iFFpnSABlYoPEtRB7AxE+ii3X7m4C/Sjg=
Subject key identifier: 6C:75:D2:BA:C0:E5:DB:83:49:22:80:51:FF:20:18:6D:6E:54:F8:94
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 63115ACF351FD7B25699D0A5CC55DC0E51D23B3A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5b2853e-a8ed-4b26-b6c5-fde579facaa2.roa
Signing time: Sun 16 Nov 2025 00:00:35 +0000
ROA not before: Sun 16 Nov 2025 00:00:35 +0000
ROA not after: Sun 21 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f25::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:11:5a:cf:35:1f:d7:b2:56:99:d0:a5:cc:55:dc:0e:51:d2:3b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 16 00:00:35 2025 GMT
Not After : Dec 21 23:59:59 2025 GMT
Subject: serialNumber=0c16bb3ccad3cce84b44f08bfa0f44140f63a9c4db0de420c54ecb45172b6409, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:65:d3:47:66:12:e0:42:0c:9f:5c:34:e1:6c:
49:c0:9d:4d:91:d6:a9:52:ef:09:da:c5:56:7c:9c:
64:35:1d:29:7b:9c:53:3d:92:9a:31:d0:01:5b:94:
d8:23:ef:84:b9:aa:3a:38:9f:f0:4d:20:00:7b:ed:
f5:2b:e4:be:1c:c0:3a:a1:f6:cf:db:52:89:13:a0:
d9:83:6b:9a:ee:54:31:5f:e5:bf:2a:46:2b:da:88:
dd:49:e2:05:4a:29:bc:66:c1:31:3d:67:b9:ab:f4:
b8:fe:d4:27:fc:7e:c9:9a:5f:0d:d3:4c:80:58:5d:
bb:5e:1c:9d:71:2c:a2:28:52:fc:a7:d4:96:11:64:
49:2d:56:84:ee:1e:1c:ef:f1:70:aa:1f:c0:6e:a0:
0c:01:46:eb:c1:98:24:92:76:2a:0d:22:10:53:6c:
64:f4:81:d2:56:d0:43:30:db:cc:ee:7b:52:29:5f:
6d:61:51:6a:9b:71:90:d4:88:0c:02:9f:7b:cf:34:
e0:ce:fd:07:03:55:15:32:3f:42:38:b7:b4:2f:0d:
6f:c8:98:70:d4:77:d6:50:8e:4f:26:28:38:30:6f:
48:f5:67:c7:77:0d:cb:5f:97:ae:04:4e:b8:ef:d6:
a9:ca:c3:0e:3c:50:4f:ce:5b:c1:4b:95:fa:0e:2f:
43:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:75:D2:BA:C0:E5:DB:83:49:22:80:51:FF:20:18:6D:6E:54:F8:94
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5b2853e-a8ed-4b26-b6c5-fde579facaa2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f25::/36
Signature Algorithm: sha256WithRSAEncryption
cd:96:b6:92:68:b8:6e:f1:c1:e8:74:7c:16:f3:2f:46:e7:b7:
29:a1:8a:8f:c9:04:8f:bf:49:2d:82:e1:ac:58:f3:31:56:2e:
16:f8:86:f8:03:11:70:99:60:7e:dc:9f:a4:6a:f2:40:48:a9:
4e:b6:97:31:35:98:b4:ec:45:a0:de:75:af:b7:8f:aa:19:46:
8e:56:7b:00:4a:b3:ab:8d:e5:e4:c4:0c:1e:58:f6:5e:fa:e3:
4a:5f:0b:5c:52:b1:ff:3e:a2:b7:14:aa:ba:fd:4f:e4:17:75:
db:77:16:f8:61:b7:a5:d0:02:4e:a1:11:f6:3d:8d:f6:a3:eb:
17:ac:f3:92:bc:61:95:7f:a6:12:9f:ee:09:d9:ad:69:23:20:
06:03:b9:5d:e7:a1:15:f0:93:cc:03:2c:9f:b4:42:9e:d8:a9:
73:9b:7e:fb:99:5b:c1:70:33:bd:0a:ce:96:70:0f:cc:52:86:
e6:05:fe:b3:ff:15:f7:7c:5b:63:39:74:b8:82:5c:e2:9a:4c:
f6:f7:e1:f5:fb:52:78:83:cc:0b:b8:6d:a1:50:5b:32:34:be:
13:7d:2c:95:a8:16:47:f9:d0:3e:0c:26:a8:50:88:dd:2d:e0:
6f:47:65:14:c3:7f:2e:6f:26:2e:7b:01:1a:dd:f6:99:e9:69:
24:a7:2a:a7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 18 10:39:44 2025 by rpki-client