Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6f99cd0-3022-4afa-a318-4a4fb2aa0c7e.roa
File: c6f99cd0-3022-4afa-a318-4a4fb2aa0c7e.roa (raw, json)
Hash identifier: qPmWVPc59njdTOUE0KmEi5T8/HZDo1wTcE9vwNuYCC4=
Subject key identifier: ED:C9:E2:7C:80:5F:33:4C:78:00:D5:72:8E:31:F9:A4:12:85:26:39
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6E7B8465F232AA334435CC7B89E580BE292EFC61
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6f99cd0-3022-4afa-a318-4a4fb2aa0c7e.roa
Signing time: Wed 12 Nov 2025 00:21:49 +0000
ROA not before: Wed 12 Nov 2025 00:21:49 +0000
ROA not after: Wed 17 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f36:e000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:7b:84:65:f2:32:aa:33:44:35:cc:7b:89:e5:80:be:29:2e:fc:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 12 00:21:49 2025 GMT
Not After : Dec 17 23:59:59 2025 GMT
Subject: serialNumber=19ada4db7f3589998bdd41574760718c54169617ff9f3c0b6ac91174a1a98183, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9d:d2:95:b8:25:31:69:71:6e:8b:a6:4b:c1:
3c:3d:f4:a0:6f:82:3b:97:ac:3f:7e:69:1d:dd:29:
c8:e4:c7:ac:3f:1f:88:2f:fd:cc:b1:24:3b:d4:5e:
42:d3:b5:59:3f:84:2d:a7:96:c5:c5:25:ad:a3:3a:
a1:45:55:da:5e:af:21:6f:69:d4:03:84:df:b0:9e:
f1:e5:26:0b:03:04:1a:41:76:9a:8d:39:bc:e0:3a:
7c:bb:a9:02:6a:f4:0e:1b:b1:4e:b3:8c:a1:7e:07:
77:70:53:de:45:9c:09:4e:30:fb:92:e9:9a:15:8f:
3d:0f:de:61:08:a2:15:0e:27:f7:25:8b:89:8c:03:
bd:d9:ef:86:22:26:21:fd:ca:51:8c:2e:47:a5:0a:
26:1d:7c:4c:65:f2:5c:9b:c1:0d:a0:1d:f0:dd:68:
8b:0c:09:33:54:ab:5b:bb:07:ef:26:02:9c:d3:d9:
f2:79:d6:fc:54:75:9f:e6:6d:09:20:a2:9c:22:b9:
ac:7d:5a:bf:27:1c:38:28:4a:ed:ee:a8:e6:94:0e:
95:29:d1:17:69:12:8b:a1:4d:9e:6c:40:31:cb:2d:
0d:da:c3:36:84:53:cc:71:49:dc:79:75:72:65:a6:
e3:74:de:20:83:a7:ab:ee:f8:9e:fb:fb:23:3c:fd:
88:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C9:E2:7C:80:5F:33:4C:78:00:D5:72:8E:31:F9:A4:12:85:26:39
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6f99cd0-3022-4afa-a318-4a4fb2aa0c7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f36:e000::/40
Signature Algorithm: sha256WithRSAEncryption
20:46:ef:54:19:99:0e:2a:1c:07:b7:73:f3:37:66:63:77:c5:
56:e3:33:62:e5:91:79:5d:72:c3:e9:0e:ff:2e:24:60:4b:ba:
8d:ec:3b:31:2a:2c:9a:46:97:ce:8c:9d:80:09:40:8d:f0:5c:
69:49:85:09:0c:a6:77:82:76:a8:d8:96:80:d5:0d:1e:82:33:
23:be:62:f6:7d:d4:58:4c:22:82:f7:78:38:31:c6:bf:64:c9:
17:bc:fa:f1:79:b2:b8:e8:e6:10:1a:49:f5:c8:f3:31:58:6f:
03:26:5d:34:f7:4a:a9:9e:8c:34:49:11:b5:cb:7b:0f:5d:4e:
2d:6f:fb:7a:9b:83:cf:8f:59:48:e9:8c:01:48:16:fd:94:68:
dc:a9:45:72:d5:89:dd:16:51:d9:06:b7:26:cc:aa:6e:74:85:
fa:26:1a:96:b4:43:e1:31:88:cd:75:bc:ae:b0:e2:2a:60:8e:
83:c5:1f:aa:10:2f:c7:47:f2:6c:19:9f:67:8d:58:bb:23:1b:
6a:63:38:04:75:da:d7:d4:d2:58:fc:b2:1e:05:0d:27:a7:03:
dd:52:a5:88:fb:be:e3:5f:c7:0d:aa:b8:30:b7:24:d4:35:ac:
a9:7e:f6:f3:44:b9:ce:50:65:13:ff:c7:c1:1c:59:dc:d0:e0:
73:88:c9:23
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 18 10:39:31 2025 by rpki-client