Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc9f5c91-e465-4ceb-a73b-236ab84fd8ce.roa
File: cc9f5c91-e465-4ceb-a73b-236ab84fd8ce.roa (raw, json)
Hash identifier: 6k8i0ar189h4WQmtqDEkvQ1ugcUf5UD1SD9wkao0orI=
Subject key identifier: 2C:36:F7:BB:3E:13:D2:FD:20:5E:6B:F5:E7:23:86:BF:A6:BC:2E:4E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1CB0D6CADAAED100951FBBCE72069208D818FB52
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc9f5c91-e465-4ceb-a73b-236ab84fd8ce.roa
Signing time: Tue 11 Nov 2025 01:11:52 +0000
ROA not before: Tue 11 Nov 2025 01:11:52 +0000
ROA not after: Tue 16 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f00:a4c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:b0:d6:ca:da:ae:d1:00:95:1f:bb:ce:72:06:92:08:d8:18:fb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 11 01:11:52 2025 GMT
Not After : Dec 16 23:59:59 2025 GMT
Subject: serialNumber=074a10504d72d2644a36dc9ff3cbd810f958fa22b73e81b3b2cedd4f6411e0c5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:25:db:18:74:14:d7:eb:af:09:bd:d5:b3:12:
69:02:b0:63:34:45:37:b2:34:71:cd:a5:81:4d:b3:
fa:50:72:c4:3d:b9:8f:63:49:8a:0c:be:4f:4e:af:
dc:d6:d2:53:d8:9a:d2:60:c7:87:57:2e:1d:dd:4e:
99:08:c6:c9:04:a2:68:33:09:c8:96:0b:84:01:58:
75:8b:f3:91:4d:9f:2a:d6:34:e9:8b:a4:db:6c:67:
59:aa:10:8a:9f:50:a1:01:2a:c4:de:13:dd:89:3e:
0e:17:4a:36:bc:e4:da:08:f5:da:a4:52:62:31:39:
c8:97:d7:bd:e3:fe:16:3e:1c:5d:6e:fd:f6:57:30:
73:84:ad:21:25:41:45:f4:f6:3a:3d:1b:8c:57:b4:
e8:72:3d:d9:43:b7:f9:ea:b1:0e:dc:f0:60:78:06:
0f:75:7e:a8:35:d4:06:52:e4:0b:6a:46:ee:57:3e:
08:48:81:e5:7b:9c:88:69:00:ea:35:c0:30:fe:e4:
96:4e:5c:cc:ce:5e:68:01:20:dd:06:0e:8e:38:d8:
d2:87:ca:ee:ff:12:f0:b7:be:bf:12:03:53:e6:ad:
17:b6:c5:cd:76:10:03:04:f1:62:d0:ee:14:71:f2:
47:d1:e3:de:c7:91:1c:ed:18:d5:2f:fb:08:b2:d8:
fc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:36:F7:BB:3E:13:D2:FD:20:5E:6B:F5:E7:23:86:BF:A6:BC:2E:4E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc9f5c91-e465-4ceb-a73b-236ab84fd8ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f00:a4c0::/48
Signature Algorithm: sha256WithRSAEncryption
9d:15:bd:1b:24:da:7e:3f:2a:1a:64:11:09:7a:b9:fe:d6:82:
0a:1b:40:f7:66:46:e8:87:65:f0:0c:eb:2f:2a:33:08:f6:ff:
ca:17:a4:19:ed:7b:43:a6:a1:45:da:e8:3b:44:08:72:76:36:
35:95:2b:56:66:ac:51:15:11:7e:bc:b2:a1:eb:c3:5f:ac:6b:
90:41:60:86:b3:c6:88:7b:5f:67:cd:0b:9f:15:0e:92:b7:63:
8e:6e:89:27:f6:bf:05:36:c6:8b:47:b4:6c:67:f1:f3:b5:2f:
b0:57:f8:b6:7f:34:53:aa:3c:58:b7:2d:41:31:50:fe:0e:e9:
ab:b3:63:1b:35:2a:26:77:87:6d:d9:cc:ed:b4:77:00:b8:d7:
23:fa:8c:83:a0:11:30:57:ba:a2:61:f4:d1:82:e0:0f:f7:1b:
8e:27:68:4f:b8:18:e7:34:b5:76:b3:6d:e1:80:2e:6d:29:57:
5d:ba:99:df:ac:7e:b3:63:fd:1a:c7:70:3f:4d:aa:de:c8:ef:
90:d6:46:14:94:73:f9:06:17:2f:3b:cc:94:52:32:a3:a9:f5:
f8:1a:41:64:7b:19:82:43:82:31:9e:1a:d4:2f:db:6d:7d:7f:
63:be:0a:ff:da:67:55:ce:6d:61:6a:61:a8:6c:c2:d2:cc:8e:
b1:fa:0a:5b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 18 09:37:05 2025 by rpki-client