Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d68b7ee9-305e-435f-9aa7-7fc27cefdec6.roa
File: d68b7ee9-305e-435f-9aa7-7fc27cefdec6.roa (raw, json)
Hash identifier: 5kE+eewIcFEwjB7HlWgBsQpHaF4A2gdVQOSeBCTKwp0=
Subject key identifier: 7F:27:6A:5C:63:E7:DF:8E:B0:5F:FE:FB:94:3A:81:F5:C0:8A:85:90
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2DDCB0F217C1F35CD12C6A25BC88F25BACE43C2C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d68b7ee9-305e-435f-9aa7-7fc27cefdec6.roa
Signing time: Fri 31 Oct 2025 00:50:05 +0000
ROA not before: Fri 31 Oct 2025 00:50:05 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fb9:ec00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:dc:b0:f2:17:c1:f3:5c:d1:2c:6a:25:bc:88:f2:5b:ac:e4:3c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 31 00:50:05 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=5fa7f940db4ef6af3d5dd2352130aee08e9658476f4a5752c7d58507389e005f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:90:d3:0f:b2:f9:9e:ab:26:66:76:7c:31:98:
4e:19:44:93:77:4f:3c:fd:73:2b:b8:19:97:e9:1e:
2d:c2:76:72:ae:28:99:b1:c9:10:7e:0f:df:b3:43:
cf:75:5b:93:0b:8b:c4:e3:92:97:5e:4b:24:a7:29:
42:02:94:ed:48:f8:23:b9:f8:8f:b7:d8:2c:dd:47:
e7:a8:ae:ad:33:62:53:1f:d1:09:95:d1:05:39:c6:
f2:b8:ba:5f:b1:f7:bd:e0:68:3c:6f:d0:77:b9:f0:
b9:51:5f:3b:9a:18:6b:98:59:f5:28:ea:0f:75:4c:
95:23:90:6c:0f:4b:c8:45:c9:b5:f8:b1:69:f2:ba:
64:b0:6a:76:47:26:f1:40:0b:13:0a:8b:8d:2e:2f:
22:00:12:c6:ed:98:e6:f6:1b:54:26:66:b8:67:1c:
35:9d:44:33:71:d1:58:63:14:3b:36:ae:2c:88:7a:
9f:03:66:85:36:ef:9b:8e:ed:62:4b:b7:82:3a:3d:
aa:62:7a:6a:ea:85:09:9d:2f:e3:37:5b:af:1e:9e:
c9:99:ba:d9:89:39:20:a3:23:d3:ad:d7:22:72:9c:
5e:d3:e9:15:bd:ae:f3:37:fe:ca:2b:21:c9:2e:ed:
43:3e:55:95:4e:37:c1:1c:56:57:9d:6f:11:60:53:
8f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:27:6A:5C:63:E7:DF:8E:B0:5F:FE:FB:94:3A:81:F5:C0:8A:85:90
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d68b7ee9-305e-435f-9aa7-7fc27cefdec6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fb9:ec00::/40
Signature Algorithm: sha256WithRSAEncryption
a6:8d:50:56:24:ff:4b:ff:30:64:a1:10:a0:45:d2:c6:3f:55:
ef:5c:82:27:01:a6:9f:a6:bf:db:ee:af:0d:9c:97:24:bb:47:
82:9f:28:2f:6e:92:1a:ea:bc:5d:e4:a0:24:c7:63:93:c6:d2:
a1:ab:d9:ce:56:1b:84:9d:ac:bc:1f:57:94:d3:af:4a:8c:b9:
de:cd:75:a6:e3:80:ea:3d:dc:dd:80:c2:2c:8f:c6:a2:14:a7:
db:e9:88:1e:eb:0a:0a:d7:0b:b1:e5:64:42:6e:b6:c4:e4:4d:
9c:d0:74:89:87:0e:eb:0b:c8:95:3d:de:71:5f:a6:ce:3e:07:
ce:6b:b3:81:9e:53:42:40:28:b5:26:d8:32:3f:c7:7f:b8:bf:
60:2a:db:e0:bf:bb:65:9d:34:14:51:14:56:f5:20:f8:34:61:
3e:be:2b:7e:f2:ca:be:44:22:05:81:89:ab:f2:42:4b:50:37:
31:1b:35:ab:03:9b:34:82:e8:f4:bd:18:8b:61:b3:c6:c4:df:
66:73:d3:b6:a0:0f:11:d1:bd:84:36:27:9f:44:d9:4b:dd:ae:
b6:58:b0:0d:50:7c:88:34:91:e2:48:da:d9:62:c9:1b:ec:d1:
80:48:5d:b5:54:ca:30:bb:13:1e:04:82:a5:ae:87:82:d8:92:
ea:2d:11:89
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 18 10:39:27 2025 by rpki-client