Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4c919f7-0b3c-4caf-adc1-3e1fca45f396.roa
File: e4c919f7-0b3c-4caf-adc1-3e1fca45f396.roa (raw, json)
Hash identifier: S/tDexjTthnAGtQgggLgYFiDmTcl6xe1jAWyU32H99U=
Subject key identifier: 9F:F0:33:3C:D6:02:15:85:ED:39:C5:36:6E:62:65:EF:D4:1E:86:E2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3071F0B59D5AB527D1427995B38B563E9780CD0F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4c919f7-0b3c-4caf-adc1-3e1fca45f396.roa
Signing time: Wed 12 Nov 2025 02:31:03 +0000
ROA not before: Wed 12 Nov 2025 02:31:03 +0000
ROA not after: Wed 17 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:6020::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:71:f0:b5:9d:5a:b5:27:d1:42:79:95:b3:8b:56:3e:97:80:cd:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 12 02:31:03 2025 GMT
Not After : Dec 17 23:59:59 2025 GMT
Subject: serialNumber=dc481a7a33151af86b22d4da10c79333015c6d2a250093f02d6de69ddf8d55fd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:93:8a:9c:ef:4e:b3:cd:21:57:27:6e:9e:68:
3a:9c:b4:0f:16:1e:00:e4:48:37:f3:37:b6:4c:7b:
3a:44:99:61:fb:a9:99:7d:1b:64:06:f0:72:88:bd:
61:c0:d7:bb:80:07:0e:6a:f3:19:c5:be:3a:ef:42:
bd:5c:6e:fd:01:b1:59:1e:24:6e:e3:21:7f:2d:3f:
5e:08:0e:98:66:9e:8c:71:0f:37:99:9f:dc:b9:70:
e1:0d:1c:f2:f4:84:ec:62:7c:10:30:92:b0:dd:0a:
66:2f:c4:42:61:d8:4f:2c:88:b9:54:3f:12:1a:cb:
b8:4a:05:77:d0:ba:cc:eb:65:30:3e:57:53:d7:ae:
6a:7c:29:f3:eb:06:57:63:79:aa:ab:19:19:bc:20:
43:e8:ad:3b:4e:2b:95:6b:75:c8:4f:94:48:a6:a4:
4a:fb:d9:61:ad:07:43:e6:9f:93:15:dd:32:be:0d:
2c:08:a2:ba:39:ed:77:d9:c6:47:ef:68:37:30:5e:
a6:20:09:b3:a5:b7:83:99:e2:a0:31:be:bf:d8:0a:
13:d7:78:02:43:bf:10:4f:61:de:e9:ea:2a:eb:2b:
07:06:20:39:fe:6a:26:54:a0:7e:53:63:d7:11:6a:
54:47:7f:91:3b:0a:66:88:5b:54:b3:80:0f:6f:33:
b6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F0:33:3C:D6:02:15:85:ED:39:C5:36:6E:62:65:EF:D4:1E:86:E2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4c919f7-0b3c-4caf-adc1-3e1fca45f396.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:6020::/48
Signature Algorithm: sha256WithRSAEncryption
30:f7:e0:f1:92:e7:04:37:ac:e0:f2:b9:f5:fd:9c:68:4f:71:
0a:e4:12:5a:68:32:d6:eb:36:bb:f8:fc:9d:61:5b:a2:5c:d8:
58:37:2a:c1:99:70:99:f1:6e:de:f7:f6:bd:9a:a9:85:83:6a:
af:71:44:ff:c7:54:3e:7d:de:74:38:21:29:fe:ae:99:5c:c5:
57:41:24:c2:80:87:59:54:73:8f:33:f4:cd:12:06:bd:83:66:
49:b5:71:95:d7:52:a7:d8:28:1c:73:76:7f:5f:92:75:a7:90:
54:ad:3b:30:74:d6:2c:66:9f:8a:fe:aa:6a:92:c0:ae:f3:3e:
d4:ae:1a:77:83:20:97:59:4d:84:c5:0d:93:0c:d0:b6:20:3f:
d9:10:0e:5b:ec:9f:43:1e:db:29:07:68:9b:1f:ef:42:34:a9:
db:25:3d:de:d3:75:37:b0:af:fe:d4:19:3c:4c:50:09:62:ac:
65:1e:f1:bb:4a:27:c8:6e:b5:c1:b1:47:1b:72:c0:9f:00:bc:
e2:b3:de:68:d7:ab:bb:d1:19:bd:7e:13:6d:42:fb:d7:de:fb:
40:22:b3:f0:ae:eb:2d:b2:a1:1d:16:a6:90:bf:98:73:89:61:
e6:b9:1e:d4:c5:6d:9e:df:48:e3:f6:23:08:09:0f:a3:53:bb:
2a:78:32:ee
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 18 10:39:32 2025 by rpki-client