Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e63b2280-ecf6-4452-8c83-edab89d5688b.roa
File: e63b2280-ecf6-4452-8c83-edab89d5688b.roa (raw, json)
Hash identifier: P280NBrmzbqjOEC0KPZf/Lz+ellAtCnOAlhwKwowrMg=
Subject key identifier: 8E:32:EE:B1:DB:32:58:16:6B:41:01:6E:E1:C6:4A:ED:71:22:58:36
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6EE7A2EB3F26B3B034A4F268ACB7615608B83288
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e63b2280-ecf6-4452-8c83-edab89d5688b.roa
Signing time: Thu 13 Nov 2025 00:30:48 +0000
ROA not before: Thu 13 Nov 2025 00:30:48 +0000
ROA not after: Thu 18 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fed:1000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:e7:a2:eb:3f:26:b3:b0:34:a4:f2:68:ac:b7:61:56:08:b8:32:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 13 00:30:48 2025 GMT
Not After : Dec 18 23:59:59 2025 GMT
Subject: serialNumber=a3e996122e74add258d91643e57d7789ab1f18d38ec026e944418808197c3d58, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4d:97:a9:f8:11:5b:28:49:08:8a:e5:09:a5:
ce:5c:e2:59:bd:55:bb:2b:e7:dc:36:85:d5:18:08:
c0:dc:9e:af:b8:5b:51:ab:f4:47:54:31:42:a4:c4:
97:43:19:5b:9e:20:f5:73:f4:a9:92:78:ab:f3:cc:
67:89:42:f2:a3:89:f5:d3:b1:15:94:50:38:c9:74:
60:a0:4a:19:54:a3:86:bf:ab:03:7d:af:0e:d0:a1:
6c:4b:24:34:f2:1e:f7:d7:dd:42:41:15:3c:86:3c:
e3:24:f4:d3:2e:8e:26:40:7c:e4:95:44:fe:7b:98:
3b:09:f5:5f:f6:9e:0d:bd:5c:f4:07:6b:a4:b9:74:
79:ce:5f:d0:71:de:75:89:c2:05:3e:bc:e8:c5:f0:
8a:b5:11:58:a7:c8:41:8f:39:b4:3a:92:a7:f6:74:
d7:84:6a:ac:e4:5b:84:5c:50:85:bb:40:29:63:b1:
19:b5:20:09:72:24:d7:23:1c:d4:49:cf:db:89:a5:
fb:9c:fa:ab:c6:11:c6:9d:50:2f:85:68:b6:ad:b0:
75:0d:91:38:23:34:ed:9d:56:41:ac:ed:4d:89:d7:
9d:a0:53:62:65:8b:07:2c:5a:3f:15:a9:0d:64:03:
c2:71:75:30:8d:9a:1f:0a:90:12:7e:28:65:2a:e1:
0c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:32:EE:B1:DB:32:58:16:6B:41:01:6E:E1:C6:4A:ED:71:22:58:36
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e63b2280-ecf6-4452-8c83-edab89d5688b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fed:1000::/40
Signature Algorithm: sha256WithRSAEncryption
c7:1d:cb:d8:06:be:0d:3b:b7:b2:79:de:6b:93:1f:dd:97:d1:
86:24:99:8a:52:06:a1:63:f1:ed:26:23:cd:32:5d:03:56:52:
35:94:1b:ac:6e:00:05:19:b2:4b:c7:70:de:9d:40:65:20:3d:
9b:da:32:2d:d6:a8:cf:6a:25:90:9e:88:49:c6:2c:87:7b:31:
58:28:00:5f:17:85:e9:3b:7b:cd:6f:e7:dc:d3:33:58:d4:52:
c5:d5:f9:b7:10:ad:ea:12:e1:00:fd:82:4b:8e:22:d0:5c:09:
e3:8f:ad:f2:51:f8:1b:ae:2e:41:69:5c:cb:01:f0:ec:28:f2:
03:3d:b7:46:03:75:85:0a:86:55:47:46:58:f3:e1:85:a6:a3:
1d:3d:33:68:ce:2d:a7:33:fa:2f:77:92:97:27:ee:ee:09:5e:
e8:83:4a:f4:82:2f:b4:e6:d8:f9:4f:e1:64:0f:b5:ea:3c:e6:
55:c0:31:df:82:20:5e:9d:06:a1:6e:6d:f3:92:2f:70:6f:b0:
61:05:8a:f3:8b:11:c4:71:74:11:4c:ef:3d:14:5b:a3:c4:c9:
83:15:06:c6:ad:f0:be:c8:e2:8b:3e:84:b1:c3:2c:15:3b:40:
3e:0e:20:65:c4:27:22:f6:5d:7c:5e:72:a1:a5:d0:c6:74:50:
27:90:a7:fc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 18 10:39:40 2025 by rpki-client