Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed316d2f-cc47-41c6-a128-4baa596fed4a.roa
File: ed316d2f-cc47-41c6-a128-4baa596fed4a.roa (raw, json)
Hash identifier: dOB3yfDbS5NIFXX954y2DbmlJhKUuXm0uBZnFv/t4+g=
Subject key identifier: C7:EA:AF:BA:EC:C2:80:D5:34:B8:D5:8E:20:19:04:D5:AC:BC:07:3C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 35290B5368DE1FDB9D500FF931CD687F0C4307C3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed316d2f-cc47-41c6-a128-4baa596fed4a.roa
Signing time: Wed 12 Nov 2025 02:20:02 +0000
ROA not before: Wed 12 Nov 2025 02:20:02 +0000
ROA not after: Wed 17 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:4050::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:29:0b:53:68:de:1f:db:9d:50:0f:f9:31:cd:68:7f:0c:43:07:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 12 02:20:02 2025 GMT
Not After : Dec 17 23:59:59 2025 GMT
Subject: serialNumber=ff34847b39f693de0a63da23a3918e56cd7b80e01426c96a2cdbb801f11f8dde, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:58:26:27:90:a3:bd:7a:fa:5c:e8:19:c0:3d:
6d:64:a0:24:1a:96:6b:52:7b:58:c2:4f:61:a9:1d:
bf:b6:93:ff:b6:e0:59:3f:7a:3f:11:29:3e:b6:9c:
84:a7:3e:1d:8e:09:6e:f4:6a:84:44:99:ad:2b:fb:
5f:6e:89:1b:9b:0b:69:a6:ee:87:6f:ab:39:c8:c5:
4a:c8:22:b8:82:d9:13:85:b6:88:bc:85:ba:27:d5:
c0:4a:cf:91:3c:e5:51:44:dd:f2:6e:79:eb:52:10:
b7:71:f4:66:c0:09:6f:e4:ce:c4:3a:03:1e:1e:95:
57:8b:4d:b5:97:cb:70:61:db:b5:12:ff:8e:e6:92:
fc:45:17:c5:e6:3b:87:40:22:e2:66:de:01:1d:be:
01:e1:67:d3:d4:2c:25:b7:d3:36:54:65:70:86:19:
79:24:16:5e:3f:09:4b:c5:07:2d:0b:0c:15:e0:ee:
c3:3c:b0:df:e0:48:11:25:39:c6:dd:87:b1:28:36:
63:2c:20:72:99:68:39:55:c2:45:b8:37:87:d6:54:
56:51:4c:96:44:43:e1:d7:e8:7b:e7:4c:38:13:8d:
65:56:31:cc:06:61:ff:f2:54:2e:fb:e9:1d:e4:49:
7b:cd:d0:d8:51:e1:be:31:2a:1e:85:24:6c:f8:d7:
56:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EA:AF:BA:EC:C2:80:D5:34:B8:D5:8E:20:19:04:D5:AC:BC:07:3C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed316d2f-cc47-41c6-a128-4baa596fed4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:4050::/48
Signature Algorithm: sha256WithRSAEncryption
09:45:b3:36:71:a7:30:15:ee:c9:fc:84:5b:fe:6c:c5:0e:83:
24:c7:6d:ca:e2:fd:46:86:7c:56:e5:2e:56:ce:bb:cb:1b:37:
52:7d:b2:50:40:33:a7:c1:d4:19:27:3c:d1:26:0a:db:15:e0:
c8:f5:b0:46:9b:ed:6d:65:00:1a:0c:08:48:83:05:75:1e:2f:
da:c2:75:c1:2c:2a:b5:3b:82:8f:bd:93:f7:9c:06:6f:f1:13:
04:85:98:8b:b4:b7:62:96:30:cd:6d:b0:56:6c:42:dd:02:18:
6c:68:b5:51:7e:21:73:a6:f6:83:d6:0b:6d:d7:04:53:c2:ed:
01:84:2b:d6:9d:3c:fa:7d:28:40:87:8a:c2:0f:f9:df:46:d5:
c4:f3:e3:4e:a8:92:dd:47:48:36:6f:ee:cd:e0:bc:8b:cc:1d:
df:a6:97:aa:c6:c8:f0:fd:5a:86:0b:49:dd:b7:a0:58:be:d1:
67:47:af:e4:37:42:ae:e6:c4:70:3a:65:22:5b:4b:75:bd:0d:
53:32:9a:a8:86:be:24:aa:48:c0:b0:0e:bb:41:ab:95:59:e2:
2c:29:be:c5:d0:f7:18:aa:e0:32:b4:d3:96:c5:1e:5d:dc:bc:
05:c7:54:3d:a2:91:e6:05:12:28:63:30:0d:24:7a:da:61:cd:
c2:43:af:b5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 18 09:36:51 2025 by rpki-client