Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f189e5be-37a6-4672-9a92-e8d2041c8b2d.roa
File: f189e5be-37a6-4672-9a92-e8d2041c8b2d.roa (raw, json)
Hash identifier: Mqxn+F1IAbDH2umTxOA9pSmBfnLcsfZAJbGurjjlP4s=
Subject key identifier: FA:A7:92:08:B2:15:9E:1B:FE:11:7A:11:9D:6B:FA:DE:73:D0:83:14
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 240D4837020CFC4B44A4FEBE3DEA2BF8A586330A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f189e5be-37a6-4672-9a92-e8d2041c8b2d.roa
Signing time: Tue 07 Oct 2025 00:41:59 +0000
ROA not before: Tue 07 Oct 2025 00:41:59 +0000
ROA not after: Tue 11 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1fff:81b0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:0d:48:37:02:0c:fc:4b:44:a4:fe:be:3d:ea:2b:f8:a5:86:33:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 7 00:41:59 2025 GMT
Not After : Nov 11 23:59:59 2025 GMT
Subject: serialNumber=b6bb87c5b8a725a398549ec8fa8a18cd225bef4edb37396e1ac7527babe6b710, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:68:cb:a6:da:db:50:2d:c4:00:1f:2c:e5:c4:
d0:cd:60:95:d9:0a:f9:3c:0a:c0:4b:35:58:8f:46:
2f:26:ce:ad:dc:f3:09:50:29:c3:ef:3d:72:6a:34:
4b:03:8a:e3:88:ab:2f:4b:81:11:68:57:09:54:14:
da:33:cc:1d:7f:30:81:4b:a9:d9:93:c7:b8:a5:de:
f3:11:e8:2d:fd:91:51:45:b3:67:04:dd:68:71:08:
49:ec:10:8b:3c:76:b3:6c:be:32:e3:1a:05:94:59:
2c:88:fb:ab:39:92:c6:ca:3b:38:40:6f:a2:6f:90:
65:ea:8a:af:a1:59:25:46:ba:1b:ba:16:9b:6e:1f:
95:09:2f:59:a5:8b:26:f2:d8:f4:f2:45:8e:96:82:
ef:f9:e6:de:ae:b3:35:c3:d3:59:fc:c5:2c:e1:6c:
a5:48:24:4a:0c:88:73:7d:dc:72:8c:a0:10:b3:b0:
f0:b5:80:7c:43:0b:65:7f:23:aa:7d:e5:84:85:ed:
89:60:a0:bc:27:78:f9:1a:e5:0e:d4:10:a5:94:d3:
44:cd:dd:ac:ea:df:f0:25:03:4a:22:ed:21:8e:ee:
4c:46:09:5a:9f:f6:c0:a3:6a:44:ca:a3:88:01:87:
28:6b:01:08:8a:e4:b4:7b:1c:41:08:a9:6a:6c:ba:
25:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A7:92:08:B2:15:9E:1B:FE:11:7A:11:9D:6B:FA:DE:73:D0:83:14
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f189e5be-37a6-4672-9a92-e8d2041c8b2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:81b0::/48
Signature Algorithm: sha256WithRSAEncryption
31:34:5e:83:e0:5e:75:13:d3:4d:29:2c:ff:40:63:37:e4:56:
a9:c9:ab:31:1a:0f:ef:0c:ca:ba:80:f9:3d:da:7e:92:28:0f:
62:a6:c0:82:ac:c6:6c:dd:2f:9a:46:1a:58:2b:aa:9f:c9:01:
7f:83:57:9d:48:7f:32:64:12:72:9a:cd:7b:f8:e8:02:7d:75:
d0:95:30:25:a1:19:fd:88:8c:9f:7b:8a:ae:f1:9b:d0:2b:ed:
6e:62:65:58:49:9e:02:c0:d0:13:3f:bf:8e:a8:61:b8:6e:d0:
7a:6c:b3:55:5a:58:13:24:ef:4e:b0:ce:47:10:06:7d:d2:9f:
21:a2:ee:b3:d5:3a:99:68:66:87:b1:29:07:00:00:4f:8f:aa:
57:50:40:31:91:ea:1a:c5:20:af:fd:32:b4:1c:3d:db:68:82:
f5:74:b2:73:f3:c9:a0:b9:0f:29:09:ae:31:c2:d4:c3:56:9b:
27:ee:7a:9b:38:78:c1:89:d4:65:44:63:c8:e6:9e:e9:88:9e:
b3:f1:1e:e7:ee:f4:a5:66:75:b8:15:6c:14:a7:64:ed:01:c3:
2e:43:c3:9f:e7:e6:45:5b:67:47:1a:4b:74:92:be:53:33:95:
93:4b:16:39:dc:c7:0d:a7:35:c1:17:76:52:0b:35:22:2e:98:
33:20:e7:88
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 8 19:42:53 2025 by rpki-client