Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ee79c98-182f-4893-8e2e-0282a7731dda.roa
File: 3ee79c98-182f-4893-8e2e-0282a7731dda.roa (raw, json)
Hash identifier: VkZJWVGosP+VRHzrirlUsALVrCOLrhdjAF6FHmBZz8Y=
Subject key identifier: 88:4A:41:8B:81:7E:23:78:49:C9:1E:75:DC:11:AA:81:35:EF:DA:EE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 55A0628C0E3CD2D82499FC161A7F69AB14D35AF1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ee79c98-182f-4893-8e2e-0282a7731dda.roa
Signing time: Wed 01 Oct 2025 00:21:16 +0000
ROA not before: Wed 01 Oct 2025 00:21:16 +0000
ROA not after: Wed 05 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f1e:8000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:a0:62:8c:0e:3c:d2:d8:24:99:fc:16:1a:7f:69:ab:14:d3:5a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 1 00:21:16 2025 GMT
Not After : Nov 5 23:59:59 2025 GMT
Subject: serialNumber=2ed04c88eb7cdf19f519b91ce25899ea183f116233d5300916fdadb356db0115, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:cb:03:17:29:2e:84:50:47:d3:84:71:47:a3:
e6:e5:92:b6:53:74:82:72:88:1c:3c:43:03:ef:63:
91:ac:9a:75:2a:d4:2a:d8:bd:12:61:71:92:97:7c:
75:20:88:b8:89:69:47:c8:ba:c0:93:63:01:af:0b:
12:a3:db:e4:a5:bc:5a:5e:06:69:04:63:30:35:55:
c2:3d:b8:34:0a:f3:89:9c:ec:82:9c:9b:5a:e9:89:
42:4e:0d:c7:7a:60:e5:07:1c:83:42:3b:fa:50:42:
35:a0:56:fa:bc:3d:7b:81:9f:34:88:3c:48:0b:14:
05:03:37:e0:72:20:fb:e7:92:be:14:93:f8:43:aa:
41:36:ba:4a:9f:99:4e:95:34:ad:f4:de:13:75:4e:
f3:62:a4:de:80:ac:8b:21:ec:84:f1:99:81:e4:60:
9b:42:95:3e:84:b8:9e:ff:96:00:b9:4f:6d:92:8f:
49:45:5c:f7:64:3d:32:9d:f4:33:93:d6:f3:2e:54:
c4:a8:9a:d1:71:3e:9e:67:b4:95:aa:27:90:51:36:
df:63:e4:53:25:92:c5:35:7d:8f:95:43:df:89:b3:
7d:5d:49:aa:25:d6:21:a7:29:0d:fa:8f:25:98:07:
fe:11:2c:ba:c4:5a:2b:f0:6f:0c:b1:93:19:0a:18:
6c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4A:41:8B:81:7E:23:78:49:C9:1E:75:DC:11:AA:81:35:EF:DA:EE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ee79c98-182f-4893-8e2e-0282a7731dda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f1e:8000::/36
Signature Algorithm: sha256WithRSAEncryption
75:37:3e:43:24:a2:5b:6a:d6:4f:49:05:7b:21:4f:75:4b:24:
74:43:06:ec:c2:b7:60:0d:be:cf:5c:cf:ff:03:59:2a:c2:86:
35:21:6c:80:9b:08:7f:ea:37:8c:6f:54:a2:a1:aa:96:88:fd:
e0:0f:64:8d:e4:fd:5b:7d:d7:82:65:02:e3:87:45:cc:9d:ca:
03:d3:84:2e:9d:eb:ff:07:69:51:b4:10:3a:25:5c:01:70:dd:
6d:6e:0b:65:a4:6c:d7:27:d2:36:7e:8d:41:4d:a6:98:80:d7:
b4:fa:c8:60:28:2c:74:de:31:c1:34:e4:3a:b0:64:8e:36:26:
36:b0:58:20:db:12:94:d3:a3:2b:be:ea:b1:9d:af:3f:d3:73:
29:8a:5f:64:67:76:1c:27:8d:ed:29:9f:95:4e:fb:0b:fb:a3:
f4:2a:78:e7:7e:6f:de:9e:11:3f:43:3e:d8:37:68:c9:b5:1d:
ab:6a:1e:c3:68:6d:e8:d8:95:d1:8c:51:e1:3c:d1:a5:ce:10:
a7:ca:c0:77:a8:15:c7:04:94:84:4b:f2:54:6f:29:07:b3:6a:
1b:07:58:1b:ab:7f:9e:e9:11:9d:35:f0:76:a5:9d:94:aa:3c:
25:a7:67:90:12:f9:6a:65:a3:e9:22:48:c1:24:e5:41:1a:eb:
ab:56:ea:f1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Oct 24 10:07:26 2025 by rpki-client