Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90bfc555-8d9a-45c8-8fa6-ac9cb9046bb5.roa
File: 90bfc555-8d9a-45c8-8fa6-ac9cb9046bb5.roa (raw, json)
Hash identifier: CQIViQ61eOcYOmh7qEM3oS7F2h8hXFxJS9VAmN7jYAQ=
Subject key identifier: C0:CB:52:8E:8D:44:AE:8B:1B:6E:53:7C:1B:19:C2:73:03:BC:3C:F6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 11F7ACEFD82D24B6DE8196A7D0319650CB288360
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90bfc555-8d9a-45c8-8fa6-ac9cb9046bb5.roa
Signing time: Wed 01 Oct 2025 00:22:42 +0000
ROA not before: Wed 01 Oct 2025 00:22:42 +0000
ROA not after: Wed 05 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff9:5000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:f7:ac:ef:d8:2d:24:b6:de:81:96:a7:d0:31:96:50:cb:28:83:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 1 00:22:42 2025 GMT
Not After : Nov 5 23:59:59 2025 GMT
Subject: serialNumber=b5eeccbfdb1e3cfe061705b8c6b10f02293ef0d2302c194bf023cfe7dc5b3dc0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:52:4e:b9:81:45:f1:57:91:eb:f7:6b:58:25:
ac:30:cb:15:38:24:24:dc:7e:ab:d2:20:de:45:7e:
c2:16:4a:fc:96:bf:fe:da:86:e7:d0:61:6e:92:1d:
3d:0b:c7:64:c0:26:7c:7b:45:b4:86:fe:95:9f:06:
ad:9c:b0:2b:3f:36:d5:f3:c6:d6:54:4a:64:f8:e2:
4e:d0:77:96:43:2e:44:54:00:4c:86:bb:59:8b:a5:
df:2d:67:db:41:10:ec:e5:85:a1:04:07:64:15:db:
67:32:80:da:90:e5:c1:19:c5:ef:6f:79:1a:de:5c:
a2:eb:27:e4:7c:ef:5b:93:d7:08:6c:cd:87:7a:e0:
4b:34:6c:d4:c3:bc:1d:ee:dd:92:94:3a:a8:ee:28:
be:00:4d:ff:d0:bf:c7:df:8d:2d:39:7a:f2:27:dc:
e1:c8:46:29:8f:c7:f9:34:22:5d:be:51:d4:c0:96:
2d:5a:07:69:e5:67:b0:c0:86:d1:46:03:68:95:aa:
84:a4:04:da:80:33:3e:c3:e9:38:d9:ab:58:82:53:
13:b0:4b:d2:09:f2:dd:fa:7e:66:ed:14:46:a6:49:
08:c2:4f:1d:d2:60:fc:2f:b5:c5:ae:02:2e:1a:8b:
07:1f:e5:fd:9e:1f:67:3b:77:42:6f:53:97:57:18:
d2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CB:52:8E:8D:44:AE:8B:1B:6E:53:7C:1B:19:C2:73:03:BC:3C:F6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90bfc555-8d9a-45c8-8fa6-ac9cb9046bb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff9:5000::/40
Signature Algorithm: sha256WithRSAEncryption
8c:f8:09:c8:db:0f:1c:d5:91:43:3f:bd:d6:4e:48:7c:66:64:
39:85:1e:1c:1e:c7:d4:7d:7d:53:92:7a:cf:06:cd:bc:c1:70:
ee:c1:6d:98:20:ad:40:e2:41:b8:e7:28:ea:05:db:2e:db:5b:
19:d7:10:1c:e4:96:e2:f4:50:47:2f:97:d0:57:bb:51:4c:d7:
22:37:fe:a5:d0:1e:c7:af:a4:f8:a0:f3:a0:95:57:3f:3f:99:
e5:b0:24:51:53:21:9d:0a:39:3e:45:c2:bf:26:46:3f:3d:dd:
2e:2c:b8:38:35:ab:55:fe:e2:ef:d1:24:77:3b:54:d2:e8:8c:
fc:da:dc:f9:56:1c:0f:c6:10:7c:8b:8a:3e:7a:1f:f9:4b:38:
df:c7:ae:2b:0e:03:6a:0f:d2:25:1e:74:41:d1:ff:27:05:c0:
0c:88:06:66:e1:3c:1e:f2:ad:fd:1d:09:96:52:c3:3b:10:88:
a8:c8:53:7b:f3:91:a2:b1:82:13:52:13:9a:c2:fe:e0:c0:82:
ef:e1:47:a1:9c:c8:db:38:06:bb:9d:78:0b:4e:43:5a:b2:b6:
cc:18:69:3c:3f:cb:9d:48:d4:c2:1e:12:13:44:08:67:35:5a:
b2:09:43:6f:e8:1e:e3:fc:90:d0:be:7a:09:70:ba:a3:2d:41:
50:71:af:d3
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUEfes79gtJLbegZan0DGWUMsog2AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDAxMDAyMjQyWhcNMjUxMTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BiNWVlY2NiZmRiMWUzY2ZlMDYxNzA1YjhjNmIxMGYwMjI5
M2VmMGQyMzAyYzE5NGJmMDIzY2ZlN2RjNWIzZGMwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDWUk65gUXxV5Hr92tYJawwyxU4JCTcfqvSIN5FfsIWSvyW
v/7ahufQYW6SHT0Lx2TAJnx7RbSG/pWfBq2csCs/NtXzxtZUSmT44k7Qd5ZDLkRU
AEyGu1mLpd8tZ9tBEOzlhaEEB2QV22cygNqQ5cEZxe9veRreXKLrJ+R871uT1whs
zYd64Es0bNTDvB3u3ZKUOqjuKL4ATf/Qv8ffjS05evIn3OHIRimPx/k0Il2+UdTA
li1aB2nlZ7DAhtFGA2iVqoSkBNqAMz7D6TjZq1iCUxOwS9IJ8t36fmbtFEamSQjC
Tx3SYPwvtcWuAi4aiwcf5f2eH2c7d0JvU5dXGNLzAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUwMtSjo1ErosbblN8GxnCcwO8PPYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzkwYmZjNTU1LThkOWEtNDVjOC04ZmE2LWFjOWNiOTA0NmJiNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/5UDANBgkqhkiG9w0BAQsFAAOCAQEAjPgJyNsPHNWRQz+91k5IfGZk
OYUeHB7H1H19U5J6zwbNvMFw7sFtmCCtQOJBuOco6gXbLttbGdcQHOSW4vRQRy+X
0Fe7UUzXIjf+pdAex6+k+KDzoJVXPz+Z5bAkUVMhnQo5PkXCvyZGPz3dLiy4ODWr
Vf7i79EkdztU0uiM/Nrc+VYcD8YQfIuKPnof+Us438euKw4Dag/SJR50QdH/JwXA
DIgGZuE8HvKt/R0JllLDOxCIqMhTe/ORorGCE1ITmsL+4MCC7+FHoZzI2zgGu514
C05DWrK2zBhpPD/LnUjUwh4SE0QIZzVasglDb+ge4/yQ0L56CXC6oy1BUHGv0w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:07:06 2025 by rpki-client