Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/998b9d87-46d7-45d1-85e8-62d6d8298271.roa
File: 998b9d87-46d7-45d1-85e8-62d6d8298271.roa (raw, json)
Hash identifier: OI810RX+FjulV+pH6rV1f5T+yM4+dsrgjrea9E+ElwY=
Subject key identifier: C1:40:18:6B:17:5A:85:84:4A:CC:4E:E1:C0:3F:93:DF:4E:D5:85:30
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2D13157218A8ADE3AB440ED50F7AA911E20EF780
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/998b9d87-46d7-45d1-85e8-62d6d8298271.roa
Signing time: Tue 28 Oct 2025 00:10:51 +0000
ROA not before: Tue 28 Oct 2025 00:10:51 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1f32:2000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:13:15:72:18:a8:ad:e3:ab:44:0e:d5:0f:7a:a9:11:e2:0e:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 00:10:51 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=6221ba48623cd90a1f969cf2f438a1d9d6f2507d44c91775bf04883fab9d7f1a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7d:e6:fb:96:8c:a4:79:13:bd:4c:6c:20:41:
5d:c3:bc:91:07:f2:82:53:bc:23:a9:95:94:e0:b9:
95:98:df:b7:89:ab:cb:1c:a2:b6:ef:77:d6:0f:2b:
10:55:75:e7:1e:c8:85:e9:1d:eb:60:61:c0:51:c8:
1e:c3:79:60:e7:ef:af:82:1d:68:d3:b8:d8:19:3e:
0c:a9:e7:15:14:af:35:79:8a:89:bc:f1:88:85:7b:
52:0a:85:cc:3d:c9:ec:d3:91:6f:02:cd:06:ab:0d:
40:6a:77:aa:00:8f:cc:cd:9e:ea:da:56:fe:43:37:
33:42:5e:46:bc:40:7a:2a:b8:ac:14:6b:b9:dc:5d:
06:f3:16:81:b3:0b:7c:7e:9d:3c:19:f2:89:8d:0e:
22:8b:0a:2e:90:14:a3:b9:80:f9:ab:68:2e:59:ae:
ab:3b:c3:13:a8:c3:34:99:9f:48:f1:70:08:3f:1a:
03:4f:df:93:75:3f:4f:7f:ee:16:82:1d:3a:a9:5e:
78:f1:4a:a6:b6:d4:b0:8c:5e:c9:70:6b:b7:aa:f9:
53:4c:50:d4:87:be:2c:78:66:06:34:2a:e0:de:0a:
1d:d8:b0:35:b5:de:b9:0f:fa:21:6e:12:ad:c5:a8:
93:55:3f:84:00:04:e1:eb:9b:57:31:af:03:1a:b8:
a0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:40:18:6B:17:5A:85:84:4A:CC:4E:E1:C0:3F:93:DF:4E:D5:85:30
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/998b9d87-46d7-45d1-85e8-62d6d8298271.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f32:2000::/40
Signature Algorithm: sha256WithRSAEncryption
3d:70:c8:2a:07:84:e3:8b:3d:10:fc:e6:07:fb:ef:67:53:1b:
b4:14:ab:41:f6:d7:98:0a:37:7b:7a:01:af:88:92:7f:02:53:
72:0d:15:60:18:ad:2a:2c:55:8e:be:1d:81:8b:c9:25:23:95:
7a:c5:4d:17:37:5e:a1:cf:ca:83:e4:7e:ac:71:4f:9e:cd:46:
ac:b1:7a:7a:b8:01:e5:1c:81:e7:33:b0:41:6b:8d:92:56:00:
2d:9d:00:b6:1b:9a:aa:2b:bf:c6:86:0a:e9:df:77:a3:a9:65:
c5:6b:aa:d6:cc:a0:bf:71:96:c9:65:0e:16:e6:bc:7e:ae:07:
fc:bd:c8:94:bf:87:c0:60:3c:bb:68:4d:9a:6e:61:d4:00:5f:
5d:bc:c9:af:2f:61:39:cb:29:62:59:e8:db:85:e3:08:b5:71:
26:08:71:c8:38:d5:a8:03:af:fa:05:92:34:0a:ba:09:4b:74:
03:c2:2a:3d:f4:b3:f1:50:01:d2:52:31:52:2c:23:57:e3:56:
be:ed:33:7d:e9:63:05:65:c4:f1:ab:b4:92:65:d4:1e:88:12:
47:5e:70:9f:ca:3f:13:e5:0e:08:12:bc:0f:0a:63:f8:9b:96:
f7:e7:82:45:34:b9:b0:f2:2f:94:9f:ad:f5:48:39:56:35:68:
cf:1d:33:3d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:33:44 2025 by rpki-client