Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db1da63c-2a68-4ace-b196-5ef2574e6754.roa
File: db1da63c-2a68-4ace-b196-5ef2574e6754.roa (raw, json)
Hash identifier: LnyN5XU2jZH4T5Ajq0w0l831gyXKy8N6Mw4K9M/exGA=
Subject key identifier: A8:93:83:00:1E:2B:B0:28:06:AA:6E:60:2C:21:B0:A6:40:CE:A3:4A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 33E8B38C4CD7DABBCDDAE9C592AADD8EAFE49AD8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db1da63c-2a68-4ace-b196-5ef2574e6754.roa
Signing time: Fri 17 Oct 2025 21:05:35 +0000
ROA not before: Fri 17 Oct 2025 21:05:35 +0000
ROA not after: Fri 21 Nov 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1f00:5000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:e8:b3:8c:4c:d7:da:bb:cd:da:e9:c5:92:aa:dd:8e:af:e4:9a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 17 21:05:35 2025 GMT
Not After : Nov 21 23:59:59 2025 GMT
Subject: serialNumber=70c085a309fde47a0397f9c1145068d90b5ae4d3f958ad8295acdf584ae68384, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f0:7f:5a:0b:ad:58:b3:77:86:bc:a1:84:92:
81:db:96:6a:ee:b3:51:dc:e5:24:6f:14:21:5f:d3:
92:1d:00:52:01:a8:8e:7e:37:72:0f:50:df:88:31:
99:7f:95:24:fd:54:aa:5d:c6:b3:f2:12:05:d3:67:
45:18:04:e7:cc:17:42:23:e6:15:f6:03:92:9c:4c:
d2:ec:b7:61:0b:14:b3:cf:82:39:a8:ea:9d:65:ef:
64:0f:93:83:5e:4b:7f:2e:e1:17:9f:49:05:be:7f:
8a:f1:b8:6c:f6:57:47:dc:8b:aa:0a:f5:cd:58:79:
40:c6:6d:85:3a:f2:75:85:df:49:2f:f7:46:67:b9:
60:61:7b:23:66:3e:cd:2a:ac:57:e6:67:01:bd:4a:
9c:b0:86:a3:37:38:90:cf:c4:75:b3:54:e8:7e:a7:
b9:1e:63:cf:9d:ce:de:61:1b:53:ff:fb:c2:08:98:
af:68:d7:a7:06:8d:bc:5f:a5:a1:01:f0:8a:93:50:
38:d6:4b:fd:3b:7b:9b:ed:4e:ff:c4:b9:0a:00:53:
32:6d:17:1f:4d:f0:55:33:fc:22:de:c9:30:3c:f4:
a3:c6:56:c4:df:ee:bc:d1:bb:a1:ea:05:62:cf:1b:
7b:3c:47:15:5c:bc:f0:b2:ee:87:0a:21:c9:67:91:
5d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:93:83:00:1E:2B:B0:28:06:AA:6E:60:2C:21:B0:A6:40:CE:A3:4A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db1da63c-2a68-4ace-b196-5ef2574e6754.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f00:5000::/40
Signature Algorithm: sha256WithRSAEncryption
a1:14:fe:04:a7:a0:0a:e4:73:18:5a:8b:29:95:4e:7c:d7:bd:
87:90:33:74:9a:07:1f:d4:67:96:82:52:8b:75:36:b3:eb:5e:
b8:05:79:cf:1c:62:f9:46:4a:0f:2b:36:bd:45:69:7e:fe:ac:
b8:b6:8f:70:33:31:80:89:ec:2a:de:99:d5:ff:cd:33:77:8a:
ab:38:e0:01:c1:c0:6e:fb:d6:99:25:ac:a1:85:2d:2c:9a:18:
77:b4:6c:c6:f5:07:38:7c:84:44:f2:91:a7:b6:c8:95:05:d9:
99:d5:a5:97:cd:c1:6c:78:12:e6:62:5d:dd:ce:51:3a:90:fe:
f5:c9:73:d1:07:6a:13:44:3c:ea:47:c9:10:d1:c2:dd:f8:ab:
82:b8:60:c9:12:a0:f2:a7:7b:30:f3:a4:3e:62:37:65:a3:5d:
b1:c8:01:08:54:04:e4:65:bf:ee:aa:e8:c9:14:42:34:27:6c:
78:aa:02:18:d2:c1:4c:3c:01:63:7b:ff:9d:6d:2c:46:41:9a:
5b:2a:52:59:56:ce:47:67:1f:4f:de:af:18:81:f2:af:4b:49:
f5:42:bb:b6:d5:03:fd:37:12:94:c7:a1:85:53:1e:6d:da:89:
f9:2a:8e:f1:28:45:8c:d7:b8:8c:e9:cb:c5:50:15:00:b0:b2:
2c:1d:0b:ca
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Oct 18 12:13:24 2025 by rpki-client