Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dffe7c41-91f1-4ad3-a375-4c43d7b3ade4.roa
File: dffe7c41-91f1-4ad3-a375-4c43d7b3ade4.roa (raw, json)
Hash identifier: AOF//atxnEEWq//gBy1QgxuvbmIJ/pGoAWY2cCwSiQI=
Subject key identifier: C5:56:ED:67:CF:8A:1D:24:1B:ED:E5:80:60:26:7A:33:FB:D0:76:42
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 13A71FDCE123D5605666D538FF7FDB930CC9423E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dffe7c41-91f1-4ad3-a375-4c43d7b3ade4.roa
Signing time: Wed 01 Oct 2025 00:22:40 +0000
ROA not before: Wed 01 Oct 2025 00:22:40 +0000
ROA not after: Wed 05 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fa0:a400::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:a7:1f:dc:e1:23:d5:60:56:66:d5:38:ff:7f:db:93:0c:c9:42:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 1 00:22:40 2025 GMT
Not After : Nov 5 23:59:59 2025 GMT
Subject: serialNumber=87818cb030deefb4d74ae9236e82fad224d9cff199e4491d8f5f66980be2567e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2c:22:35:e7:fe:3a:ab:b9:2c:83:95:39:61:
d4:85:f0:28:b3:0e:e8:b2:41:13:91:a1:c0:c4:5c:
1d:56:43:ff:2a:cf:1e:65:1e:17:9d:51:1d:c1:e5:
7e:01:b2:94:a9:de:ac:71:51:93:b7:37:fb:b2:84:
86:32:ea:6d:4a:a4:75:d1:a8:14:af:42:cd:89:2e:
ae:6b:93:95:07:93:0c:8a:07:52:47:c6:ca:50:11:
52:6d:0b:1d:e1:90:b9:fd:9b:bc:fa:8e:83:71:c7:
10:53:3b:38:20:d3:82:6f:a7:dc:64:fc:e2:69:ff:
d7:29:33:2b:64:26:db:cc:d1:f9:d0:10:a0:c9:7e:
65:c9:e0:5c:d7:82:4b:45:2f:31:c1:ce:cc:7c:28:
6c:db:59:d5:3c:bd:cb:0f:4c:45:8b:6a:35:4c:57:
03:99:83:f2:73:4f:c1:57:2a:68:71:d2:36:f4:d3:
b2:8c:d8:8d:69:af:db:30:7b:32:b9:7e:79:d2:38:
82:6e:22:64:31:61:11:4e:60:0c:ea:f6:2d:32:8d:
84:af:d0:81:65:32:87:6a:57:3b:db:6f:b5:43:30:
5e:49:30:87:26:ec:b4:89:20:60:c0:46:cd:7f:2b:
13:9d:23:79:75:a1:4e:cd:cb:68:25:f5:f5:dd:8c:
a1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:56:ED:67:CF:8A:1D:24:1B:ED:E5:80:60:26:7A:33:FB:D0:76:42
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dffe7c41-91f1-4ad3-a375-4c43d7b3ade4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fa0:a400::/40
Signature Algorithm: sha256WithRSAEncryption
32:b6:92:9f:8e:57:4b:f0:28:86:df:f6:22:e2:89:76:b1:19:
aa:72:19:a6:53:d5:b1:73:98:6c:e8:b1:47:6a:a6:af:ea:47:
07:b2:df:04:88:bf:06:4c:79:1a:ae:34:50:1e:a1:6f:40:a0:
5e:b6:9e:8c:7b:c8:c8:72:6e:9e:41:4a:bf:bb:94:27:1b:9b:
68:06:b7:66:84:9c:51:96:0b:3b:bb:85:a3:5f:ef:ec:11:15:
65:58:70:b4:7a:91:45:3e:2e:b9:2e:40:6f:6c:af:42:10:13:
78:a5:37:47:a0:ac:77:1b:2c:e3:80:f3:36:b9:93:63:7f:2e:
e4:c7:bb:ab:dd:1a:28:21:f1:ea:ae:0a:6b:af:60:0c:6e:9f:
22:d8:6d:92:55:32:d2:e4:40:1e:0d:55:17:35:d6:23:8b:4d:
02:59:ed:af:a8:97:54:0b:ae:ac:94:1f:88:1a:67:e1:e7:d1:
3c:b7:4f:95:11:18:b8:60:31:88:c3:cb:75:0c:f3:d8:20:c4:
18:24:7b:02:91:77:1b:3f:63:c6:22:08:21:c6:34:32:30:a2:
df:f8:87:6c:4a:02:c6:38:df:50:91:a5:7b:c1:40:0a:72:b4:
09:1a:75:10:b7:54:a5:e6:dc:73:c7:20:19:3d:e1:4c:9a:b4:
9e:b9:bb:7b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Oct 17 04:43:50 2025 by rpki-client