Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0beb7c91-35ba-498d-ba16-724f6910eda0.roa
File: 0beb7c91-35ba-498d-ba16-724f6910eda0.roa (raw, json)
Hash identifier: OTiogav0OiwuRg4NgHkKrotA7/CkkNGkBB4z0FVsXt4=
Subject key identifier: E5:CC:EB:8B:CD:8A:4D:7E:B3:65:D0:BD:4B:2A:F4:0C:08:7F:06:F6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6B8859E99CFF649AE6A27B84252A7D7139621621
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0beb7c91-35ba-498d-ba16-724f6910eda0.roa
Signing time: Tue 14 Oct 2025 15:11:19 +0000
ROA not before: Tue 14 Oct 2025 15:11:19 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:88:59:e9:9c:ff:64:9a:e6:a2:7b:84:25:2a:7d:71:39:62:16:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 15:11:19 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=93bed71a468a731bef3f5b392dfcb9d6ec8f130ce43fccf35efe5a8476ea51a6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dd:e3:39:39:a2:bf:f4:d9:97:37:6f:92:3c:
54:27:1c:f6:32:4a:42:6c:d7:47:05:4d:0b:a9:e5:
90:f2:e9:3c:ca:68:8d:42:ab:7b:b3:db:e7:d0:e2:
0c:b5:cb:24:5f:2e:76:70:33:c4:e3:f5:54:e3:98:
b3:fc:16:03:3f:a2:57:7b:cd:2d:8c:4c:17:d2:99:
81:ab:e1:71:88:68:77:7a:99:2d:2c:40:59:24:60:
2c:37:7a:e4:8e:76:de:c3:fa:45:7a:9a:2d:70:00:
90:34:94:a2:2e:9e:03:da:02:1b:38:86:ff:01:41:
f2:b7:d1:9d:4f:30:c4:0e:a4:fd:f0:06:ee:b4:6e:
78:fc:9c:a4:78:f8:69:1c:7a:ec:0b:c2:dc:b2:44:
c7:39:d9:c1:0e:e2:3b:b5:77:18:6c:5d:b0:c3:fb:
ef:36:fb:44:d6:78:0a:b6:25:5b:88:1d:26:8d:28:
5a:b2:0b:5f:29:30:eb:83:76:ea:a0:38:b0:73:62:
9d:85:48:25:53:82:1c:24:e6:bf:f6:4d:80:5d:de:
75:b9:ce:1c:2b:0e:eb:f5:f4:e0:94:35:7b:d2:2f:
d8:41:d3:6c:fb:f3:76:19:16:71:8b:71:95:68:46:
3e:16:ab:9d:0c:6b:86:a3:e6:0f:b3:1c:4b:74:59:
9f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CC:EB:8B:CD:8A:4D:7E:B3:65:D0:BD:4B:2A:F4:0C:08:7F:06:F6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0beb7c91-35ba-498d-ba16-724f6910eda0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.65.0/24
Signature Algorithm: sha256WithRSAEncryption
09:09:f3:06:95:c1:37:0c:fa:e7:0e:a0:69:1f:02:9f:d0:4b:
6d:fe:25:32:0f:37:78:a6:47:47:e0:09:5e:61:9f:7d:3b:f1:
cf:60:4b:82:10:b4:f3:e6:f4:47:de:a5:78:1f:2a:fb:c3:8a:
88:d2:f2:51:3b:3f:b9:a8:fe:17:70:c0:85:ea:90:37:98:e3:
d6:f4:c1:86:a9:f3:6b:65:1e:42:2e:80:51:a0:d3:a9:8e:b5:
04:54:dd:61:82:90:ff:fb:15:7e:80:46:f8:2f:d8:5c:dd:8c:
08:20:28:86:50:fa:05:64:ed:52:4e:b1:9e:8a:14:c7:ea:c8:
74:71:92:45:ca:33:67:8f:a7:b6:52:33:da:00:78:e0:0d:5c:
c9:99:7e:3d:90:3f:63:85:55:65:70:97:3e:a7:b6:d6:67:73:
5d:cc:8c:0c:4f:91:2c:8b:ab:fe:b8:77:93:e9:31:b0:ed:ff:
e7:77:91:70:d2:53:17:aa:0b:94:12:b3:04:5e:8d:97:2e:46:
05:93:34:05:fc:3e:7e:6c:15:22:8d:3e:c5:04:69:13:80:43:
3d:ce:a9:6e:b4:a7:6d:59:ab:ed:03:c7:33:03:ad:0e:7e:96:
62:c0:86:4c:2e:ae:04:de:8a:ab:15:40:89:77:e6:04:2b:ca:
a4:97:d5:9a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUa4hZ6Zz/ZJrmonuEJSp9cTliFiEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MTUxMTE5WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A5M2JlZDcxYTQ2OGE3MzFiZWYzZjViMzkyZGZjYjlkNmVj
OGYxMzBjZTQzZmNjZjM1ZWZlNWE4NDc2ZWE1MWE2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDD3eM5OaK/9NmXN2+SPFQnHPYySkJs10cFTQup5ZDy6TzK
aI1Cq3uz2+fQ4gy1yyRfLnZwM8Tj9VTjmLP8FgM/old7zS2MTBfSmYGr4XGIaHd6
mS0sQFkkYCw3euSOdt7D+kV6mi1wAJA0lKIungPaAhs4hv8BQfK30Z1PMMQOpP3w
Bu60bnj8nKR4+GkceuwLwtyyRMc52cEO4ju1dxhsXbDD++82+0TWeAq2JVuIHSaN
KFqyC18pMOuDduqgOLBzYp2FSCVTghwk5r/2TYBd3nW5zhwrDuv19OCUNXvSL9hB
02z783YZFnGLcZVoRj4Wq50Ma4aj5g+zHEt0WZ8/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU5czri82KTX6zZdC9Syr0DAh/BvYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzBiZWI3YzkxLTM1YmEtNDk4ZC1iYTE2LTcyNGY2OTEwZWRhMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsEEwDQYJKoZIhvcNAQELBQADggEBAAkJ8waVwTcM+ucOoGkfAp/QS23+
JTIPN3imR0fgCV5hn3078c9gS4IQtPPm9EfepXgfKvvDiojS8lE7P7mo/hdwwIXq
kDeY49b0wYap82tlHkIugFGg06mOtQRU3WGCkP/7FX6ARvgv2FzdjAggKIZQ+gVk
7VJOsZ6KFMfqyHRxkkXKM2ePp7ZSM9oAeOANXMmZfj2QP2OFVWVwlz6nttZnc13M
jAxPkSyLq/64d5PpMbDt/+d3kXDSUxeqC5QSswRejZcuRgWTNAX8Pn5sFSKNPsUE
aROAQz3OqW60p21Zq+0DxzMDrQ5+lmLAhkwurgTeiqsVQIl35gQryqSX1Zo=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:21 2025 by rpki-client