Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0153c78f-cd24-4d66-a9f3-dc2ae602530f.roa
File: 0153c78f-cd24-4d66-a9f3-dc2ae602530f.roa (raw, json)
Hash identifier: AU3/a1hnlT5oNYyMfKhEYvdKI8mw+E9PDXQxT0pXkpI=
Subject key identifier: F9:2C:1E:64:65:AD:83:6E:EE:99:88:05:0E:49:68:52:EB:E7:F4:64
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 31465ED7620E91EE2FE468D6D2AF9E06337AF3C3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0153c78f-cd24-4d66-a9f3-dc2ae602530f.roa
Signing time: Thu 02 Jan 2025 00:00:00 +0000
ROA not before: Thu 02 Jan 2025 00:00:00 +0000
ROA not after: Thu 06 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 23.238.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:46:5e:d7:62:0e:91:ee:2f:e4:68:d6:d2:af:9e:06:33:7a:f3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 2 00:00:00 2025 GMT
Not After : Feb 6 23:59:59 2025 GMT
Subject: serialNumber=1bb3ff36f6428a58f112f3adf5a640ce75676bd390379d27c595cce7bb1c144c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5a:64:de:7a:a7:0c:18:6f:63:01:cd:cb:f5:
fd:b1:cf:be:d6:3c:cc:49:c7:a7:7f:af:21:e7:21:
40:65:c6:5c:83:c1:21:91:8a:e1:e8:ba:7f:45:8f:
43:2c:22:d6:2f:e9:dc:56:81:fe:81:f0:65:8d:50:
39:79:52:4d:13:44:ac:96:75:36:1c:a1:8d:e7:c4:
af:00:9f:44:9a:d3:ff:db:60:e1:16:22:44:e3:b5:
c8:f1:f4:07:96:bd:73:18:95:f5:0b:69:b6:9d:cd:
fe:7c:0f:cb:7b:95:e6:2b:53:d5:f7:75:18:2f:04:
73:45:f0:56:f2:3c:bc:d9:64:e9:1d:83:b2:9a:5b:
c5:0c:16:98:85:2d:46:6e:2b:63:d3:07:ef:86:6a:
df:80:ae:f9:29:bb:60:4a:29:f6:b1:32:9e:ec:02:
42:0f:ff:e1:fd:d4:00:f4:ca:87:71:f9:a3:b8:e9:
1c:ef:6e:47:a2:77:3b:92:c2:5f:9d:21:e8:22:4b:
46:be:f4:23:f1:a7:a2:85:07:1a:82:eb:31:0a:5e:
88:7b:84:81:2d:db:3d:0f:f3:30:d7:46:90:21:76:
98:19:4b:fc:94:9a:b0:1c:99:dc:cb:d8:3e:6c:33:
87:3d:32:86:da:13:de:6d:1a:5d:7f:6a:af:61:8d:
ba:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2C:1E:64:65:AD:83:6E:EE:99:88:05:0E:49:68:52:EB:E7:F4:64
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0153c78f-cd24-4d66-a9f3-dc2ae602530f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.238.128.0/17
Signature Algorithm: sha256WithRSAEncryption
b5:bd:63:15:ec:3d:22:7a:a7:eb:ab:70:85:7f:55:a8:a4:55:
7c:4a:d0:5a:08:56:a9:c7:4c:b0:fb:44:5d:94:1c:11:21:42:
d9:c8:1a:42:2f:dc:80:fc:8b:a8:dc:22:e0:6e:0c:e4:6b:65:
92:53:da:64:ee:8c:20:a1:26:db:e8:37:df:fc:2e:ef:76:25:
f0:22:32:48:37:21:1d:64:d5:4e:45:eb:d9:f1:94:22:18:27:
d9:b3:9b:92:d5:f6:ae:21:d3:a5:d2:cc:d2:0f:a2:84:5f:ea:
fe:52:8f:40:dc:d2:cd:12:89:31:7f:18:fc:d1:5a:5f:f8:57:
94:52:9e:e2:7e:78:85:5d:34:7a:93:c3:07:fe:5e:02:d5:9f:
b8:81:ee:e8:34:28:d3:e5:e5:c5:20:50:73:d9:0a:b4:90:7f:
60:21:33:b5:05:92:df:56:0b:16:69:9f:73:e7:a3:89:35:90:
e4:5e:b1:36:cd:0c:00:1d:ea:ba:f5:3b:c2:68:87:a7:96:05:
cb:cd:73:b9:a0:c3:f1:fb:6c:00:4e:0b:e2:c9:c2:7e:75:b6:
52:d1:60:98:c3:88:ab:28:1b:91:af:64:eb:dc:8e:22:e1:b5:
69:9d:a5:5c:13:a1:5b:ee:4f:4e:11:af:82:e3:8a:b8:aa:3a:
54:8c:f2:69
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUMUZe12IOke4v5GjW0q+eBjN688MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTAyMDAwMDAwWhcNMjUwMjA2MjM1OTU5
WjB6MUkwRwYDVQQFE0AxYmIzZmYzNmY2NDI4YTU4ZjExMmYzYWRmNWE2NDBjZTc1
Njc2YmQzOTAzNzlkMjdjNTk1Y2NlN2JiMWMxNDRjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC0WmTeeqcMGG9jAc3L9f2xz77WPMxJx6d/ryHnIUBlxlyD
wSGRiuHoun9Fj0MsItYv6dxWgf6B8GWNUDl5Uk0TRKyWdTYcoY3nxK8An0Sa0//b
YOEWIkTjtcjx9AeWvXMYlfULabadzf58D8t7leYrU9X3dRgvBHNF8FbyPLzZZOkd
g7KaW8UMFpiFLUZuK2PTB++Gat+Arvkpu2BKKfaxMp7sAkIP/+H91AD0yodx+aO4
6RzvbkeidzuSwl+dIegiS0a+9CPxp6KFBxqC6zEKXoh7hIEt2z0P8zDXRpAhdpgZ
S/yUmrAcmdzL2D5sM4c9MobaE95tGl1/aq9hjbppAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU+SweZGWtg27umYgFDkloUuvn9GQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzAxNTNjNzhmLWNkMjQtNGQ2Ni1hOWYzLWRjMmFlNjAyNTMwZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAcX7oAwDQYJKoZIhvcNAQELBQADggEBALW9YxXsPSJ6p+urcIV/VaikVXxK
0FoIVqnHTLD7RF2UHBEhQtnIGkIv3ID8i6jcIuBuDORrZZJT2mTujCChJtvoN9/8
Lu92JfAiMkg3IR1k1U5F69nxlCIYJ9mzm5LV9q4h06XSzNIPooRf6v5Sj0Dc0s0S
iTF/GPzRWl/4V5RSnuJ+eIVdNHqTwwf+XgLVn7iB7ug0KNPl5cUgUHPZCrSQf2Ah
M7UFkt9WCxZpn3Pno4k1kOResTbNDAAd6rr1O8Joh6eWBcvNc7mgw/H7bABOC+LJ
wn51tlLRYJjDiKsoG5GvZOvcjiLhtWmdpVwToVvuT04Rr4LjiriqOlSM8mk=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:07:09 2025 by rpki-client