Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e50ae51-844b-4fef-ac38-097c0b15f625.roa
File: 0e50ae51-844b-4fef-ac38-097c0b15f625.roa (raw, json)
Hash identifier: rVEu5Fv3vkxuLKZBJ+JAs8uv1aqz57zlY0O+ih6G4dg=
Subject key identifier: 6C:4F:92:31:B7:A2:0B:A6:7E:FE:5F:B4:33:1A:DD:32:A0:D4:54:6A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 61578BDDCCF44FBD422C4BD84E5B75A6D67EEF50
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e50ae51-844b-4fef-ac38-097c0b15f625.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 54.33.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:57:8b:dd:cc:f4:4f:bd:42:2c:4b:d8:4e:5b:75:a6:d6:7e:ef:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: serialNumber=007eb7e305df4160b0061de54fb78a8ddde84b3306f6695378b31af19d7c2aea, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:db:b5:b7:b9:0e:53:1a:ad:89:ad:0d:df:02:
00:9f:51:04:38:70:d0:ad:1b:69:3a:30:7e:b7:70:
6e:87:e6:f0:88:99:48:9f:fc:03:19:41:b1:0f:48:
ec:5a:5c:c6:5d:37:8d:64:34:c6:81:f0:23:61:45:
74:01:80:a0:2d:f9:c1:1f:7e:39:7a:3e:48:80:b9:
f2:39:bf:8a:87:56:02:ea:96:56:a7:6e:eb:2f:2e:
48:f0:84:a3:e9:99:ce:9e:e2:62:85:ff:2b:1f:f3:
72:03:80:21:af:24:a0:bb:f7:7f:6c:a8:9a:12:4b:
c3:0e:9f:7a:c8:f3:05:de:12:a1:55:b4:4b:ab:70:
ee:e7:9a:ee:be:8a:cb:d4:04:c4:af:dd:c1:c3:e8:
e1:20:95:a7:e6:80:13:53:53:d3:16:64:d4:4b:97:
23:76:16:8b:30:6e:1f:c7:a1:6e:a1:2e:c0:db:9b:
7f:5b:b5:04:26:f2:59:3d:0d:7a:23:d9:19:00:b1:
b6:b2:91:2b:af:92:19:ca:a6:58:cc:68:8c:16:8e:
a7:b3:d7:bf:97:a0:d9:7b:73:b9:e9:13:34:65:d2:
e0:ad:0f:57:c8:b4:7b:ea:f5:7f:ed:2c:7d:59:b4:
9b:94:9e:49:c0:d7:05:b1:53:a9:75:36:fc:5b:69:
17:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4F:92:31:B7:A2:0B:A6:7E:FE:5F:B4:33:1A:DD:32:A0:D4:54:6A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e50ae51-844b-4fef-ac38-097c0b15f625.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.33.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6d:67:17:80:4e:ad:cd:e7:3d:b3:2d:b7:d7:d3:47:3c:3e:cf:
0e:7a:4e:e2:23:e3:bf:ce:43:e6:78:96:39:f2:2c:19:0f:fc:
fc:fc:bb:62:7c:c3:1b:98:1f:54:d2:9e:6f:b5:5e:e8:fe:9f:
c2:da:fb:c5:92:b1:22:05:dc:b5:f2:64:14:14:16:74:ea:3a:
a5:36:d0:57:41:5a:6a:5d:9a:a2:70:01:5d:cd:20:3e:15:64:
a7:b0:11:2c:21:54:c8:74:a3:1b:eb:64:c0:9c:ba:9d:0c:55:
0c:ee:59:27:97:7c:4d:fe:c9:d2:52:a4:37:ad:27:80:26:43:
dd:3d:88:0c:ab:13:91:76:50:dd:e0:45:58:01:f6:11:49:a9:
78:8b:3b:9c:37:52:67:3b:a5:0f:88:28:59:db:00:e3:34:74:
07:86:0d:9a:a4:2a:eb:fd:52:a4:14:0d:48:4d:ce:94:3c:36:
f7:49:b2:7d:d8:5f:51:c7:b7:e4:ab:7f:62:bb:32:b2:2c:75:
55:ea:3a:48:8b:14:19:3d:44:a9:26:47:ac:3d:86:83:1f:35:
97:a4:f0:86:5c:29:0c:d8:62:00:06:09:00:2e:7d:83:24:c9:
71:32:4f:f6:f0:70:4e:68:cf:35:60:d2:9a:fe:32:aa:fd:5d:
87:18:de:41
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUYVeL3cz0T71CLEvYTlt1ptZ+71AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjMwMDAwMDAwWhcNMjUwMjAzMjM1OTU5
WjB6MUkwRwYDVQQFE0AwMDdlYjdlMzA1ZGY0MTYwYjAwNjFkZTU0ZmI3OGE4ZGRk
ZTg0YjMzMDZmNjY5NTM3OGIzMWFmMTlkN2MyYWVhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJ27W3uQ5TGq2JrQ3fAgCfUQQ4cNCtG2k6MH63cG6H5vCI
mUif/AMZQbEPSOxaXMZdN41kNMaB8CNhRXQBgKAt+cEffjl6PkiAufI5v4qHVgLq
llanbusvLkjwhKPpmc6e4mKF/ysf83IDgCGvJKC7939sqJoSS8MOn3rI8wXeEqFV
tEurcO7nmu6+isvUBMSv3cHD6OEglafmgBNTU9MWZNRLlyN2Foswbh/HoW6hLsDb
m39btQQm8lk9DXoj2RkAsbaykSuvkhnKpljMaIwWjqez17+XoNl7c7npEzRl0uCt
D1fItHvq9X/tLH1ZtJuUnknA1wWxU6l1NvxbaRcjAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUbE+SMbeiC6Z+/l+0MxrdMqDUVGowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzBlNTBhZTUxLTg0NGItNGZlZi1hYzM4LTA5N2MwYjE1ZjYyNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA2ITANBgkqhkiG9w0BAQsFAAOCAQEAbWcXgE6tzec9sy2319NHPD7PDnpO
4iPjv85D5niWOfIsGQ/8/Py7YnzDG5gfVNKeb7Ve6P6fwtr7xZKxIgXctfJkFBQW
dOo6pTbQV0Faal2aonABXc0gPhVkp7ARLCFUyHSjG+tkwJy6nQxVDO5ZJ5d8Tf7J
0lKkN60ngCZD3T2IDKsTkXZQ3eBFWAH2EUmpeIs7nDdSZzulD4goWdsA4zR0B4YN
mqQq6/1SpBQNSE3OlDw290myfdhfUce35Kt/Yrsysix1Veo6SIsUGT1EqSZHrD2G
gx81l6TwhlwpDNhiAAYJAC59gyTJcTJP9vBwTmjPNWDSmv4yqv1dhxjeQQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:30:53 2025 by rpki-client