Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/127edd33-0816-4361-b99f-aa85f80b4eba.roa
File: 127edd33-0816-4361-b99f-aa85f80b4eba.roa (raw, json)
Hash identifier: o1Y7DZRXDr8ZY+XgughLFcWo+uHdfoVv4+luHLAAd7c=
Subject key identifier: 4B:B6:44:7A:4E:D6:4E:CC:DE:59:BF:04:C8:F8:D8:E0:CE:DC:A0:F7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1EAA5A1C1869E7EBA7BD0795786F356C7B01C64F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/127edd33-0816-4361-b99f-aa85f80b4eba.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 76.205.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:aa:5a:1c:18:69:e7:eb:a7:bd:07:95:78:6f:35:6c:7b:01:c6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=6900f46e8e940e377dea7918ed6414a10e02c37370faee24dc817326c48a392c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8f:ea:27:49:5f:8a:f8:75:f9:e5:4a:d3:bf:
a4:ee:62:73:0a:c9:e7:9f:ae:d2:3f:d4:29:18:d3:
ef:10:7a:3d:f8:52:01:a5:6d:50:cb:1f:47:09:4e:
ee:1e:4e:2b:97:e1:a8:d0:5e:4e:c8:31:a9:bd:d2:
dc:ae:41:0a:65:58:a1:41:d4:8d:fd:3e:42:fb:c9:
d1:1a:3a:03:00:04:02:88:bd:e4:03:5e:74:0d:5e:
e8:45:5c:85:3a:03:5a:88:8e:56:da:5c:51:89:79:
a8:63:f7:b2:80:e9:44:f9:7f:79:51:86:85:78:4b:
45:9a:e9:c2:85:75:7a:48:b3:f7:68:dc:fe:40:52:
04:c6:52:0a:3d:b2:8f:4e:82:ea:6e:f7:13:fd:1c:
02:af:ca:eb:8b:ff:14:53:f9:af:c7:5f:50:62:55:
61:ab:2b:1f:13:b1:72:61:67:d1:02:34:2f:33:f7:
2d:2b:5c:25:08:ef:90:7d:22:11:f3:af:57:e6:19:
c6:41:31:8c:34:51:cc:4d:ec:81:7f:4a:90:73:80:
55:84:b2:ef:78:b4:f0:1b:2b:b0:8f:bd:76:7f:79:
f2:b7:98:26:4a:5b:c5:9e:e4:f3:b7:86:a4:a2:fe:
e8:c9:50:f3:e8:37:81:65:c6:25:a3:50:3e:eb:15:
c6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B6:44:7A:4E:D6:4E:CC:DE:59:BF:04:C8:F8:D8:E0:CE:DC:A0:F7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/127edd33-0816-4361-b99f-aa85f80b4eba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.205.64.0/18
Signature Algorithm: sha256WithRSAEncryption
21:0a:5b:9a:f9:1e:ea:d4:95:37:8a:06:e2:18:8c:f9:bc:d8:
06:cd:67:c3:74:f4:86:64:c4:5f:c0:be:79:41:8b:b0:2e:a9:
48:88:1b:64:42:54:53:5e:f6:de:85:7b:f0:12:86:a1:76:ec:
fd:22:eb:3b:b4:0d:59:d5:c8:35:c7:0a:38:97:68:71:40:61:
75:ee:99:2b:a7:a0:06:09:2a:60:52:16:ff:ff:78:1f:d8:0e:
7c:78:28:8f:ae:a1:fe:04:c3:3d:6e:02:1c:23:74:56:a0:ce:
6f:8e:c5:7b:de:06:3f:db:43:ff:d1:60:c7:2b:32:f4:86:39:
c9:9a:12:b0:a9:7a:f1:52:36:94:ab:fe:10:8c:2a:a3:64:01:
a5:63:ce:72:7d:0f:f1:8d:0e:e9:38:6e:61:46:cf:a6:74:ee:
ef:45:de:81:1c:70:18:7f:29:c0:2a:47:64:2b:f4:d7:67:af:
76:07:22:72:c8:77:39:06:9b:31:38:a3:ac:ed:ec:b7:48:f5:
75:ad:45:24:15:e8:95:7f:a2:98:46:b4:fa:86:2f:87:4d:b2:
9b:e0:07:ed:0e:40:fb:2e:0d:d6:1d:5b:89:4b:0b:48:35:ea:
db:ac:a2:69:15:21:d8:99:e0:b9:e9:14:59:3c:8b:a9:f9:10:
69:8e:7c:08
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHqpaHBhp5+unvQeVeG81bHsBxk8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjI3MDAwMDAwWhcNMjUwMTMxMjM1OTU5
WjB6MUkwRwYDVQQFE0A2OTAwZjQ2ZThlOTQwZTM3N2RlYTc5MThlZDY0MTRhMTBl
MDJjMzczNzBmYWVlMjRkYzgxNzMyNmM0OGEzOTJjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDjj+onSV+K+HX55UrTv6TuYnMKyeefrtI/1CkY0+8Qej34
UgGlbVDLH0cJTu4eTiuX4ajQXk7IMam90tyuQQplWKFB1I39PkL7ydEaOgMABAKI
veQDXnQNXuhFXIU6A1qIjlbaXFGJeahj97KA6UT5f3lRhoV4S0Wa6cKFdXpIs/do
3P5AUgTGUgo9so9Ogupu9xP9HAKvyuuL/xRT+a/HX1BiVWGrKx8TsXJhZ9ECNC8z
9y0rXCUI75B9IhHzr1fmGcZBMYw0UcxN7IF/SpBzgFWEsu94tPAbK7CPvXZ/efK3
mCZKW8We5PO3hqSi/ujJUPPoN4FlxiWjUD7rFcazAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUS7ZEek7WTszeWb8EyPjY4M7coPcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzEyN2VkZDMzLTA4MTYtNDM2MS1iOTlmLWFhODVmODBiNGViYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZMzUAwDQYJKoZIhvcNAQELBQADggEBACEKW5r5HurUlTeKBuIYjPm82AbN
Z8N09IZkxF/AvnlBi7AuqUiIG2RCVFNe9t6Fe/AShqF27P0i6zu0DVnVyDXHCjiX
aHFAYXXumSunoAYJKmBSFv//eB/YDnx4KI+uof4Ewz1uAhwjdFagzm+OxXveBj/b
Q//RYMcrMvSGOcmaErCpevFSNpSr/hCMKqNkAaVjznJ9D/GNDuk4bmFGz6Z07u9F
3oEccBh/KcAqR2Qr9Ndnr3YHInLIdzkGmzE4o6zt7LdI9XWtRSQV6JV/ophGtPqG
L4dNspvgB+0OQPsuDdYdW4lLC0g16tusomkVIdiZ4LnpFFk8i6n5EGmOfAg=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:35 2025 by rpki-client