Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/229bf8e5-12f8-4b1b-82dc-1aeae916fdbe.roa
File: 229bf8e5-12f8-4b1b-82dc-1aeae916fdbe.roa (raw, json)
Hash identifier: EIaOfi7NCM42MCYU6kFGNPQ/oyMnK1t+WMONTwO9+4c=
Subject key identifier: 79:9C:6F:30:C0:39:AE:2E:B2:52:9D:FB:9B:4D:49:FD:BF:61:58:91
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 32ED1AAFAC213D7A7EC2695B1B1EEBDD2063833A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/229bf8e5-12f8-4b1b-82dc-1aeae916fdbe.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f1a:4000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:ed:1a:af:ac:21:3d:7a:7e:c2:69:5b:1b:1e:eb:dd:20:63:83:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: serialNumber=61b23a02131ce51edd779b176574fc14d40b0dbf926e244ecdb211edb221f233, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3c:c3:83:cc:36:c7:b3:18:69:57:5f:34:50:
b1:80:03:0e:83:1b:a2:cb:84:f9:42:59:81:d1:a8:
1f:91:42:8b:cc:6a:1e:2d:18:ed:a9:8e:b1:37:cd:
77:93:50:95:03:ce:65:f3:08:50:00:3f:3e:55:e7:
46:c1:42:07:3a:25:f0:54:1a:b7:7e:9e:19:e0:e2:
63:ef:82:16:cc:09:84:72:7f:cc:f2:88:21:b6:e9:
59:37:c9:a6:d5:ea:c7:e8:c0:6a:83:3b:e3:54:a4:
96:76:85:98:44:78:ba:44:6f:ed:79:ff:85:25:c8:
e3:45:7b:d1:4b:83:91:13:98:38:a4:5f:6c:cf:7b:
ca:bb:a5:8c:20:6e:31:35:55:db:30:99:00:15:82:
3b:8f:a8:7d:b9:cf:c8:3f:1f:dc:62:59:a1:77:b1:
74:cb:4a:72:40:a5:14:a4:39:cf:ba:b9:32:f0:c3:
d6:99:fb:87:6a:2f:3a:40:b1:9a:38:91:51:e3:38:
c6:fd:ef:9b:1b:1f:3f:ad:16:a3:e6:cd:d3:82:24:
0f:60:fe:7b:a8:7f:d3:9b:66:7a:df:74:fa:ec:e2:
6f:52:a5:1e:18:48:2c:42:16:f8:65:be:a5:e5:cb:
c5:a2:e9:ea:58:8b:fb:72:ba:f8:f1:f3:46:51:51:
6a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9C:6F:30:C0:39:AE:2E:B2:52:9D:FB:9B:4D:49:FD:BF:61:58:91
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/229bf8e5-12f8-4b1b-82dc-1aeae916fdbe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f1a:4000::/36
Signature Algorithm: sha256WithRSAEncryption
3c:3d:fe:e3:c1:85:27:28:b6:92:85:3e:ad:ef:ad:d7:e9:82:
b1:f0:a7:c7:af:6a:ef:63:d9:85:16:85:f7:ee:45:e8:3e:5b:
d4:27:d5:0f:f0:9d:47:47:ea:37:b4:be:f7:af:6d:2d:e3:9f:
ce:1f:35:fe:03:43:a7:01:4d:e0:b2:ad:2c:e4:1d:f2:2f:ab:
b5:63:23:95:71:4f:01:f3:5b:31:32:1f:2e:3b:28:07:c8:08:
bf:79:9b:e1:54:a2:25:85:4d:6d:fe:e5:d9:a3:d3:13:24:40:
4f:27:19:e5:38:78:3c:f8:a3:91:8a:ee:1a:cd:4f:87:d7:a0:
5e:2e:14:d6:e8:5d:97:fe:9a:d8:38:a2:40:9c:7e:78:cb:db:
d1:f2:2e:dc:1b:6b:cb:68:93:fa:83:7e:c9:68:7c:b0:8f:3e:
d0:e0:9f:4e:e0:e5:84:df:05:c2:b1:f3:8f:0f:30:dc:26:33:
2d:27:1b:87:ca:a2:15:e2:8b:05:73:5f:46:fc:7d:27:55:17:
5b:0f:81:90:19:28:1b:34:72:6f:72:b4:6c:51:0b:e3:1c:2a:
81:3b:59:70:0c:be:bf:6e:42:e7:b1:7a:55:f9:a9:4e:fd:45:
6f:bc:cb:64:1e:a3:d1:32:80:d8:41:18:9c:6e:89:35:aa:d8:
0a:f6:a1:46
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUMu0ar6whPXp+wmlbGx7r3SBjgzowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjMwMDAwMDAwWhcNMjUwMjAzMjM1OTU5
WjB6MUkwRwYDVQQFE0A2MWIyM2EwMjEzMWNlNTFlZGQ3NzliMTc2NTc0ZmMxNGQ0
MGIwZGJmOTI2ZTI0NGVjZGIyMTFlZGIyMjFmMjMzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCoPMODzDbHsxhpV180ULGAAw6DG6LLhPlCWYHRqB+RQovM
ah4tGO2pjrE3zXeTUJUDzmXzCFAAPz5V50bBQgc6JfBUGrd+nhng4mPvghbMCYRy
f8zyiCG26Vk3yabV6sfowGqDO+NUpJZ2hZhEeLpEb+15/4UlyONFe9FLg5ETmDik
X2zPe8q7pYwgbjE1VdswmQAVgjuPqH25z8g/H9xiWaF3sXTLSnJApRSkOc+6uTLw
w9aZ+4dqLzpAsZo4kVHjOMb975sbHz+tFqPmzdOCJA9g/nuof9ObZnrfdPrs4m9S
pR4YSCxCFvhlvqXly8Wi6epYi/tyuvjx80ZRUWpnAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUeZxvMMA5ri6yUp37m01J/b9hWJEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzIyOWJmOGU1LTEyZjgtNGIxYi04MmRjLTFhZWFlOTE2ZmRiZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8aQDANBgkqhkiG9w0BAQsFAAOCAQEAPD3+48GFJyi2koU+re+t1+mC
sfCnx69q72PZhRaF9+5F6D5b1CfVD/CdR0fqN7S+969tLeOfzh81/gNDpwFN4LKt
LOQd8i+rtWMjlXFPAfNbMTIfLjsoB8gIv3mb4VSiJYVNbf7l2aPTEyRATycZ5Th4
PPijkYruGs1Ph9egXi4U1uhdl/6a2DiiQJx+eMvb0fIu3Btry2iT+oN+yWh8sI8+
0OCfTuDlhN8FwrHzjw8w3CYzLScbh8qiFeKLBXNfRvx9J1UXWw+BkBkoGzRyb3K0
bFEL4xwqgTtZcAy+v25C57F6VfmpTv1Fb7zLZB6j0TKA2EEYnG6JNarYCvahRg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:35:00 2025 by rpki-client