Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24360b7d-56ba-4fbd-980d-c0a6e979105d.roa
File: 24360b7d-56ba-4fbd-980d-c0a6e979105d.roa (raw, json)
Hash identifier: 7Zi4/e0dwDqPN3P916XA6GifsBsPPGomIzyAfhmI9ss=
Subject key identifier: 75:CA:B6:DD:AA:7B:BD:E8:E8:77:BF:38:92:79:09:BB:77:4A:FA:6E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 09C6656DDF92480F45789D9E4BC26F46F6F8EB34
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24360b7d-56ba-4fbd-980d-c0a6e979105d.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 56.3.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:c6:65:6d:df:92:48:0f:45:78:9d:9e:4b:c2:6f:46:f6:f8:eb:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: serialNumber=521dbc7971366be28ffd5903699665103109447d73ce1b19cd3b5b986dafb179, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d8:c1:65:a7:8f:df:f9:d7:8d:1e:97:df:bf:
fd:e7:45:37:6d:71:97:b5:f8:19:5f:b1:e6:c9:b6:
51:83:be:75:e2:a8:3a:86:45:f3:09:b7:41:95:7b:
fb:a9:0f:84:9b:c0:35:2e:18:80:01:46:f9:e0:38:
9d:b7:5a:54:24:40:a8:11:99:51:14:5b:13:f3:19:
72:c7:06:5e:b5:98:16:de:ab:0e:05:7b:a9:6c:c0:
ca:af:a4:2f:83:32:7f:96:dc:91:20:16:14:b0:76:
3c:2c:8f:59:d2:71:3d:06:40:dd:26:b2:d1:02:17:
ab:0c:18:fe:c2:7c:d2:67:82:95:49:35:9a:bd:f0:
f5:a9:e7:d6:56:fa:29:9a:3f:af:92:48:4b:2b:b2:
61:3e:7f:7b:6f:9c:2f:d1:5f:51:0e:fd:86:d2:5c:
6e:56:a6:25:ea:ae:17:9d:7a:5b:2b:03:43:d3:d1:
7a:06:75:4e:b7:91:4a:42:73:8c:bf:b5:9c:6e:14:
8e:ac:bb:b9:76:f3:b1:63:19:3a:be:1a:28:d2:1e:
4c:c6:7b:c7:f3:4e:fa:3e:52:e8:56:85:80:27:f2:
83:22:f2:80:39:74:36:05:ee:5e:aa:b4:f6:07:27:
d8:e6:5c:08:4e:61:11:bb:c7:8b:34:8c:09:03:0c:
43:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CA:B6:DD:AA:7B:BD:E8:E8:77:BF:38:92:79:09:BB:77:4A:FA:6E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24360b7d-56ba-4fbd-980d-c0a6e979105d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.3.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ce:2f:35:50:b1:1d:8a:70:eb:09:8a:79:84:06:cd:5c:6b:f3:
10:57:a6:e5:a7:17:e7:c9:51:2c:4c:14:77:7b:f2:4b:04:4a:
f8:9c:39:28:4a:fb:07:fd:4b:90:31:91:9f:b3:6a:2c:e3:53:
53:5e:28:da:bd:0a:7f:7e:d6:ae:34:51:2e:a1:f9:f3:e1:f4:
59:b5:ef:a0:4a:6e:29:d7:2b:d1:f5:65:dc:cd:30:65:42:4d:
05:63:0b:61:c2:e9:9d:31:ab:70:bd:1c:05:fb:f1:88:fc:e4:
ad:3f:8a:3c:c3:9b:74:60:66:44:1f:51:fc:af:13:33:8d:1f:
ca:8e:d2:cc:2e:b8:df:97:d0:ae:27:c6:4e:65:fe:e2:51:bb:
ff:0c:68:f7:33:85:fe:a0:56:a5:f4:2a:b0:44:93:e1:d9:73:
f6:6e:5d:cc:c1:8d:eb:1f:33:98:10:77:2a:3c:1b:fc:0c:7b:
7d:e4:3b:d5:da:c9:dc:4c:dd:ae:12:4b:88:b1:b7:1b:c6:51:
d0:76:59:bf:3f:26:a3:ea:37:65:bd:c2:21:83:79:d2:57:90:
57:79:b1:a9:72:33:39:5a:9b:be:aa:96:1e:b1:71:ab:9c:c8:
58:ad:be:64:df:33:b0:20:dc:45:74:a8:dd:ab:88:87:ca:4e:
a7:46:e6:8d
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUCcZlbd+SSA9FeJ2eS8JvRvb46zQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTA0MDAwMDAwWhcNMjUwMjA4MjM1OTU5
WjB6MUkwRwYDVQQFE0A1MjFkYmM3OTcxMzY2YmUyOGZmZDU5MDM2OTk2NjUxMDMx
MDk0NDdkNzNjZTFiMTljZDNiNWI5ODZkYWZiMTc5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDR2MFlp4/f+deNHpffv/3nRTdtcZe1+BlfsebJtlGDvnXi
qDqGRfMJt0GVe/upD4SbwDUuGIABRvngOJ23WlQkQKgRmVEUWxPzGXLHBl61mBbe
qw4Fe6lswMqvpC+DMn+W3JEgFhSwdjwsj1nScT0GQN0mstECF6sMGP7CfNJngpVJ
NZq98PWp59ZW+imaP6+SSEsrsmE+f3tvnC/RX1EO/YbSXG5WpiXqrhedelsrA0PT
0XoGdU63kUpCc4y/tZxuFI6su7l287FjGTq+GijSHkzGe8fzTvo+UuhWhYAn8oMi
8oA5dDYF7l6qtPYHJ9jmXAhOYRG7x4s0jAkDDENpAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUdcq23ap7vejod784knkJu3dK+m4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzI0MzYwYjdkLTU2YmEtNGZiZC05ODBkLWMwYTZlOTc5MTA1ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4AzANBgkqhkiG9w0BAQsFAAOCAQEAzi81ULEdinDrCYp5hAbNXGvzEFem
5acX58lRLEwUd3vySwRK+Jw5KEr7B/1LkDGRn7NqLONTU14o2r0Kf37WrjRRLqH5
8+H0WbXvoEpuKdcr0fVl3M0wZUJNBWMLYcLpnTGrcL0cBfvxiPzkrT+KPMObdGBm
RB9R/K8TM40fyo7SzC6435fQrifGTmX+4lG7/wxo9zOF/qBWpfQqsEST4dlz9m5d
zMGN6x8zmBB3Kjwb/Ax7feQ71drJ3EzdrhJLiLG3G8ZR0HZZvz8mo+o3Zb3CIYN5
0leQV3mxqXIzOVqbvqqWHrFxq5zIWK2+ZN8zsCDcRXSo3auIh8pOp0bmjQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:02 2025 by rpki-client