Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31a1e72a-d886-4aad-af85-b94708f7697a.roa
File: 31a1e72a-d886-4aad-af85-b94708f7697a.roa (raw, json)
Hash identifier: ZC2jSUN2OPy5M031VMpbziIi54sa1yreu+eSSLvuDIA=
Subject key identifier: 05:CE:CC:67:B8:04:51:2C:56:9B:3C:A1:81:57:C4:51:E4:43:0B:83
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 233A3FF1BC4C177AB7E91AC73EAC418169805234
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31a1e72a-d886-4aad-af85-b94708f7697a.roa
Signing time: Sat 21 Dec 2024 00:00:00 +0000
ROA not before: Sat 21 Dec 2024 00:00:00 +0000
ROA not after: Sat 25 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 188.230.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:3a:3f:f1:bc:4c:17:7a:b7:e9:1a:c7:3e:ac:41:81:69:80:52:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 21 00:00:00 2024 GMT
Not After : Jan 25 23:59:59 2025 GMT
Subject: serialNumber=e8c8de5353c1fca2c8955ff32e388939c37067035292a32e6797ded197646c67, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0d:e1:95:df:a4:bd:34:f4:3e:a3:97:6f:35:
b7:52:f6:33:6f:bf:b5:ab:e5:e1:a1:f0:5b:5a:f9:
69:d8:f7:6e:bf:ed:c7:bc:49:7d:bf:75:6a:c6:38:
39:b8:21:93:2c:44:a5:58:ab:4d:25:d7:e8:05:10:
0c:60:34:f0:cf:77:31:29:da:f9:17:cc:5d:87:14:
1e:86:00:11:fb:2a:16:30:7c:a4:e2:a7:7b:be:16:
4c:64:9b:51:75:bd:0e:f0:21:d2:b8:10:9d:8c:52:
32:82:8f:c1:d9:70:bf:a7:af:c8:6e:3d:7d:39:56:
a5:ca:50:c3:e8:9e:d3:09:ba:36:0f:f7:27:2d:91:
18:d4:0c:3a:99:b9:7c:95:66:aa:7b:1d:e8:d2:5c:
25:a0:2f:97:92:3c:40:78:8d:31:c1:42:0b:00:6a:
c2:a8:bd:0d:c6:4c:51:61:54:00:ba:49:b8:a2:d7:
fd:07:a3:28:7a:f7:18:09:2f:02:18:f1:7c:4d:cf:
3c:30:00:3d:74:24:d6:be:46:d7:44:a4:98:40:75:
cf:e9:f0:06:48:ed:73:c8:af:9e:4d:a1:a8:41:f5:
35:2d:b1:ea:4e:5c:d7:40:37:a0:fe:f7:51:b0:a3:
bb:56:8e:ab:aa:bd:b0:4b:83:ad:17:4a:06:a2:84:
4e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CE:CC:67:B8:04:51:2C:56:9B:3C:A1:81:57:C4:51:E4:43:0B:83
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31a1e72a-d886-4aad-af85-b94708f7697a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.230.0.0/17
Signature Algorithm: sha256WithRSAEncryption
5f:fa:4f:9d:bb:43:4d:3d:f7:f1:88:99:7e:97:c4:4e:07:70:
df:cd:93:3a:0e:05:ac:de:1c:5f:18:60:6e:15:52:b2:2f:e4:
f0:af:db:4f:f6:c6:32:4b:2d:b8:e1:cd:c9:19:9e:eb:4f:7f:
31:7b:5d:cd:3b:06:6b:e0:33:59:4f:bc:64:3f:79:7e:12:ab:
92:11:24:56:6e:16:f4:ee:e1:b3:96:ec:77:c3:3c:77:88:04:
29:54:ca:aa:85:90:2d:1b:b5:f3:7a:cb:03:7b:df:e9:21:35:
ca:c2:e1:fe:97:a2:7c:af:88:45:26:82:66:01:d9:58:52:cf:
d3:9b:c6:b4:88:dd:bf:f7:c1:08:d3:75:8c:e2:55:a5:42:b0:
2a:3a:55:78:54:5e:c5:2b:1c:7f:7a:70:99:1a:c3:84:af:d1:
b9:5b:87:38:6c:56:2e:76:47:38:52:d2:e6:da:38:4b:d5:52:
e3:2a:d1:fd:3c:7a:a9:b9:06:90:22:ee:91:90:3a:3c:cc:f6:
04:f5:e1:c8:99:f4:c6:78:0d:a5:23:7b:07:86:6a:72:3c:48:
c9:cb:97:7b:1a:6f:ab:da:d4:39:a5:0b:a4:86:9e:54:fe:dc:
62:de:39:0a:71:45:6e:9c:84:7e:bd:4c:83:c4:b2:4e:a5:d7:
d5:2c:ef:4c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUIzo/8bxMF3q36RrHPqxBgWmAUjQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjIxMDAwMDAwWhcNMjUwMTI1MjM1OTU5
WjB6MUkwRwYDVQQFE0BlOGM4ZGU1MzUzYzFmY2EyYzg5NTVmZjMyZTM4ODkzOWMz
NzA2NzAzNTI5MmEzMmU2Nzk3ZGVkMTk3NjQ2YzY3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDpDeGV36S9NPQ+o5dvNbdS9jNvv7Wr5eGh8Fta+WnY926/
7ce8SX2/dWrGODm4IZMsRKVYq00l1+gFEAxgNPDPdzEp2vkXzF2HFB6GABH7KhYw
fKTip3u+Fkxkm1F1vQ7wIdK4EJ2MUjKCj8HZcL+nr8huPX05VqXKUMPontMJujYP
9yctkRjUDDqZuXyVZqp7HejSXCWgL5eSPEB4jTHBQgsAasKovQ3GTFFhVAC6Sbii
1/0Hoyh69xgJLwIY8XxNzzwwAD10JNa+RtdEpJhAdc/p8AZI7XPIr55NoahB9TUt
sepOXNdAN6D+91Gwo7tWjquqvbBLg60XSgaihE7FAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUBc7MZ7gEUSxWmzyhgVfEUeRDC4MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzMxYTFlNzJhLWQ4ODYtNGFhZC1hZjg1LWI5NDcwOGY3Njk3YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAe85gAwDQYJKoZIhvcNAQELBQADggEBAF/6T527Q0099/GImX6XxE4HcN/N
kzoOBazeHF8YYG4VUrIv5PCv20/2xjJLLbjhzckZnutPfzF7Xc07BmvgM1lPvGQ/
eX4Sq5IRJFZuFvTu4bOW7HfDPHeIBClUyqqFkC0btfN6ywN73+khNcrC4f6Xonyv
iEUmgmYB2VhSz9ObxrSI3b/3wQjTdYziVaVCsCo6VXhUXsUrHH96cJkaw4Sv0blb
hzhsVi52RzhS0ubaOEvVUuMq0f08eqm5BpAi7pGQOjzM9gT14ciZ9MZ4DaUjeweG
anI8SMnLl3sab6va1DmlC6SGnlT+3GLeOQpxRW6chH69TIPEsk6l19Us70w=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:39:43 2025 by rpki-client