Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f24667d-8c84-490f-aca2-bec82cfd230d.roa
File: 3f24667d-8c84-490f-aca2-bec82cfd230d.roa (raw, json)
Hash identifier: jpmm4HBSowSQ77hvRRg9qVEELJd8tmItzqIlGLhi2Gk=
Subject key identifier: F9:53:FB:3C:C2:2B:6D:85:3B:85:F1:15:AA:CF:A1:19:D2:A0:3A:00
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1C69AB9009C5F17449BE15CEDB5763CB3C5CFAF1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f24667d-8c84-490f-aca2-bec82cfd230d.roa
Signing time: Wed 01 Jan 2025 00:00:00 +0000
ROA not before: Wed 01 Jan 2025 00:00:00 +0000
ROA not after: Wed 05 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 56.89.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:69:ab:90:09:c5:f1:74:49:be:15:ce:db:57:63:cb:3c:5c:fa:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 1 00:00:00 2025 GMT
Not After : Feb 5 23:59:59 2025 GMT
Subject: serialNumber=7d3aa58be1a5df1fdd17f7bdd5914a35b81429d3561290221c0f6fcbbc681d71, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:09:d8:b5:83:80:a5:a5:d1:fa:15:77:7c:51:
bc:4d:5f:0d:68:37:9c:cd:fc:7e:98:d1:e8:31:35:
4e:68:83:31:b5:c7:17:16:73:4f:fa:5e:79:c0:2f:
22:3a:0b:28:62:4f:6a:ef:a5:2e:ef:a3:6b:20:25:
f3:9e:a7:7c:ab:97:e0:11:86:7d:fa:4d:07:5d:0e:
0d:b6:aa:48:f1:33:4c:fb:68:c4:4c:f9:f2:9a:07:
90:05:2c:b4:fb:66:da:66:56:d6:78:64:38:4b:58:
f6:41:f4:e5:3a:31:cc:1f:41:19:d5:31:9c:ba:8d:
4b:41:2c:d3:32:9e:a9:73:e4:7c:b0:1c:88:ed:06:
05:39:64:35:27:47:b5:7f:96:be:3c:2c:04:e1:1d:
12:a3:c7:2b:ac:33:50:49:65:11:0d:6f:fc:b5:bc:
15:c5:ec:74:88:09:14:a6:51:41:18:d7:08:a2:d9:
64:61:a4:d9:2b:87:04:a8:a6:3f:ee:eb:33:b4:a1:
4a:04:a6:58:f6:9d:7f:19:c7:2b:ce:01:2a:23:7d:
9e:a9:ba:a7:96:cc:91:a2:29:fa:7f:37:83:67:58:
b8:56:2a:a1:fc:11:65:44:6f:1c:23:8b:57:a9:d2:
21:0e:18:47:14:05:7e:0f:bb:8c:df:97:48:0d:ec:
02:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:53:FB:3C:C2:2B:6D:85:3B:85:F1:15:AA:CF:A1:19:D2:A0:3A:00
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f24667d-8c84-490f-aca2-bec82cfd230d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.89.0.0/16
Signature Algorithm: sha256WithRSAEncryption
16:31:54:5c:c2:10:3b:69:da:3e:34:13:7a:0f:16:bc:21:f1:
41:da:a7:b8:de:33:5c:6b:5d:8f:c9:8b:a0:f0:33:74:8b:f2:
39:f8:de:88:a9:44:ff:27:e6:30:ba:0b:54:18:03:c3:7f:21:
67:7a:9c:a5:43:9c:58:18:ee:be:59:8d:bd:18:f0:4b:0a:68:
33:28:bd:70:d4:71:5d:60:42:d8:12:89:d2:f1:ed:73:7f:21:
4f:2b:d9:8b:1e:ec:ab:75:89:a2:8c:c5:93:81:0d:38:b4:c7:
ab:d9:1c:99:d8:9b:53:e9:37:11:13:9f:5d:c9:1b:6d:f8:ca:
e1:ce:9c:6e:93:e4:2d:c9:38:86:f1:fc:81:a6:c8:45:fe:d8:
e5:d3:e0:b1:b3:4d:03:ac:36:84:2e:0e:14:26:8d:a1:f0:75:
ab:3b:79:2d:d4:06:2d:b0:86:35:6d:c6:dd:b6:95:6b:54:b5:
a8:f4:94:6d:81:be:78:48:be:fd:cf:c8:36:89:d8:8c:17:ad:
12:9f:78:a2:08:8a:45:28:b8:a3:31:76:92:25:18:10:24:03:
8e:e3:26:10:be:3c:24:9f:94:db:e0:93:01:25:81:b8:37:44:
73:f7:30:89:a3:b7:bd:88:15:62:a1:78:65:8b:af:e7:ec:a7:
40:37:13:ab
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUHGmrkAnF8XRJvhXO21djyzxc+vEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTAxMDAwMDAwWhcNMjUwMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A3ZDNhYTU4YmUxYTVkZjFmZGQxN2Y3YmRkNTkxNGEzNWI4
MTQyOWQzNTYxMjkwMjIxYzBmNmZjYmJjNjgxZDcxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCYCdi1g4ClpdH6FXd8UbxNXw1oN5zN/H6Y0egxNU5ogzG1
xxcWc0/6XnnALyI6CyhiT2rvpS7vo2sgJfOep3yrl+ARhn36TQddDg22qkjxM0z7
aMRM+fKaB5AFLLT7ZtpmVtZ4ZDhLWPZB9OU6McwfQRnVMZy6jUtBLNMynqlz5Hyw
HIjtBgU5ZDUnR7V/lr48LAThHRKjxyusM1BJZRENb/y1vBXF7HSICRSmUUEY1wii
2WRhpNkrhwSopj/u6zO0oUoEplj2nX8ZxyvOASojfZ6puqeWzJGiKfp/N4NnWLhW
KqH8EWVEbxwji1ep0iEOGEcUBX4Pu4zfl0gN7ALdAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU+VP7PMIrbYU7hfEVqs+hGdKgOgAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzNmMjQ2NjdkLThjODQtNDkwZi1hY2EyLWJlYzgyY2ZkMjMwZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4WTANBgkqhkiG9w0BAQsFAAOCAQEAFjFUXMIQO2naPjQTeg8WvCHxQdqn
uN4zXGtdj8mLoPAzdIvyOfjeiKlE/yfmMLoLVBgDw38hZ3qcpUOcWBjuvlmNvRjw
SwpoMyi9cNRxXWBC2BKJ0vHtc38hTyvZix7sq3WJoozFk4ENOLTHq9kcmdibU+k3
EROfXckbbfjK4c6cbpPkLck4hvH8gabIRf7Y5dPgsbNNA6w2hC4OFCaNofB1qzt5
LdQGLbCGNW3G3baVa1S1qPSUbYG+eEi+/c/INonYjBetEp94ogiKRSi4ozF2kiUY
ECQDjuMmEL48JJ+U2+CTASWBuDdEc/cwiaO3vYgVYqF4ZYuv5+ynQDcTqw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:41:37 2025 by rpki-client