Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/472b67ff-6474-4c15-b0eb-4fd8c0ee9156.roa
File: 472b67ff-6474-4c15-b0eb-4fd8c0ee9156.roa (raw, json)
Hash identifier: 6t812QZwVsOzeq4sBn1mCZdHRLDSI2PAZUGDOLNd/9E=
Subject key identifier: 48:D9:F8:99:52:05:22:74:F4:4A:EE:9C:A8:55:1C:B5:7C:33:CC:97
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2442A4147670CB6595C45DC60D0F8BEF9922CE4B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/472b67ff-6474-4c15-b0eb-4fd8c0ee9156.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 54.25.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:42:a4:14:76:70:cb:65:95:c4:5d:c6:0d:0f:8b:ef:99:22:ce:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: serialNumber=636aefdbfec4dbb156b4bd22a0a45d4ccf22308bea33b808e22071b98d356b49, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:85:b9:5d:9d:05:0a:65:07:64:19:92:50:e2:
72:e8:82:94:bd:f7:33:6b:d0:f1:71:0b:51:85:30:
1d:bb:ef:96:cb:d2:94:13:ed:26:81:05:7a:1e:da:
ff:6e:4b:31:a8:a5:72:b9:04:68:bc:8e:26:8f:19:
0d:fb:64:0c:43:f5:74:92:a0:9e:91:12:7a:b7:7f:
5b:35:f4:bf:0d:bd:da:dd:0e:04:a9:6a:c6:94:ef:
9f:f6:2d:75:4d:5a:cf:09:ff:b5:bd:eb:b7:7f:68:
e8:85:e9:54:53:17:a2:10:31:e7:0a:fd:6e:aa:c7:
ee:f7:c8:c9:77:62:52:8c:ce:67:7a:31:68:3f:ea:
91:74:5b:0d:3e:9a:8b:e1:0f:ff:8b:fd:1b:21:95:
76:c5:71:b1:7b:a9:3b:77:f8:cc:86:b9:33:9b:24:
2b:06:70:54:22:b0:8e:a5:70:5b:ed:e7:cb:f6:c9:
df:ec:95:00:67:d2:82:db:43:3c:91:f5:b1:3d:0c:
ff:3e:5e:38:fd:dd:9e:ae:71:4b:82:f4:d1:9a:8d:
5e:21:51:44:70:b9:92:47:1a:08:01:c7:30:b3:70:
0d:cf:79:51:1e:8a:28:4a:3c:94:41:35:e6:a2:24:
5a:9f:ac:a0:9c:77:5d:b6:62:cb:7c:a1:bc:50:f8:
ec:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D9:F8:99:52:05:22:74:F4:4A:EE:9C:A8:55:1C:B5:7C:33:CC:97
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/472b67ff-6474-4c15-b0eb-4fd8c0ee9156.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.25.69.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:d4:0d:38:43:7d:bd:53:7d:20:74:ff:bb:a9:ed:33:7d:c4:
66:0e:25:ed:e8:ed:9b:c5:9e:fc:4f:aa:1b:9f:fa:92:e1:19:
b4:c2:ec:f1:f1:c4:9d:a3:ce:06:7f:fc:c9:20:b8:d6:3d:b0:
76:81:2c:3e:be:9e:4a:d4:8a:bb:41:1e:1a:3d:96:4b:65:f5:
b2:44:17:c2:b2:ad:21:08:53:e6:dd:28:b7:f1:96:29:9b:22:
b8:c1:5d:ee:f8:98:99:51:20:f9:99:8a:76:e5:dd:c6:d3:39:
f4:87:d9:44:da:82:c9:f3:d2:65:b4:cb:bc:67:d7:b3:82:48:
db:71:8c:c3:30:a8:ac:c7:f7:3e:e1:7a:73:69:35:a5:59:1f:
2d:9f:72:e1:bb:42:47:f7:47:1c:c1:15:b8:67:2a:5d:76:0f:
9f:4c:7f:72:07:e3:9f:43:50:18:ef:4c:f9:ee:9c:12:19:df:
33:75:94:5b:c4:02:ac:ff:2b:6f:f6:98:34:ea:c1:f4:87:0f:
95:5d:5a:f6:af:0d:cc:2c:2c:de:25:48:a5:df:88:ff:61:44:
e4:04:f8:b6:ab:de:e2:81:42:a3:c0:5a:42:18:ce:37:8b:72:
a9:05:1a:31:cf:e6:4b:ce:ab:f9:aa:88:f3:f8:c4:18:bc:e8:
5c:45:4f:22
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJEKkFHZwy2WVxF3GDQ+L75kizkswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTEwMDAwMDAwWhcNMjUwMjE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A2MzZhZWZkYmZlYzRkYmIxNTZiNGJkMjJhMGE0NWQ0Y2Nm
MjIzMDhiZWEzM2I4MDhlMjIwNzFiOThkMzU2YjQ5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDShbldnQUKZQdkGZJQ4nLogpS99zNr0PFxC1GFMB2775bL
0pQT7SaBBXoe2v9uSzGopXK5BGi8jiaPGQ37ZAxD9XSSoJ6REnq3f1s19L8Nvdrd
DgSpasaU75/2LXVNWs8J/7W967d/aOiF6VRTF6IQMecK/W6qx+73yMl3YlKMzmd6
MWg/6pF0Ww0+movhD/+L/RshlXbFcbF7qTt3+MyGuTObJCsGcFQisI6lcFvt58v2
yd/slQBn0oLbQzyR9bE9DP8+Xjj93Z6ucUuC9NGajV4hUURwuZJHGggBxzCzcA3P
eVEeiihKPJRBNeaiJFqfrKCcd122Yst8obxQ+OzxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUSNn4mVIFInT0Su6cqFUctXwzzJcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQ3MmI2N2ZmLTY0NzQtNGMxNS1iMGViLTRmZDhjMGVlOTE1Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA2GUUwDQYJKoZIhvcNAQELBQADggEBAMrUDThDfb1TfSB0/7up7TN9xGYO
Je3o7ZvFnvxPqhuf+pLhGbTC7PHxxJ2jzgZ//MkguNY9sHaBLD6+nkrUirtBHho9
lktl9bJEF8KyrSEIU+bdKLfxlimbIrjBXe74mJlRIPmZinbl3cbTOfSH2UTagsnz
0mW0y7xn17OCSNtxjMMwqKzH9z7henNpNaVZHy2fcuG7Qkf3RxzBFbhnKl12D59M
f3IH459DUBjvTPnunBIZ3zN1lFvEAqz/K2/2mDTqwfSHD5VdWvavDcwsLN4lSKXf
iP9hROQE+Lar3uKBQqPAWkIYzjeLcqkFGjHP5kvOq/mqiPP4xBi86FxFTyI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:26:41 2025 by rpki-client