Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4efaf194-9015-4cc2-a016-24bb1f3bd33f.roa
File: 4efaf194-9015-4cc2-a016-24bb1f3bd33f.roa (raw, json)
Hash identifier: 6pGo3b2/bdmqstskFL/OzIht8AxrAgScz4me+UUqXKQ=
Subject key identifier: 34:B2:ED:4B:2C:65:C4:D7:DE:9F:97:5E:8E:A3:17:03:B1:65:99:66
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 67872B06CEF37517AA07290F95A3B54A6287F500
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4efaf194-9015-4cc2-a016-24bb1f3bd33f.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff5:3400::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:87:2b:06:ce:f3:75:17:aa:07:29:0f:95:a3:b5:4a:62:87:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: serialNumber=ac0408f8e4f0c6bda30ff884e1e28d7137adef4eb10f677e7de26d6da4041c39, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:53:2b:2c:a0:e1:b6:3f:a7:e2:14:c7:24:da:
cb:ce:9e:20:56:ed:e9:a2:67:f2:e8:77:26:80:c6:
d6:d4:c0:1b:c0:be:80:cb:f1:d2:2c:30:67:d7:ee:
dd:a4:f7:b9:95:ca:9d:1a:9c:d1:24:f1:53:8d:40:
f1:fb:0f:f7:e9:8b:29:58:11:3a:01:f2:11:e3:bc:
c9:bf:88:65:f2:66:48:39:90:b6:2c:3b:8b:1d:8f:
8c:97:e2:ce:b2:ac:06:7f:24:0e:ef:20:0d:87:68:
73:86:09:8a:4e:a4:1b:15:e7:3a:84:35:10:1c:bc:
e5:42:4c:24:ba:40:1d:88:5e:4c:52:ec:5d:1f:38:
61:d5:9d:cb:cb:07:71:18:e6:a3:f9:01:5b:ab:5b:
51:63:2c:cc:44:48:5e:ef:db:6f:a8:6d:b5:b8:cf:
de:37:45:a4:e9:83:27:70:03:26:c0:24:68:e9:91:
76:e6:59:ed:f2:e7:67:da:7c:95:e7:83:bd:e0:3b:
42:62:45:e7:2e:19:14:9b:3e:4d:d1:a3:32:c3:b6:
85:2b:3e:3e:e0:3e:ff:63:29:0a:da:6e:02:fb:65:
ff:ad:c8:bb:38:4d:8b:40:45:57:17:41:14:ad:22:
3e:be:85:f7:40:7c:d6:72:47:c5:35:e6:20:94:6a:
42:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B2:ED:4B:2C:65:C4:D7:DE:9F:97:5E:8E:A3:17:03:B1:65:99:66
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4efaf194-9015-4cc2-a016-24bb1f3bd33f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff5:3400::/40
Signature Algorithm: sha256WithRSAEncryption
9c:4d:79:59:f2:93:4a:2c:aa:17:c7:13:c4:88:f8:6a:4d:64:
5d:7a:35:c4:5d:b1:cf:24:be:50:76:ec:fa:41:20:64:80:65:
e3:b7:c4:80:ff:0f:b3:8c:4b:76:58:d0:67:6b:f9:cc:fe:fe:
a5:ad:ff:59:75:ed:8a:69:b7:d4:22:8e:36:fe:f4:5a:84:8e:
a7:30:41:11:00:82:1e:73:88:a1:26:da:49:d0:3f:b9:20:e8:
02:3f:17:34:cf:f4:11:3a:cb:69:45:e4:d3:50:27:a1:5a:bc:
7d:c2:41:50:64:53:6a:95:6a:75:8a:af:93:1a:bb:9d:bb:5e:
a5:89:b9:dc:08:34:d8:c6:c5:3d:82:70:81:d4:48:90:f9:a5:
d9:5c:06:6d:4d:9c:51:fd:f1:99:14:b9:a0:3d:a9:eb:f3:8f:
48:9d:d2:71:88:62:e5:91:81:ff:61:86:1f:32:cc:48:7d:b2:
71:47:88:fa:3c:1f:8e:50:9f:6e:14:8e:99:95:a5:78:96:e0:
c6:c4:bd:5d:40:e2:13:9d:84:30:44:df:6e:c1:59:c4:e3:86:
0c:1d:29:84:4f:7f:47:e8:13:f5:ab:fa:b1:f0:16:41:45:32:
40:16:21:8b:2f:26:fe:6b:7f:e7:df:67:ee:cd:4a:92:3a:38:
07:ce:95:0c
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUZ4crBs7zdReqBykPlaO1SmKH9QAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTAzMDAwMDAwWhcNMjUwMjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BhYzA0MDhmOGU0ZjBjNmJkYTMwZmY4ODRlMWUyOGQ3MTM3
YWRlZjRlYjEwZjY3N2U3ZGUyNmQ2ZGE0MDQxYzM5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC/UyssoOG2P6fiFMck2svOniBW7emiZ/LodyaAxtbUwBvA
voDL8dIsMGfX7t2k97mVyp0anNEk8VONQPH7D/fpiylYEToB8hHjvMm/iGXyZkg5
kLYsO4sdj4yX4s6yrAZ/JA7vIA2HaHOGCYpOpBsV5zqENRAcvOVCTCS6QB2IXkxS
7F0fOGHVncvLB3EY5qP5AVurW1FjLMxESF7v22+obbW4z943RaTpgydwAybAJGjp
kXbmWe3y52fafJXng73gO0JiRecuGRSbPk3RozLDtoUrPj7gPv9jKQrabgL7Zf+t
yLs4TYtARVcXQRStIj6+hfdAfNZyR8U15iCUakK5AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUNLLtSyxlxNfen5dejqMXA7FlmWYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzRlZmFmMTk0LTkwMTUtNGNjMi1hMDE2LTI0YmIxZjNiZDMzZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/1NDANBgkqhkiG9w0BAQsFAAOCAQEAnE15WfKTSiyqF8cTxIj4ak1k
XXo1xF2xzyS+UHbs+kEgZIBl47fEgP8Ps4xLdljQZ2v5zP7+pa3/WXXtimm31CKO
Nv70WoSOpzBBEQCCHnOIoSbaSdA/uSDoAj8XNM/0ETrLaUXk01AnoVq8fcJBUGRT
apVqdYqvkxq7nbtepYm53Ag02MbFPYJwgdRIkPml2VwGbU2cUf3xmRS5oD2p6/OP
SJ3ScYhi5ZGB/2GGHzLMSH2ycUeI+jwfjlCfbhSOmZWleJbgxsS9XUDiE52EMETf
bsFZxOOGDB0phE9/R+gT9av6sfAWQUUyQBYhiy8m/mt/599n7s1Kkjo4B86VDA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:30:57 2025 by rpki-client