Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5320c825-06dd-4134-830c-bced7439c362.roa
File: 5320c825-06dd-4134-830c-bced7439c362.roa (raw, json)
Hash identifier: K96K5iVbLRc5HfgocTW/Bv5Z0/8sWYe5vVUDNLAMmvY=
Subject key identifier: 4E:92:CF:07:2C:A1:57:DD:16:2F:BB:22:E8:60:D4:B3:98:B0:CA:C7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3E7CD15B4E2F7977429F176782E16A262FA3E20B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5320c825-06dd-4134-830c-bced7439c362.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 56.213.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:7c:d1:5b:4e:2f:79:77:42:9f:17:67:82:e1:6a:26:2f:a3:e2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=c403203fef06e8d25a629626f22a3c01900cf4dcb8eee846cbe4b20a244a6c17, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f4:2a:3d:ae:08:44:ec:bd:3d:46:02:80:7c:
8a:43:6d:e5:a3:84:e8:9f:b1:d7:f4:8d:80:ad:15:
4b:34:7a:86:2c:68:be:21:a5:11:10:21:a3:5a:06:
80:bf:e1:f4:57:4a:b4:6a:95:55:a6:7f:ac:d7:18:
8e:24:d7:a7:f7:7d:af:f0:de:5e:37:94:7f:ba:ac:
f0:2d:42:0e:b6:b7:07:29:10:50:a6:2e:05:69:34:
99:83:e3:61:96:b8:31:76:77:ca:bf:06:8a:92:51:
03:fc:09:84:09:2e:5f:d8:2a:6b:0d:fc:e5:76:04:
24:c7:5c:d1:73:80:61:dd:2e:f0:e9:c5:4f:1c:27:
b5:2b:80:ff:45:a6:ad:ca:8e:a9:c9:0d:64:9b:f5:
61:58:90:0f:86:44:05:ac:62:d6:0d:ca:5e:08:ca:
bc:4b:a3:f8:d4:ef:3c:7c:f9:3e:14:f3:a9:62:61:
e3:fa:db:d2:8a:14:d0:36:4d:74:1a:c8:19:b1:2e:
4b:80:02:2d:3b:f4:40:d7:9d:5b:fb:fd:13:90:f0:
1b:e1:40:0c:85:c6:f9:cc:44:94:c6:93:f5:1e:c9:
46:89:29:60:2e:60:13:ce:c5:ca:8b:92:2a:d6:0d:
52:55:7f:4f:01:9b:aa:be:9a:70:f4:81:ac:67:e9:
cb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:92:CF:07:2C:A1:57:DD:16:2F:BB:22:E8:60:D4:B3:98:B0:CA:C7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5320c825-06dd-4134-830c-bced7439c362.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.213.0.0/16
Signature Algorithm: sha256WithRSAEncryption
62:4d:1b:f1:2a:47:65:84:af:52:96:a1:54:fc:cb:e0:7a:61:
b5:29:5e:91:d4:19:f7:03:da:5d:24:63:2e:90:ec:0d:62:78:
f1:d7:f7:7a:13:c2:8a:ab:f8:3a:cf:be:8c:40:a6:5a:be:53:
ef:45:84:34:11:a3:fc:ac:2a:b8:30:b6:d9:fb:d1:36:19:fd:
fa:2e:c0:7c:43:62:c5:c3:96:d8:4d:e6:1a:46:9d:78:7d:0b:
2e:86:8c:67:be:44:6b:ab:b1:38:72:b8:f9:6b:a0:7f:61:3e:
b6:61:4e:a7:78:99:ef:31:c0:9c:22:6d:52:06:79:bb:b6:97:
f4:75:1a:ae:35:e7:dc:04:d2:0a:0f:5e:1d:5f:ff:45:e1:3a:
d9:0b:ef:4b:2b:96:b2:89:0e:ad:e8:f8:33:43:60:d4:16:86:
bd:39:55:9f:e5:de:32:ea:94:ba:c6:93:be:c2:c1:b1:40:cb:
5f:8f:59:e4:68:b9:66:2b:a2:15:b9:bb:d1:ce:e9:e5:fc:24:
65:b6:ae:4a:1b:1a:69:ce:89:62:1b:ac:92:c0:89:ce:d6:c5:
17:79:8e:42:cc:1a:2d:15:91:1b:08:a4:7d:7d:a2:13:a1:6a:
f1:09:74:dc:68:8d:ca:57:57:00:31:f8:93:ea:e3:5f:c9:fc:
15:91:63:2d
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUPnzRW04veXdCnxdnguFqJi+j4gswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0BjNDAzMjAzZmVmMDZlOGQyNWE2Mjk2MjZmMjJhM2MwMTkw
MGNmNGRjYjhlZWU4NDZjYmU0YjIwYTI0NGE2YzE3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD29Co9rghE7L09RgKAfIpDbeWjhOifsdf0jYCtFUs0eoYs
aL4hpREQIaNaBoC/4fRXSrRqlVWmf6zXGI4k16f3fa/w3l43lH+6rPAtQg62twcp
EFCmLgVpNJmD42GWuDF2d8q/BoqSUQP8CYQJLl/YKmsN/OV2BCTHXNFzgGHdLvDp
xU8cJ7UrgP9Fpq3KjqnJDWSb9WFYkA+GRAWsYtYNyl4IyrxLo/jU7zx8+T4U86li
YeP629KKFNA2TXQayBmxLkuAAi079EDXnVv7/ROQ8BvhQAyFxvnMRJTGk/UeyUaJ
KWAuYBPOxcqLkirWDVJVf08Bm6q+mnD0gaxn6cvvAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUTpLPByyhV90WL7si6GDUs5iwyscwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzUzMjBjODI1LTA2ZGQtNDEzNC04MzBjLWJjZWQ3NDM5YzM2Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA41TANBgkqhkiG9w0BAQsFAAOCAQEAYk0b8SpHZYSvUpahVPzL4HphtSle
kdQZ9wPaXSRjLpDsDWJ48df3ehPCiqv4Os++jECmWr5T70WENBGj/KwquDC22fvR
Nhn9+i7AfENixcOW2E3mGkadeH0LLoaMZ75Ea6uxOHK4+Wugf2E+tmFOp3iZ7zHA
nCJtUgZ5u7aX9HUarjXn3ATSCg9eHV//ReE62QvvSyuWsokOrej4M0Ng1BaGvTlV
n+XeMuqUusaTvsLBsUDLX49Z5Gi5ZiuiFbm70c7p5fwkZbauShsaac6JYhusksCJ
ztbFF3mOQswaLRWRGwikfX2iE6Fq8Ql03GiNyldXADH4k+rjX8n8FZFjLQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:42:19 2025 by rpki-client