Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f5d999d-bc2a-454e-ba53-15484dc1a46e.roa
File: 5f5d999d-bc2a-454e-ba53-15484dc1a46e.roa (raw, json)
Hash identifier: Cv02v/8MraOwoUZU8Hmj8Snekln2dDyQgu8jxjmYmlA=
Subject key identifier: 27:4A:B3:B7:DD:C7:37:3B:1A:DB:43:E0:CC:21:4A:BD:E4:40:26:30
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3B3265FC88750A1D82659E1DECE9576B4075C0EC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f5d999d-bc2a-454e-ba53-15484dc1a46e.roa
Signing time: Tue 24 Dec 2024 00:00:00 +0000
ROA not before: Tue 24 Dec 2024 00:00:00 +0000
ROA not after: Tue 28 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 54.5.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:32:65:fc:88:75:0a:1d:82:65:9e:1d:ec:e9:57:6b:40:75:c0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 24 00:00:00 2024 GMT
Not After : Jan 28 23:59:59 2025 GMT
Subject: serialNumber=2e635c09ee0bc56d16c84b3175d45d6ca6106264f2b09ce5429c95969c05e288, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:04:f7:03:69:d3:c9:06:bc:07:39:4b:ec:de:
19:5e:7a:33:b2:0b:e5:53:c7:b9:62:b9:f6:68:84:
80:5e:48:65:f9:90:91:f4:ae:66:7e:8f:6e:b5:d7:
16:d2:9f:ab:f6:8d:81:9c:ff:a4:2b:48:cc:2f:69:
5c:0a:10:52:9f:0f:c3:e5:98:95:cd:b7:38:6b:2b:
bd:53:f1:43:f5:ef:95:3d:37:ca:ce:49:cb:1e:5c:
4c:47:f2:71:0e:ef:d4:07:65:66:6e:72:b0:0c:c5:
39:8b:60:14:2e:5b:4b:82:8d:16:5a:7c:a9:13:56:
a2:b0:94:61:99:46:43:b6:b3:43:de:94:5c:46:9b:
10:b1:4a:ed:03:41:aa:e9:73:28:56:72:15:8e:59:
a2:a1:90:1f:3c:6b:14:26:b2:e2:3e:82:1f:e1:66:
7f:20:8e:ac:2a:d0:e9:6e:b8:88:74:02:e6:f1:86:
54:6e:0e:7c:a3:ec:31:43:e8:6c:d1:d0:83:ff:00:
a2:58:d2:f8:ac:ef:16:48:40:7a:49:74:da:88:df:
70:62:e9:e3:fb:f4:cb:cf:db:33:cf:74:f0:80:5b:
90:20:77:4a:64:87:83:ab:26:52:63:40:2d:f4:07:
3e:d8:ce:9a:53:88:c4:0b:b1:15:e5:6f:c3:7a:2a:
8a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4A:B3:B7:DD:C7:37:3B:1A:DB:43:E0:CC:21:4A:BD:E4:40:26:30
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f5d999d-bc2a-454e-ba53-15484dc1a46e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.5.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8c:c9:62:4f:02:da:65:c6:6d:6f:2b:6e:04:62:f3:43:08:61:
e6:3e:b4:4e:cb:67:f6:77:c3:61:75:65:87:cf:6d:b0:6d:98:
76:43:cd:95:14:da:a8:41:37:c1:73:33:ff:0a:82:9b:63:aa:
d4:47:a0:9f:88:13:40:f3:56:1f:77:90:37:3e:6b:39:b8:1b:
14:94:59:ef:28:53:94:18:ab:a3:42:25:57:0d:57:ab:ae:00:
d3:74:f4:cd:4c:9e:32:4d:4e:8e:0f:3c:cc:a6:22:e6:89:25:
fe:9c:16:41:a7:74:9b:f9:69:c0:b7:8d:b5:3f:26:15:2e:87:
02:ad:4a:e2:a8:7a:60:8f:c8:8c:28:18:a7:b9:56:d6:47:6c:
da:cf:31:55:1f:b1:7b:f9:44:ec:67:c4:28:03:a6:27:66:38:
0b:30:7f:84:ce:de:48:4f:ab:f7:d5:88:06:4b:37:d5:6e:a8:
64:89:2c:31:b1:ff:de:75:0f:77:9d:ea:5f:dd:21:22:90:d7:
0f:ca:d0:5d:12:08:05:8c:51:b1:90:2b:df:bd:ba:74:f9:f1:
a1:90:6d:f2:b8:0d:55:fb:af:a5:29:5e:80:a6:79:8c:18:33:
85:f0:96:af:dd:05:34:6a:83:c9:16:9e:a4:cd:ef:87:cb:84:
c9:d4:2f:dc
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUOzJl/Ih1Ch2CZZ4d7OlXa0B1wOwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjI0MDAwMDAwWhcNMjUwMTI4MjM1OTU5
WjB6MUkwRwYDVQQFE0AyZTYzNWMwOWVlMGJjNTZkMTZjODRiMzE3NWQ0NWQ2Y2E2
MTA2MjY0ZjJiMDljZTU0MjljOTU5NjljMDVlMjg4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCgBPcDadPJBrwHOUvs3hleejOyC+VTx7liufZohIBeSGX5
kJH0rmZ+j2611xbSn6v2jYGc/6QrSMwvaVwKEFKfD8PlmJXNtzhrK71T8UP175U9
N8rOScseXExH8nEO79QHZWZucrAMxTmLYBQuW0uCjRZafKkTVqKwlGGZRkO2s0Pe
lFxGmxCxSu0DQarpcyhWchWOWaKhkB88axQmsuI+gh/hZn8gjqwq0OluuIh0Aubx
hlRuDnyj7DFD6GzR0IP/AKJY0vis7xZIQHpJdNqI33Bi6eP79MvP2zPPdPCAW5Ag
d0pkh4OrJlJjQC30Bz7YzppTiMQLsRXlb8N6KorRAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUJ0qzt93HNzsa20PgzCFKveRAJjAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVmNWQ5OTlkLWJjMmEtNDU0ZS1iYTUzLTE1NDg0ZGMxYTQ2ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA2BTANBgkqhkiG9w0BAQsFAAOCAQEAjMliTwLaZcZtbytuBGLzQwhh5j60
Tstn9nfDYXVlh89tsG2YdkPNlRTaqEE3wXMz/wqCm2Oq1Eegn4gTQPNWH3eQNz5r
ObgbFJRZ7yhTlBiro0IlVw1Xq64A03T0zUyeMk1Ojg88zKYi5okl/pwWQad0m/lp
wLeNtT8mFS6HAq1K4qh6YI/IjCgYp7lW1kds2s8xVR+xe/lE7GfEKAOmJ2Y4CzB/
hM7eSE+r99WIBks31W6oZIksMbH/3nUPd53qX90hIpDXD8rQXRIIBYxRsZAr3726
dPnxoZBt8rgNVfuvpSlegKZ5jBgzhfCWr90FNGqDyRaepM3vh8uEydQv3A==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:53:01 2025 by rpki-client