Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6262de37-f86b-4b99-89a0-9d3c92025975.roa
File: 6262de37-f86b-4b99-89a0-9d3c92025975.roa (raw, json)
Hash identifier: iVIqUhrIvyg0bndvkTanWz3jo+ePptrhpCAo0wVqL5Q=
Subject key identifier: F9:D9:AB:38:5A:D6:0F:90:14:81:80:D3:C9:76:69:9C:36:AB:AD:9A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 56F58EC16094C54585550348F89E0E50FB4038CE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6262de37-f86b-4b99-89a0-9d3c92025975.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.20.208.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:f5:8e:c1:60:94:c5:45:85:55:03:48:f8:9e:0e:50:fb:40:38:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=a3c4659c207b6b122617520bee2128dc730794e83658ed6b7f52835c1fc2f47f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:97:90:92:a7:77:e0:94:8e:aa:f1:c5:e5:3e:
17:7a:fd:ca:ee:26:c0:38:03:ca:43:05:3b:fc:45:
22:ce:7a:3d:26:95:a4:6f:17:87:56:34:85:1f:19:
0e:e0:0f:12:bb:91:7d:83:bd:20:34:20:b4:eb:8d:
47:75:6f:39:08:db:18:48:fd:eb:69:9a:52:af:de:
3e:07:29:78:e7:6f:ff:51:ce:a6:9c:f5:14:a0:0f:
26:bc:41:6b:f9:d9:9f:83:a9:35:71:27:bc:78:d8:
76:c2:00:7b:08:d0:11:0b:16:fe:97:3f:94:89:25:
1f:ad:45:bf:f2:81:12:af:4d:24:7d:1c:d9:a1:2f:
02:b7:56:ac:84:0d:dc:9c:91:5d:07:23:81:68:c5:
f3:fa:32:5c:a7:ac:92:a4:90:b9:a8:70:6a:dc:ae:
c2:d1:39:ba:3f:cd:db:4c:0f:5b:68:ec:8a:3f:c7:
03:33:2f:d4:f1:65:b8:05:3f:d0:de:7d:a3:70:ed:
8f:a9:88:73:99:09:18:98:16:79:00:60:19:0b:33:
00:f4:bc:0a:62:61:0e:12:3e:43:4a:c4:2d:8e:05:
83:a7:96:11:84:2f:6a:21:6a:3c:17:c4:3e:e3:69:
3b:24:0d:23:fb:3a:21:c9:a4:e2:15:05:7e:66:0c:
c1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D9:AB:38:5A:D6:0F:90:14:81:80:D3:C9:76:69:9C:36:AB:AD:9A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6262de37-f86b-4b99-89a0-9d3c92025975.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.20.208.0/22
Signature Algorithm: sha256WithRSAEncryption
be:d7:7b:d8:b0:95:30:d4:a4:e0:08:07:fe:7d:6b:d0:a0:38:
1b:39:9c:69:04:e6:b1:4e:71:bf:07:8c:9f:03:83:29:7c:cb:
f5:10:02:f6:17:7a:83:43:ee:19:5a:c2:b6:b3:29:66:1c:53:
c8:76:71:92:c1:e2:28:27:c3:b0:c4:e0:d8:04:d2:8d:2d:48:
b2:2b:c1:48:85:1d:87:dd:e2:3d:7c:e4:1a:82:b6:e9:73:e2:
a0:87:3c:3e:c3:5f:3a:43:1f:37:bf:52:39:98:2e:7d:48:8e:
68:22:60:b3:6d:ef:24:e2:c2:88:d1:26:7f:a1:47:b7:7f:e9:
34:4d:21:ae:56:b8:07:02:a4:b5:ed:83:e1:33:0e:0e:17:3e:
88:f1:a5:b2:e8:98:9a:db:f9:d2:11:6b:e0:d2:0b:71:a0:d1:
a6:9f:78:3a:b0:b9:ae:8c:e6:a1:8c:4a:9e:7a:de:76:96:2d:
17:52:cc:73:9d:d0:bd:aa:05:b9:a9:85:65:61:12:91:dc:0b:
5f:3e:85:e9:23:76:d3:6a:4f:ba:7d:4c:74:0b:c3:1f:be:f9:
24:d4:89:89:a0:6a:71:a7:01:0d:e8:26:61:76:1f:b6:db:f7:
b8:1d:3d:08:cf:71:58:a8:60:b5:de:41:f4:d4:59:d5:7c:4d:
9c:eb:74:4d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVvWOwWCUxUWFVQNI+J4OUPtAOM4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjI3MDAwMDAwWhcNMjUwMTMxMjM1OTU5
WjB6MUkwRwYDVQQFE0BhM2M0NjU5YzIwN2I2YjEyMjYxNzUyMGJlZTIxMjhkYzcz
MDc5NGU4MzY1OGVkNmI3ZjUyODM1YzFmYzJmNDdmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJl5CSp3fglI6q8cXlPhd6/cruJsA4A8pDBTv8RSLOej0m
laRvF4dWNIUfGQ7gDxK7kX2DvSA0ILTrjUd1bzkI2xhI/etpmlKv3j4HKXjnb/9R
zqac9RSgDya8QWv52Z+DqTVxJ7x42HbCAHsI0BELFv6XP5SJJR+tRb/ygRKvTSR9
HNmhLwK3VqyEDdyckV0HI4FoxfP6MlynrJKkkLmocGrcrsLRObo/zdtMD1to7Io/
xwMzL9TxZbgFP9DefaNw7Y+piHOZCRiYFnkAYBkLMwD0vApiYQ4SPkNKxC2OBYOn
lhGEL2ohajwXxD7jaTskDSP7OiHJpOIVBX5mDMHJAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU+dmrOFrWD5AUgYDTyXZpnDarrZowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzYyNjJkZTM3LWY4NmItNGI5OS04OWEwLTlkM2M5MjAyNTk3NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIQFNAwDQYJKoZIhvcNAQELBQADggEBAL7Xe9iwlTDUpOAIB/59a9CgOBs5
nGkE5rFOcb8HjJ8Dgyl8y/UQAvYXeoND7hlawrazKWYcU8h2cZLB4ignw7DE4NgE
0o0tSLIrwUiFHYfd4j185BqCtulz4qCHPD7DXzpDHze/UjmYLn1IjmgiYLNt7yTi
wojRJn+hR7d/6TRNIa5WuAcCpLXtg+EzDg4XPojxpbLomJrb+dIRa+DSC3Gg0aaf
eDqwua6M5qGMSp563naWLRdSzHOd0L2qBbmphWVhEpHcC18+hekjdtNqT7p9THQL
wx+++STUiYmganGnAQ3oJmF2H7bb97gdPQjPcVioYLXeQfTUWdV8TZzrdE0=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:47:44 2025 by rpki-client