Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bddc70f-633e-45e7-87bf-3deb8fc20ec9.roa
File: 8bddc70f-633e-45e7-87bf-3deb8fc20ec9.roa (raw, json)
Hash identifier: qvUrdf1LEEqTuGCaHer7RDb/9x78gUYufX1TTlumYso=
Subject key identifier: 4E:6C:8D:E4:49:9E:E6:29:DF:2A:60:18:96:06:B2:3F:AE:B9:81:E4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 53E1B6FB0934DD1B443B5B7B2C85039D3BEE3816
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bddc70f-633e-45e7-87bf-3deb8fc20ec9.roa
Signing time: Fri 07 Mar 2025 00:01:39 +0000
ROA not before: Fri 07 Mar 2025 00:01:39 +0000
ROA not after: Fri 11 Apr 2025 23:59:59 +0000
asID: 6167
IP address blocks: 139.56.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:e1:b6:fb:09:34:dd:1b:44:3b:5b:7b:2c:85:03:9d:3b:ee:38:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 7 00:01:39 2025 GMT
Not After : Apr 11 23:59:59 2025 GMT
Subject: serialNumber=3215840d9848970098e973c8808062b63eeef928897a3d0233fb4feb58ec07b6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6e:ce:ee:52:bf:53:5f:e5:98:9a:8f:1f:2a:
45:8d:22:5a:d6:5d:11:36:3d:9b:04:ad:85:23:3f:
5d:0c:88:4d:77:86:1c:d8:b6:52:14:27:d1:3a:69:
e3:ca:eb:ea:0a:e8:cb:da:70:a3:48:f7:4f:3c:51:
4a:94:c5:f7:bb:2e:e9:0c:35:7a:60:71:5c:2e:9c:
f6:5b:0c:a1:18:b1:da:58:ec:ee:d5:06:64:c1:94:
d4:45:45:13:b5:e2:c5:c1:02:2b:15:94:9d:d8:38:
7a:1a:ff:90:91:5b:22:05:0f:00:bc:93:a5:75:56:
70:92:cf:0d:46:8e:1a:4f:1d:54:37:32:51:2a:65:
9d:3c:2f:95:f4:75:a0:0b:ec:ab:eb:9a:5c:71:31:
e3:c9:64:6a:e8:6a:57:85:c8:ff:94:d3:fe:17:96:
eb:4c:51:77:32:31:dd:72:58:84:e5:cf:30:e2:1b:
f9:03:ff:74:91:3e:3b:62:ee:54:5c:62:7d:6f:a9:
dd:42:5b:66:9c:72:21:eb:dd:f8:4a:b3:9e:18:ee:
f4:fe:64:0a:78:1e:1e:f2:5c:59:75:7f:2b:5d:e8:
7f:a6:90:b1:07:90:05:53:4f:23:b2:74:59:55:5a:
55:6c:c3:59:67:34:98:06:54:28:37:7d:52:de:e8:
36:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6C:8D:E4:49:9E:E6:29:DF:2A:60:18:96:06:B2:3F:AE:B9:81:E4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bddc70f-633e-45e7-87bf-3deb8fc20ec9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.56.3.0/24
Signature Algorithm: sha256WithRSAEncryption
39:2d:57:b3:4d:6b:d4:10:d6:c0:b5:cb:47:ad:f7:1b:c7:bb:
89:a5:e1:2f:84:06:22:8a:8b:05:13:41:4f:ef:7c:83:e9:41:
70:f2:70:2f:31:54:90:b5:8a:b8:fb:fe:d0:86:6d:d6:fe:04:
2d:19:02:81:fa:87:96:59:0d:7d:f5:cc:63:c7:bd:52:91:55:
f6:e2:be:93:88:c7:3c:e5:bc:0b:32:d9:94:e7:62:c2:42:68:
20:fb:91:8c:68:bd:c9:f1:04:30:86:92:0e:db:05:e7:92:e4:
16:38:e3:82:e0:63:d9:3d:4c:dc:ef:5d:14:90:98:c9:36:89:
f8:81:01:f2:35:05:86:ba:13:a4:95:a5:35:78:4f:93:5d:ca:
15:20:6f:e6:1d:a2:03:8e:9e:74:9f:e4:f3:f8:04:50:42:6e:
6f:f8:1e:49:f4:2d:51:43:18:0f:fe:30:05:29:31:72:51:cf:
4e:e4:50:db:df:3b:00:16:02:d3:5f:5b:e3:70:ea:f4:cd:93:
68:1c:13:b1:fc:3c:6b:bb:3e:37:9b:a4:27:9f:95:73:f5:78:
75:ad:77:6d:52:14:e7:7c:75:4e:11:26:da:6f:20:7d:9f:21:
18:fe:ab:9c:cc:fb:40:59:ce:06:f4:2e:cb:2b:6b:0b:4d:c7:
ad:b1:c4:52
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUU+G2+wk03RtEO1t7LIUDnTvuOBYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzA3MDAwMTM5WhcNMjUwNDExMjM1OTU5
WjB6MUkwRwYDVQQFE0AzMjE1ODQwZDk4NDg5NzAwOThlOTczYzg4MDgwNjJiNjNl
ZWVmOTI4ODk3YTNkMDIzM2ZiNGZlYjU4ZWMwN2I2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDCbs7uUr9TX+WYmo8fKkWNIlrWXRE2PZsErYUjP10MiE13
hhzYtlIUJ9E6aePK6+oK6MvacKNI9088UUqUxfe7LukMNXpgcVwunPZbDKEYsdpY
7O7VBmTBlNRFRRO14sXBAisVlJ3YOHoa/5CRWyIFDwC8k6V1VnCSzw1GjhpPHVQ3
MlEqZZ08L5X0daAL7KvrmlxxMePJZGroaleFyP+U0/4XlutMUXcyMd1yWITlzzDi
G/kD/3SRPjti7lRcYn1vqd1CW2acciHr3fhKs54Y7vT+ZAp4Hh7yXFl1fytd6H+m
kLEHkAVTTyOydFlVWlVsw1lnNJgGVCg3fVLe6DbtAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUTmyN5Eme5infKmAYlgayP665geQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzhiZGRjNzBmLTYzM2UtNDVlNy04N2JmLTNkZWI4ZmMyMGVjOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACLOAMwDQYJKoZIhvcNAQELBQADggEBADktV7NNa9QQ1sC1y0et9xvHu4ml
4S+EBiKKiwUTQU/vfIPpQXDycC8xVJC1irj7/tCGbdb+BC0ZAoH6h5ZZDX31zGPH
vVKRVfbivpOIxzzlvAsy2ZTnYsJCaCD7kYxovcnxBDCGkg7bBeeS5BY444LgY9k9
TNzvXRSQmMk2ifiBAfI1BYa6E6SVpTV4T5NdyhUgb+YdogOOnnSf5PP4BFBCbm/4
Hkn0LVFDGA/+MAUpMXJRz07kUNvfOwAWAtNfW+Nw6vTNk2gcE7H8PGu7PjebpCef
lXP1eHWtd21SFOd8dU4RJtpvIH2fIRj+q5zM+0BZzgb0LssrawtNx62xxFI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:17:50 2025 by rpki-client