Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/938a720c-e620-49ef-88ff-f6ca7e2277ea.roa
File: 938a720c-e620-49ef-88ff-f6ca7e2277ea.roa (raw, json)
Hash identifier: IoOocsYFgqrOLNfC3H6lttqfDw0MZq6KzBWS5ts2N4E=
Subject key identifier: F0:6A:19:45:A7:7E:A8:EC:16:DE:92:6B:F9:B1:A9:8C:F4:E8:73:E4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 26F61D23E626C4427D01871A0CD141B27750FAE5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/938a720c-e620-49ef-88ff-f6ca7e2277ea.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 66.109.64.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:f6:1d:23:e6:26:c4:42:7d:01:87:1a:0c:d1:41:b2:77:50:fa:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: serialNumber=bb453d6f3f0bdac8a0caa20e292aa345a3d7f8ea104ff40ab38eb95e14a13e2c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ef:da:ac:ec:b3:88:85:7c:9c:16:77:ea:4d:
2b:91:bd:ec:c8:6a:a0:36:1f:89:05:cc:76:8b:f0:
22:03:a2:f3:65:14:b4:1a:f5:22:01:81:c9:c3:80:
10:9b:42:94:ce:b4:82:31:ce:60:4d:29:c0:ec:38:
77:51:11:80:fe:d6:8d:1f:f6:72:16:1d:85:c8:3a:
80:21:95:c9:53:d5:58:f3:c1:25:8d:cd:fa:a9:93:
97:76:6c:8c:05:95:e8:c0:c5:ab:47:ea:6e:63:4d:
4e:e8:45:8e:fa:c4:40:89:36:6e:23:bd:52:62:43:
60:a6:e8:98:9f:33:1b:e6:4a:d5:3b:12:e0:97:b8:
c0:b0:e0:43:90:be:61:0a:44:ee:90:6d:70:14:a0:
14:a5:88:f2:ee:e6:90:33:63:51:98:2b:77:e0:3b:
7f:51:f4:e1:38:fd:fe:7f:eb:b0:c0:64:37:14:23:
b5:9b:97:08:5c:1f:56:f0:1f:e4:4d:9b:3d:2b:55:
ce:86:bb:39:28:b0:b1:fe:2e:10:7c:ea:fa:12:29:
1b:1c:c5:1a:ff:a4:26:99:cb:6a:1d:5f:7d:c6:ea:
e3:19:63:bf:02:c9:7b:58:46:62:a0:dd:47:a4:0a:
71:8f:8c:a0:16:da:74:6f:af:80:7c:7d:c7:de:5e:
90:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6A:19:45:A7:7E:A8:EC:16:DE:92:6B:F9:B1:A9:8C:F4:E8:73:E4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/938a720c-e620-49ef-88ff-f6ca7e2277ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.109.64.0/20
Signature Algorithm: sha256WithRSAEncryption
0b:01:aa:5d:84:6c:5f:ae:6e:f2:82:48:3f:07:00:e1:cb:3c:
13:70:14:f0:65:15:94:32:4d:9e:4f:83:5b:d2:b5:3b:78:3b:
fe:f8:4b:27:69:57:c2:99:83:6b:19:18:7b:80:4a:ee:49:6f:
44:6e:bd:da:db:29:66:73:2b:12:7f:f1:38:92:6e:90:53:3f:
62:51:f5:2d:ae:36:2b:a0:b5:ad:85:42:3f:37:b8:31:03:e9:
29:2b:2a:bd:ab:ea:50:95:68:05:c6:75:c0:da:c6:25:2e:fa:
65:5e:b7:64:c6:a1:ea:fb:b7:c5:ce:91:c3:5e:ed:bd:cc:dd:
92:7c:12:aa:95:d5:fc:43:b3:5b:ad:d3:a3:7b:3c:4d:aa:de:
d9:67:2c:9a:91:15:e7:e1:c0:b8:7a:c4:ed:a4:1c:87:2b:97:
a7:f7:c4:3e:ad:3a:4d:16:57:71:e9:58:e1:bd:fa:31:ac:44:
85:b3:cb:a5:a6:e9:8b:d3:e1:d5:3b:b8:93:9d:ed:01:0b:47:
d8:f3:40:7f:81:d4:d5:ac:a9:28:13:31:a4:61:11:a3:12:fc:
c9:fe:1c:59:71:63:98:bd:ff:6e:3a:50:c2:0d:d1:3f:47:55:
c6:af:27:d6:e1:dd:ce:d2:e8:45:f0:8a:79:45:62:c3:3a:87:
73:0e:ff:0f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJvYdI+YmxEJ9AYcaDNFBsndQ+uUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTAzMDAwMDAwWhcNMjUwMjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BiYjQ1M2Q2ZjNmMGJkYWM4YTBjYWEyMGUyOTJhYTM0NWEz
ZDdmOGVhMTA0ZmY0MGFiMzhlYjk1ZTE0YTEzZTJjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD379qs7LOIhXycFnfqTSuRvezIaqA2H4kFzHaL8CIDovNl
FLQa9SIBgcnDgBCbQpTOtIIxzmBNKcDsOHdREYD+1o0f9nIWHYXIOoAhlclT1Vjz
wSWNzfqpk5d2bIwFlejAxatH6m5jTU7oRY76xECJNm4jvVJiQ2Cm6JifMxvmStU7
EuCXuMCw4EOQvmEKRO6QbXAUoBSliPLu5pAzY1GYK3fgO39R9OE4/f5/67DAZDcU
I7WblwhcH1bwH+RNmz0rVc6GuzkosLH+LhB86voSKRscxRr/pCaZy2odX33G6uMZ
Y78CyXtYRmKg3UekCnGPjKAW2nRvr4B8fcfeXpC9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU8GoZRad+qOwW3pJr+bGpjPToc+QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzkzOGE3MjBjLWU2MjAtNDllZi04OGZmLWY2Y2E3ZTIyNzdlYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARCbUAwDQYJKoZIhvcNAQELBQADggEBAAsBql2EbF+ubvKCSD8HAOHLPBNw
FPBlFZQyTZ5Pg1vStTt4O/74SydpV8KZg2sZGHuASu5Jb0RuvdrbKWZzKxJ/8TiS
bpBTP2JR9S2uNiugta2FQj83uDED6SkrKr2r6lCVaAXGdcDaxiUu+mVet2TGoer7
t8XOkcNe7b3M3ZJ8EqqV1fxDs1ut06N7PE2q3tlnLJqRFefhwLh6xO2kHIcrl6f3
xD6tOk0WV3HpWOG9+jGsRIWzy6Wm6YvT4dU7uJOd7QELR9jzQH+B1NWsqSgTMaRh
EaMS/Mn+HFlxY5i9/246UMIN0T9HVcavJ9bh3c7S6EXwinlFYsM6h3MO/w8=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:25:14 2025 by rpki-client