Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9793ba84-5d98-4c2d-af7b-6723e2f6ea0a.roa
File: 9793ba84-5d98-4c2d-af7b-6723e2f6ea0a.roa (raw, json)
Hash identifier: HydI9BDJaEvXmZlo0/7GhmtXPPca35ep8veb4bTA5qw=
Subject key identifier: 71:2E:7E:6D:C3:4C:27:16:93:AC:1F:1B:12:CD:B9:7E:26:3E:CE:BE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4C8E5807356EBD652B7080A12A4528BDDBC9B50A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9793ba84-5d98-4c2d-af7b-6723e2f6ea0a.roa
Signing time: Mon 23 Dec 2024 00:00:00 +0000
ROA not before: Mon 23 Dec 2024 00:00:00 +0000
ROA not after: Mon 27 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 54.43.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:8e:58:07:35:6e:bd:65:2b:70:80:a1:2a:45:28:bd:db:c9:b5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 23 00:00:00 2024 GMT
Not After : Jan 27 23:59:59 2025 GMT
Subject: serialNumber=05f2b42cf59b20305a75e7a1d9a425cc8665d535782c72b32664cac8e1031806, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fc:d3:84:97:80:27:a2:23:07:9c:cb:bb:3e:
2f:84:ea:69:ff:3c:0a:2f:39:33:0c:aa:36:2d:62:
1b:72:3e:c0:27:45:2d:77:17:c4:b9:85:b4:ef:ce:
96:69:33:57:2f:e8:3b:aa:9a:a7:c3:94:b3:9d:0e:
7d:33:f5:d4:a0:67:67:32:60:68:7d:32:1a:a6:11:
03:43:a5:7a:44:c6:09:44:c6:90:61:e4:3d:7c:3e:
77:cc:db:17:f8:f9:15:14:e1:23:c3:d4:aa:db:d2:
a9:91:b4:de:50:ff:13:f6:9f:9d:75:b4:58:40:96:
b0:52:5d:3f:1e:33:2f:78:2c:6e:29:ff:ba:14:ae:
92:9b:51:8f:67:af:34:8c:00:fd:fe:d4:ed:8e:e2:
c7:51:94:47:62:07:ab:cc:c8:f5:06:b3:5a:ed:21:
db:c3:e6:f3:d6:08:23:f4:3f:2f:bf:20:8d:59:cf:
ef:d6:cc:12:de:ba:e6:30:ea:07:08:36:70:99:b1:
6c:4f:ff:87:a1:4d:fd:17:40:2b:94:6a:41:fc:6f:
f0:81:a5:43:6b:4a:52:2b:2c:ab:c9:c8:de:1c:bf:
c2:47:9d:7f:8f:6e:10:aa:d6:58:24:e9:31:67:66:
85:a7:c3:3b:86:3a:ff:fc:aa:6c:38:60:d2:eb:f4:
32:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2E:7E:6D:C3:4C:27:16:93:AC:1F:1B:12:CD:B9:7E:26:3E:CE:BE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9793ba84-5d98-4c2d-af7b-6723e2f6ea0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.43.0.0/16
Signature Algorithm: sha256WithRSAEncryption
67:e3:ea:4d:dd:f9:25:25:00:bd:2b:e0:27:ec:aa:2b:a5:02:
54:cb:09:1b:d3:90:8d:4a:a0:eb:f5:e8:34:69:a0:dc:f3:e0:
98:c6:e3:3e:d6:83:bd:b0:74:b9:e5:06:47:d0:c8:17:42:00:
b6:c3:fe:e1:29:e8:c1:c9:09:c2:98:5b:27:1d:4d:be:ee:54:
37:38:f5:cc:b9:c3:ba:29:52:a6:5e:43:a9:38:4e:ef:7d:aa:
cb:b9:42:da:39:6a:43:38:02:91:0e:a7:32:a7:f4:d1:34:fa:
43:f7:76:d6:ae:61:c8:3d:be:0e:5e:07:f1:dc:b1:6a:07:35:
41:0f:c5:a0:9c:c9:24:30:f9:f8:8e:fb:f4:12:17:3d:32:6c:
68:d6:c5:17:a5:a2:64:90:f2:fa:43:3b:24:96:cb:7e:32:56:
5f:fb:de:1e:94:1d:f0:32:c3:73:89:9a:d6:c3:cd:4c:c6:1c:
26:93:b9:88:23:1b:83:4a:31:41:f1:71:5f:f3:f5:20:ac:c5:
ac:fd:94:9e:86:48:43:ca:0f:ba:17:8e:47:c8:f1:59:e6:ae:
e5:cf:92:f1:79:06:b0:97:da:2a:99:ec:c3:b8:7f:34:a9:df:
4b:84:48:ad:0c:4a:7b:f0:a0:61:7a:64:10:ee:52:81:f6:66:
97:0f:90:d4
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUTI5YBzVuvWUrcIChKkUovdvJtQowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjIzMDAwMDAwWhcNMjUwMTI3MjM1OTU5
WjB6MUkwRwYDVQQFE0AwNWYyYjQyY2Y1OWIyMDMwNWE3NWU3YTFkOWE0MjVjYzg2
NjVkNTM1NzgyYzcyYjMyNjY0Y2FjOGUxMDMxODA2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCb/NOEl4AnoiMHnMu7Pi+E6mn/PAovOTMMqjYtYhtyPsAn
RS13F8S5hbTvzpZpM1cv6DuqmqfDlLOdDn0z9dSgZ2cyYGh9MhqmEQNDpXpExglE
xpBh5D18PnfM2xf4+RUU4SPD1Krb0qmRtN5Q/xP2n511tFhAlrBSXT8eMy94LG4p
/7oUrpKbUY9nrzSMAP3+1O2O4sdRlEdiB6vMyPUGs1rtIdvD5vPWCCP0Py+/II1Z
z+/WzBLeuuYw6gcINnCZsWxP/4ehTf0XQCuUakH8b/CBpUNrSlIrLKvJyN4cv8JH
nX+PbhCq1lgk6TFnZoWnwzuGOv/8qmw4YNLr9DJVAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUcS5+bcNMJxaTrB8bEs25fiY+zr4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzk3OTNiYTg0LTVkOTgtNGMyZC1hZjdiLTY3MjNlMmY2ZWEwYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA2KzANBgkqhkiG9w0BAQsFAAOCAQEAZ+PqTd35JSUAvSvgJ+yqK6UCVMsJ
G9OQjUqg6/XoNGmg3PPgmMbjPtaDvbB0ueUGR9DIF0IAtsP+4SnowckJwphbJx1N
vu5UNzj1zLnDuilSpl5DqThO732qy7lC2jlqQzgCkQ6nMqf00TT6Q/d21q5hyD2+
Dl4H8dyxagc1QQ/FoJzJJDD5+I779BIXPTJsaNbFF6WiZJDy+kM7JJbLfjJWX/ve
HpQd8DLDc4ma1sPNTMYcJpO5iCMbg0oxQfFxX/P1IKzFrP2UnoZIQ8oPuheOR8jx
Weau5c+S8XkGsJfaKpnsw7h/NKnfS4RIrQxKe/CgYXpkEO5SgfZmlw+Q1A==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:46 2025 by rpki-client