Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a3e09e4-61b1-4111-88fb-b314e23e74fc.roa
File: 9a3e09e4-61b1-4111-88fb-b314e23e74fc.roa (raw, json)
Hash identifier: b/QLmmntOipAyVgYOUvp/MIlpH/SCsmTY14Mwo6zblo=
Subject key identifier: 17:01:0B:7D:46:3B:C8:FD:27:5F:13:39:61:07:21:F3:7D:E7:40:28
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 21397EA207EB280463A01A9C054C69D0C61362C7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a3e09e4-61b1-4111-88fb-b314e23e74fc.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.78.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:39:7e:a2:07:eb:28:04:63:a0:1a:9c:05:4c:69:d0:c6:13:62:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=45e4543106cdeb2d06e53a305226533b202c27a47b8cd76519e61df28c6dc27d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:18:3c:8d:8b:b7:1d:08:4a:53:af:16:7b:03:
9d:cb:f1:9c:89:4e:13:d5:d3:44:d0:03:dc:d5:27:
15:e5:b7:8b:ad:c5:07:92:5c:b4:83:dd:9d:78:b9:
ae:d6:42:aa:6a:36:9f:10:e2:bc:b7:0b:65:6f:ab:
eb:06:52:7d:88:fc:bd:27:8d:31:52:a0:3b:01:95:
66:c6:72:2d:db:d7:c1:8e:a7:2a:04:5d:c8:f4:f4:
ad:f7:86:ad:4e:78:09:fc:e5:7f:23:45:cf:23:7b:
db:b6:e2:9c:53:09:cb:1d:05:47:05:e6:a5:71:03:
d7:27:7d:ab:54:10:66:56:2c:93:06:d0:98:cd:fd:
93:7a:76:58:38:d3:4e:51:f3:56:a3:f6:8c:cc:80:
5a:61:2c:af:c3:ea:d3:2e:85:d2:f9:67:2b:49:5b:
96:13:9a:14:ee:bf:07:8b:99:ad:e1:ba:8e:f3:f4:
ab:d1:5d:5b:27:39:b3:37:14:bf:63:3f:9b:fc:8b:
e0:ab:76:1c:25:ce:d7:56:3b:a4:ac:37:cc:9c:aa:
f5:34:7f:40:3f:3e:cd:93:66:d9:76:f8:60:ed:6e:
d1:26:2e:2b:b1:64:a6:92:34:9e:fd:ff:b5:3b:cf:
ed:39:5d:b9:4c:11:6c:b2:22:aa:86:06:4b:8c:ff:
13:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:01:0B:7D:46:3B:C8:FD:27:5F:13:39:61:07:21:F3:7D:E7:40:28
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a3e09e4-61b1-4111-88fb-b314e23e74fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.78.240.0/20
Signature Algorithm: sha256WithRSAEncryption
cc:a4:4e:2e:b7:45:30:ec:57:d7:e0:9b:31:4a:11:40:60:0c:
de:99:f6:3e:c9:85:99:42:48:50:37:16:67:8c:3d:0b:d5:d3:
03:1f:e6:24:a1:22:0d:50:20:85:3c:64:0a:d2:c0:d3:8a:fd:
6a:7b:7a:85:ac:2c:ae:a3:c0:20:e6:e3:68:5e:1f:90:e0:f2:
59:99:68:66:68:c2:83:8e:15:2b:31:3f:d2:c8:d7:af:e0:81:
2e:75:10:30:6a:9d:bb:9c:ac:3a:2e:bf:4f:86:6a:71:a2:75:
56:79:73:74:3a:e4:20:a5:f8:8c:d0:62:42:fc:9f:6b:f5:0d:
18:e3:4e:80:2d:0a:70:df:66:e5:01:aa:6d:23:b7:05:a9:d9:
d6:ca:07:17:4b:5c:83:2e:fe:40:df:f7:95:cc:9e:bf:43:82:
5c:93:cf:f7:c4:6e:d0:5f:9d:7f:34:6f:aa:6a:1b:15:e7:cb:
15:68:61:6c:43:da:a4:dc:ed:d2:9f:ea:42:75:21:7c:99:53:
2b:0b:46:14:71:d9:ae:a4:20:6e:30:53:b3:26:c8:6f:f6:77:
74:79:fa:34:8e:54:75:23:41:9c:80:f2:8a:a8:8a:ff:1b:ff:
4e:fa:84:d4:2d:92:ef:2a:07:6a:ce:b3:08:3f:5e:68:9d:7d:
db:f7:ab:3d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUITl+ogfrKARjoBqcBUxp0MYTYscwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjI3MDAwMDAwWhcNMjUwMTMxMjM1OTU5
WjB6MUkwRwYDVQQFE0A0NWU0NTQzMTA2Y2RlYjJkMDZlNTNhMzA1MjI2NTMzYjIw
MmMyN2E0N2I4Y2Q3NjUxOWU2MWRmMjhjNmRjMjdkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCnGDyNi7cdCEpTrxZ7A53L8ZyJThPV00TQA9zVJxXlt4ut
xQeSXLSD3Z14ua7WQqpqNp8Q4ry3C2Vvq+sGUn2I/L0njTFSoDsBlWbGci3b18GO
pyoEXcj09K33hq1OeAn85X8jRc8je9u24pxTCcsdBUcF5qVxA9cnfatUEGZWLJMG
0JjN/ZN6dlg4005R81aj9ozMgFphLK/D6tMuhdL5ZytJW5YTmhTuvweLma3huo7z
9KvRXVsnObM3FL9jP5v8i+CrdhwlztdWO6SsN8ycqvU0f0A/Ps2TZtl2+GDtbtEm
LiuxZKaSNJ79/7U7z+05XblMEWyyIqqGBkuM/xNlAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUFwELfUY7yP0nXxM5YQch833nQCgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzlhM2UwOWU0LTYxYjEtNDExMS04OGZiLWIzMTRlMjNlNzRmYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARjTvAwDQYJKoZIhvcNAQELBQADggEBAMykTi63RTDsV9fgmzFKEUBgDN6Z
9j7JhZlCSFA3FmeMPQvV0wMf5iShIg1QIIU8ZArSwNOK/Wp7eoWsLK6jwCDm42he
H5Dg8lmZaGZowoOOFSsxP9LI16/ggS51EDBqnbucrDouv0+GanGidVZ5c3Q65CCl
+IzQYkL8n2v1DRjjToAtCnDfZuUBqm0jtwWp2dbKBxdLXIMu/kDf95XMnr9DglyT
z/fEbtBfnX80b6pqGxXnyxVoYWxD2qTc7dKf6kJ1IXyZUysLRhRx2a6kIG4wU7Mm
yG/2d3R5+jSOVHUjQZyA8oqoiv8b/076hNQtku8qB2rOswg/Xmidfdv3qz0=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:01:05 2025 by rpki-client