Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a560802-77c4-477b-b550-30b4a129a2a5.roa
File: 9a560802-77c4-477b-b550-30b4a129a2a5.roa (raw, json)
Hash identifier: QuXD5ZAOwHBPV4uuyobW9UeRFupR0rnjCiQHSMxZ2k4=
Subject key identifier: 1C:97:D0:0F:F7:13:4F:7B:A5:28:0B:F4:21:29:D3:8E:7C:F1:E1:38
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 65E0C361E8C8FC912060CF8394F50BC1D09A01EF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a560802-77c4-477b-b550-30b4a129a2a5.roa
Signing time: Mon 02 Dec 2024 00:00:00 +0000
ROA not before: Mon 02 Dec 2024 00:00:00 +0000
ROA not after: Mon 06 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 192.43.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:e0:c3:61:e8:c8:fc:91:20:60:cf:83:94:f5:0b:c1:d0:9a:01:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 2 00:00:00 2024 GMT
Not After : Jan 6 23:59:59 2025 GMT
Subject: serialNumber=6e6bace8884f39b074801a88fe87f38a7832aaae9ad2be376eacdd9f0f5ebd39, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:8e:44:ff:97:a9:ba:7b:ee:4d:53:66:fb:
af:b9:91:dc:92:23:1d:6b:b0:0b:06:58:54:d3:27:
ae:8c:aa:f8:dd:28:04:ab:50:51:62:d1:35:cf:65:
8d:4c:9c:e1:ab:4e:a1:48:b3:04:95:1b:c5:a5:29:
b3:e0:3f:ad:bf:62:2b:01:40:ce:cb:38:a8:de:97:
b9:50:74:6b:b8:7a:11:d6:84:7e:3f:62:2c:a0:c6:
ca:fa:0d:0c:12:ab:b5:d1:f7:be:b6:de:2b:84:c1:
5c:ba:b4:47:a9:67:2d:43:14:85:14:33:ed:a2:c3:
10:22:78:59:c1:c3:3c:93:8b:a4:a6:69:de:72:28:
1c:de:06:d2:16:a6:f2:e2:6b:67:fb:31:6f:db:ae:
92:f1:ad:a3:ef:87:12:e2:2d:2d:90:9b:8b:d9:d7:
19:f9:ce:1b:91:0f:b0:1c:51:a6:d5:fd:53:a8:ce:
96:61:c2:c9:7a:e7:98:31:cd:72:46:32:1f:c6:71:
b9:c5:ee:f0:94:1e:ab:9b:5b:1e:3f:c3:ac:b1:12:
a4:72:bc:cc:5a:dc:f3:09:62:c1:e9:76:94:76:bc:
94:8c:85:2d:a7:73:c6:b4:d8:54:c1:96:9c:f6:00:
8e:6c:8a:c4:12:64:e8:d9:09:bc:9d:c0:5e:1c:60:
5f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:97:D0:0F:F7:13:4F:7B:A5:28:0B:F4:21:29:D3:8E:7C:F1:E1:38
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a560802-77c4-477b-b550-30b4a129a2a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.43.175.0/24
Signature Algorithm: sha256WithRSAEncryption
17:b8:f5:f7:0a:0c:fd:6e:04:6e:85:45:f3:23:b3:7e:12:22:
f9:72:08:eb:02:59:aa:65:3a:68:60:06:9c:3d:89:62:95:6a:
8a:5e:1e:a1:24:43:df:2b:bb:c3:67:55:10:0b:36:c3:b4:19:
3d:9d:78:93:ee:3b:28:c4:f1:27:be:43:ce:b0:bf:f9:b9:7a:
2b:67:8d:84:93:ee:1a:fb:bf:fb:84:90:e6:73:61:a1:a1:22:
35:cd:fa:6d:31:59:d2:34:11:06:36:87:ca:7d:d6:22:5c:85:
85:6f:53:6b:f1:f8:6f:71:b6:02:68:89:23:a1:fd:f2:b4:8d:
62:1f:54:80:72:3c:6c:22:30:6e:16:ff:ea:42:60:ee:a3:8f:
aa:cc:1d:aa:6b:ac:e5:76:e0:91:55:fd:86:78:31:c4:da:5c:
bb:e4:14:9e:0a:75:5f:58:f8:ff:92:eb:65:de:85:fd:09:38:
d7:b4:7d:bf:9b:73:7a:62:6f:93:61:d0:e3:2d:22:99:e6:b6:
2e:0a:ec:68:17:ae:7d:cd:f0:03:d1:35:e2:d6:f1:76:c8:2f:
2c:e9:91:5d:28:b6:21:e6:be:98:83:d0:0d:9d:f8:2b:13:7d:
cb:16:f5:d9:00:2c:e9:29:02:93:a0:a3:67:8f:40:ca:75:fd:
b4:a6:1f:6c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZeDDYejI/JEgYM+DlPULwdCaAe8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjAyMDAwMDAwWhcNMjUwMTA2MjM1OTU5
WjB6MUkwRwYDVQQFE0A2ZTZiYWNlODg4NGYzOWIwNzQ4MDFhODhmZTg3ZjM4YTc4
MzJhYWFlOWFkMmJlMzc2ZWFjZGQ5ZjBmNWViZDM5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8K45E/5epunvuTVNm+6+5kdySIx1rsAsGWFTTJ66Mqvjd
KASrUFFi0TXPZY1MnOGrTqFIswSVG8WlKbPgP62/YisBQM7LOKjel7lQdGu4ehHW
hH4/Yiygxsr6DQwSq7XR97623iuEwVy6tEepZy1DFIUUM+2iwxAieFnBwzyTi6Sm
ad5yKBzeBtIWpvLia2f7MW/brpLxraPvhxLiLS2Qm4vZ1xn5zhuRD7AcUabV/VOo
zpZhwsl655gxzXJGMh/GcbnF7vCUHqubWx4/w6yxEqRyvMxa3PMJYsHpdpR2vJSM
hS2nc8a02FTBlpz2AI5sisQSZOjZCbydwF4cYF/DAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUHJfQD/cTT3ulKAv0ISnTjnzx4TgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzlhNTYwODAyLTc3YzQtNDc3Yi1iNTUwLTMwYjRhMTI5YTJhNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADAK68wDQYJKoZIhvcNAQELBQADggEBABe49fcKDP1uBG6FRfMjs34SIvly
COsCWaplOmhgBpw9iWKVaopeHqEkQ98ru8NnVRALNsO0GT2deJPuOyjE8Se+Q86w
v/m5eitnjYST7hr7v/uEkOZzYaGhIjXN+m0xWdI0EQY2h8p91iJchYVvU2vx+G9x
tgJoiSOh/fK0jWIfVIByPGwiMG4W/+pCYO6jj6rMHaprrOV24JFV/YZ4McTaXLvk
FJ4KdV9Y+P+S62Xehf0JONe0fb+bc3pib5Nh0OMtIpnmti4K7GgXrn3N8APRNeLW
8XbILyzpkV0otiHmvpiD0A2d+CsTfcsW9dkALOkpApOgo2ePQMp1/bSmH2w=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:50:36 2025 by rpki-client