Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b83bab0f-3fbc-4c47-b1db-2ffdbc094e4e.roa
File: b83bab0f-3fbc-4c47-b1db-2ffdbc094e4e.roa (raw, json)
Hash identifier: qnvZrbdbXJUJ4eFu7QoaKJkoMcycFRXIof0z/RZ4ACw=
Subject key identifier: 2D:B1:65:4F:73:50:43:45:EE:D3:5C:C8:ED:92:E7:5D:D3:90:77:C8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3DBFAC3160F5A569F25140B321317B31D6604F94
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b83bab0f-3fbc-4c47-b1db-2ffdbc094e4e.roa
Signing time: Sat 07 Dec 2024 00:00:00 +0000
ROA not before: Sat 07 Dec 2024 00:00:00 +0000
ROA not after: Sat 11 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 56.112.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:bf:ac:31:60:f5:a5:69:f2:51:40:b3:21:31:7b:31:d6:60:4f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 7 00:00:00 2024 GMT
Not After : Jan 11 23:59:59 2025 GMT
Subject: serialNumber=2416c545fa343b7aad36bc95454d8da7ce0a742a41755b05228eafba7da6ac01, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:55:26:c0:e2:a1:c5:86:57:5d:3d:5c:bd:a8:
ac:1d:8a:3a:e4:df:60:32:b4:a4:60:b4:5b:53:ef:
ba:05:28:7c:e0:1e:95:58:45:37:40:be:6d:45:5c:
0f:9e:03:af:1f:2a:9e:a4:d0:e3:61:04:f6:ed:92:
5f:43:ad:8a:30:8a:29:6c:0d:83:a4:f0:c2:13:e8:
2e:d9:03:8d:b7:9b:2d:9a:65:4b:71:b5:73:33:e0:
aa:c0:a1:ab:5d:99:65:24:c1:2d:20:07:a8:de:ce:
fa:fb:70:70:04:bd:d5:6c:a4:1c:72:c7:9f:3e:5d:
0f:0b:74:33:ed:a8:05:56:a3:e0:82:81:00:e8:ca:
be:cd:35:1a:ad:2d:b4:c9:cc:e4:39:eb:83:0c:4c:
2a:4d:3c:b4:d8:66:8b:fe:7a:bd:2c:8e:9c:22:79:
4d:91:b2:ed:cc:c0:e2:1e:d5:26:db:65:e4:58:bb:
86:f2:58:8a:a3:45:f0:91:ad:fd:c0:88:3d:76:37:
98:e8:79:42:f5:fd:c4:b4:ec:a4:96:1c:72:16:09:
0a:8a:70:d3:c9:77:32:5a:73:c9:69:b9:21:6c:5f:
b0:78:4e:46:8e:a4:78:48:e1:8a:9c:5b:30:e1:fa:
95:b7:99:fb:84:20:89:6e:fd:af:53:38:92:94:5a:
a1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B1:65:4F:73:50:43:45:EE:D3:5C:C8:ED:92:E7:5D:D3:90:77:C8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b83bab0f-3fbc-4c47-b1db-2ffdbc094e4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.112.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c8:3d:24:39:cc:c3:1a:01:f6:0c:38:32:cd:8d:bb:12:ed:f6:
41:ff:39:dc:37:f1:cf:78:9c:b3:5b:f4:34:61:93:2b:67:ab:
50:2e:6b:c8:ae:28:b8:41:4e:93:f1:fa:95:2e:d3:19:38:3f:
7e:2b:18:42:21:39:e9:4d:17:a5:28:5d:b1:f2:ba:f2:9c:23:
e9:8c:d5:88:09:1b:ee:94:33:c2:22:cd:70:4d:78:5c:7b:ab:
47:d6:48:4f:2e:f3:1b:4d:14:d2:8b:8f:28:f7:ba:7e:69:bd:
74:5a:a4:d0:39:73:7a:6e:d1:2f:db:7c:fb:1d:96:48:44:36:
e4:4b:be:96:16:c8:66:17:4b:54:24:bd:d4:96:08:c3:86:bc:
88:2e:5b:6b:ec:91:8b:98:88:e4:71:58:45:b9:3f:a9:eb:c7:
cf:48:17:7f:aa:06:4f:e0:40:20:a9:22:32:57:33:fd:ef:82:
a4:36:fa:71:06:7e:cf:b5:ad:fa:5a:8a:14:d9:58:df:e2:96:
b8:31:eb:b3:66:af:a0:b7:d3:46:36:9c:ef:5c:19:4a:fc:43:
d3:c8:1c:db:54:8b:fc:0d:c2:3c:ff:6f:2c:80:40:c1:9a:89:
72:5c:ac:6e:88:32:bd:cb:1e:58:70:dd:e3:14:f9:fe:f6:fb:
cb:97:c5:89
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUPb+sMWD1pWnyUUCzITF7MdZgT5QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjA3MDAwMDAwWhcNMjUwMTExMjM1OTU5
WjB6MUkwRwYDVQQFE0AyNDE2YzU0NWZhMzQzYjdhYWQzNmJjOTU0NTRkOGRhN2Nl
MGE3NDJhNDE3NTViMDUyMjhlYWZiYTdkYTZhYzAxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDGVSbA4qHFhlddPVy9qKwdijrk32AytKRgtFtT77oFKHzg
HpVYRTdAvm1FXA+eA68fKp6k0ONhBPbtkl9DrYowiilsDYOk8MIT6C7ZA423my2a
ZUtxtXMz4KrAoatdmWUkwS0gB6jezvr7cHAEvdVspBxyx58+XQ8LdDPtqAVWo+CC
gQDoyr7NNRqtLbTJzOQ564MMTCpNPLTYZov+er0sjpwieU2Rsu3MwOIe1SbbZeRY
u4byWIqjRfCRrf3AiD12N5joeUL1/cS07KSWHHIWCQqKcNPJdzJac8lpuSFsX7B4
TkaOpHhI4YqcWzDh+pW3mfuEIIlu/a9TOJKUWqETAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQULbFlT3NQQ0Xu01zI7ZLnXdOQd8gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2I4M2JhYjBmLTNmYmMtNGM0Ny1iMWRiLTJmZmRiYzA5NGU0ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4cDANBgkqhkiG9w0BAQsFAAOCAQEAyD0kOczDGgH2DDgyzY27Eu32Qf85
3Dfxz3ics1v0NGGTK2erUC5ryK4ouEFOk/H6lS7TGTg/fisYQiE56U0XpShdsfK6
8pwj6YzViAkb7pQzwiLNcE14XHurR9ZITy7zG00U0ouPKPe6fmm9dFqk0Dlzem7R
L9t8+x2WSEQ25Eu+lhbIZhdLVCS91JYIw4a8iC5ba+yRi5iI5HFYRbk/qevHz0gX
f6oGT+BAIKkiMlcz/e+CpDb6cQZ+z7Wt+lqKFNlY3+KWuDHrs2avoLfTRjac71wZ
SvxD08gc21SL/A3CPP9vLIBAwZqJclysbogyvcseWHDd4xT5/vb7y5fFiQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:31:13 2025 by rpki-client