Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc32e47b-f5f0-47d7-84bf-27bbe318271e.roa
File: bc32e47b-f5f0-47d7-84bf-27bbe318271e.roa (raw, json)
Hash identifier: sHyWfZd6TNiW/TdPA43bP6P/rINg/9pCe5p5uYrvsWw=
Subject key identifier: 54:75:F0:F4:AD:0D:A1:F2:B0:F5:7F:95:4F:E2:40:11:73:BA:FA:8A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4E776F8A9226A913D03808912793A7806C47E06F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc32e47b-f5f0-47d7-84bf-27bbe318271e.roa
Signing time: Mon 02 Dec 2024 00:00:00 +0000
ROA not before: Mon 02 Dec 2024 00:00:00 +0000
ROA not after: Mon 06 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 198.99.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:77:6f:8a:92:26:a9:13:d0:38:08:91:27:93:a7:80:6c:47:e0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 2 00:00:00 2024 GMT
Not After : Jan 6 23:59:59 2025 GMT
Subject: serialNumber=013d93b1c1b0b9f532395210deda6d3ead9efeb1e01ed48be87f74cbf8e3b82f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:10:d9:78:ac:6a:94:06:e4:6f:27:c6:61:a3:
0c:f0:6e:78:23:e2:41:bd:6f:f9:0c:7a:4e:03:5e:
f1:91:e6:71:d1:06:7d:3e:f1:dc:7d:e6:39:2e:1f:
39:fe:c1:cc:c7:cd:56:17:b9:53:c7:8a:da:06:96:
7d:80:82:b1:c7:5c:cb:41:91:dd:26:53:7d:52:9b:
47:79:17:85:f9:1e:ea:c1:8b:3c:90:16:d7:bc:ad:
51:0b:02:c7:7f:3b:97:cf:d0:66:1a:e2:60:47:ba:
9a:d3:af:29:1d:7c:3e:75:71:ed:97:04:24:44:99:
00:a6:64:52:1a:2a:a6:67:b7:c0:f0:56:22:4d:0a:
2f:97:fd:6e:c6:51:a9:1d:d7:d4:b8:fa:57:d4:09:
2a:5c:ba:90:20:49:6f:bc:7a:0e:ef:22:6d:14:8e:
a7:a2:84:db:4e:c3:d7:e7:41:54:45:9f:4d:57:96:
e7:fa:c1:44:30:2f:0a:cd:41:08:84:fe:97:20:4e:
52:53:8c:c9:63:79:51:e1:82:b3:2d:36:9b:ae:71:
f8:15:0d:1e:84:e4:d9:71:52:81:23:ca:fc:e0:af:
f4:4c:61:29:53:12:eb:61:43:17:43:16:57:0c:4e:
be:0e:48:e8:c8:bc:ce:a6:fc:e2:f6:3f:14:44:88:
f2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:75:F0:F4:AD:0D:A1:F2:B0:F5:7F:95:4F:E2:40:11:73:BA:FA:8A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc32e47b-f5f0-47d7-84bf-27bbe318271e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.99.3.0/24
Signature Algorithm: sha256WithRSAEncryption
24:50:65:82:fe:c8:7d:7c:e1:85:8b:32:9e:95:fa:ae:4b:4c:
b0:89:58:bb:8c:7c:71:83:d7:ed:d8:45:e9:2f:5e:90:30:94:
4f:41:64:9c:ce:ff:f8:d4:71:12:23:e8:b8:44:2c:44:f6:17:
86:06:b7:b5:cd:87:58:e9:b8:f7:25:68:2c:22:98:75:f9:f8:
d0:79:16:ab:19:f4:81:e6:9e:10:92:0c:50:a3:71:e4:37:03:
56:17:cc:9a:f3:35:ca:b4:fd:53:5f:4c:f8:f6:a6:d0:cb:be:
3d:24:3c:5c:67:50:fc:9b:f2:22:bf:af:08:78:c8:74:64:df:
ef:a6:44:57:37:1c:6d:09:8c:0b:94:11:44:90:60:f0:13:f7:
4c:51:ea:2f:ba:f2:a2:7c:51:7a:4c:59:42:e5:13:d3:7b:63:
e0:75:33:11:91:52:9f:e6:36:1d:db:23:e1:2c:08:f6:5d:1b:
7d:de:84:ff:f0:56:24:6d:f4:31:5c:9b:77:17:e3:af:0f:ac:
40:09:aa:7c:98:76:1f:be:2a:f9:02:6b:f3:82:96:cc:ae:48:
51:ab:de:5e:c1:73:2b:8c:bf:ff:09:ec:70:b5:e7:d0:30:db:
0a:de:f5:f3:8b:db:70:c2:28:28:cb:0f:e7:4b:9b:60:1a:eb:
8b:a1:7f:03
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTndvipImqRPQOAiRJ5OngGxH4G8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjAyMDAwMDAwWhcNMjUwMTA2MjM1OTU5
WjB6MUkwRwYDVQQFE0AwMTNkOTNiMWMxYjBiOWY1MzIzOTUyMTBkZWRhNmQzZWFk
OWVmZWIxZTAxZWQ0OGJlODdmNzRjYmY4ZTNiODJmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDFENl4rGqUBuRvJ8Zhowzwbngj4kG9b/kMek4DXvGR5nHR
Bn0+8dx95jkuHzn+wczHzVYXuVPHitoGln2AgrHHXMtBkd0mU31Sm0d5F4X5HurB
izyQFte8rVELAsd/O5fP0GYa4mBHuprTrykdfD51ce2XBCREmQCmZFIaKqZnt8Dw
ViJNCi+X/W7GUakd19S4+lfUCSpcupAgSW+8eg7vIm0UjqeihNtOw9fnQVRFn01X
luf6wUQwLwrNQQiE/pcgTlJTjMljeVHhgrMtNpuucfgVDR6E5NlxUoEjyvzgr/RM
YSlTEuthQxdDFlcMTr4OSOjIvM6m/OL2PxREiPIpAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUVHXw9K0NofKw9X+VT+JAEXO6+oowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2JjMzJlNDdiLWY1ZjAtNDdkNy04NGJmLTI3YmJlMzE4MjcxZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADGYwMwDQYJKoZIhvcNAQELBQADggEBACRQZYL+yH184YWLMp6V+q5LTLCJ
WLuMfHGD1+3YRekvXpAwlE9BZJzO//jUcRIj6LhELET2F4YGt7XNh1jpuPclaCwi
mHX5+NB5FqsZ9IHmnhCSDFCjceQ3A1YXzJrzNcq0/VNfTPj2ptDLvj0kPFxnUPyb
8iK/rwh4yHRk3++mRFc3HG0JjAuUEUSQYPAT90xR6i+68qJ8UXpMWULlE9N7Y+B1
MxGRUp/mNh3bI+EsCPZdG33ehP/wViRt9DFcm3cX468PrEAJqnyYdh++KvkCa/OC
lsyuSFGr3l7BcyuMv/8J7HC159Aw2wre9fOL23DCKCjLD+dLm2Aa64uhfwM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:49 2025 by rpki-client