Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be6d029e-693b-4f55-8597-07e4606a81cd.roa
File: be6d029e-693b-4f55-8597-07e4606a81cd.roa (raw, json)
Hash identifier: Fqkc/zmrt5w3f1O9QSwsfDySE9rwEZW8Qau1t/9U1m0=
Subject key identifier: E9:2F:5E:B6:DE:AF:58:B2:A5:C5:D6:DD:9E:DA:89:BC:59:87:E3:7D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1C0CBC0E06690869F54EB1C877077CD6A668245B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be6d029e-693b-4f55-8597-07e4606a81cd.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f14:4000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:0c:bc:0e:06:69:08:69:f5:4e:b1:c8:77:07:7c:d6:a6:68:24:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=30ea2a6bce7dc091b5551689bfc28800a11b5191421e51a11643539d183f1656, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:56:22:54:24:80:f3:2a:af:52:8b:1e:93:a6:
f3:8a:13:58:1a:61:1d:71:67:b8:d7:fe:82:e0:2d:
42:a4:56:5c:3b:37:5d:72:0d:d6:f9:05:55:fd:86:
b5:9c:13:93:0f:f9:af:55:34:ba:8b:cd:9e:0c:72:
34:11:77:57:44:da:c7:dc:75:1f:a7:9c:4f:2a:a7:
a0:ba:cc:25:b6:14:c6:61:50:f4:db:bd:62:59:d7:
f5:38:ba:ff:f2:94:a6:60:a8:4a:98:eb:56:4f:4b:
96:17:29:88:9e:fd:dd:f2:b5:ad:82:35:5e:ed:4f:
1c:81:83:aa:36:68:95:7f:ee:fa:70:6e:e4:47:6e:
0f:fe:b8:b0:ce:44:d7:fd:e0:00:c1:88:a1:01:11:
65:39:9e:60:a1:f7:50:9a:83:50:5f:bb:85:6a:fb:
f2:59:66:f6:b8:26:43:f7:58:25:eb:73:bd:8b:68:
37:ca:f6:04:00:b9:88:9a:25:32:3a:65:f6:55:62:
95:ab:18:f6:2c:8b:d6:fc:5b:9d:d3:a5:c2:97:7b:
b1:2b:74:55:c6:d4:ec:8c:f5:da:1b:83:c3:56:9c:
68:9b:c0:b9:1e:24:f3:ae:d1:44:31:1b:92:c2:4e:
fb:37:0d:a7:8a:e5:b1:52:b6:35:a7:48:37:73:e9:
05:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2F:5E:B6:DE:AF:58:B2:A5:C5:D6:DD:9E:DA:89:BC:59:87:E3:7D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be6d029e-693b-4f55-8597-07e4606a81cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f14:4000::/36
Signature Algorithm: sha256WithRSAEncryption
a1:0e:0e:b4:34:9f:d7:80:ee:85:1a:e2:ee:bd:49:44:dd:f1:
9f:39:8a:e3:eb:51:cf:72:49:d8:05:7c:d9:51:e1:86:87:32:
f6:e9:2c:94:51:e8:76:c0:5e:a9:6c:6b:f1:c0:87:cf:d8:31:
87:18:6c:72:8c:48:6a:94:95:90:54:cc:f1:cb:66:e8:40:71:
ec:26:31:1e:39:bf:0f:5c:b1:a9:8c:53:90:fa:45:64:eb:b8:
a5:0f:58:ce:6f:40:06:10:59:95:d7:3b:ef:41:54:ce:a1:c8:
da:08:3f:33:df:0b:26:b9:56:4d:af:d2:84:1f:5f:52:19:f2:
3c:bb:09:1c:fa:e8:c3:f2:3b:81:6c:19:37:e7:2c:d7:fd:df:
da:5e:f8:fe:cc:3a:e4:4f:8b:7f:d8:9f:13:4f:c2:fc:a8:bc:
f8:9b:97:26:5c:e3:92:2e:3b:c5:f5:04:c0:0b:2a:5a:3b:eb:
97:80:40:6d:45:b2:9f:7d:e7:e9:7b:95:e3:15:d9:44:8a:d6:
e8:63:fa:34:20:48:46:09:2b:35:ed:5d:23:0c:8c:96:a9:9c:
56:11:8d:c1:44:0d:9f:b2:17:6b:8f:fd:19:23:4f:f1:9a:6a:
60:5a:1a:13:7a:3e:a2:38:db:44:05:36:8e:d8:e5:6e:c3:58:
a6:e5:2f:57
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUHAy8DgZpCGn1TrHIdwd81qZoJFswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjI3MDAwMDAwWhcNMjUwMTMxMjM1OTU5
WjB6MUkwRwYDVQQFE0AzMGVhMmE2YmNlN2RjMDkxYjU1NTE2ODliZmMyODgwMGEx
MWI1MTkxNDIxZTUxYTExNjQzNTM5ZDE4M2YxNjU2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDgViJUJIDzKq9Six6TpvOKE1gaYR1xZ7jX/oLgLUKkVlw7
N11yDdb5BVX9hrWcE5MP+a9VNLqLzZ4McjQRd1dE2sfcdR+nnE8qp6C6zCW2FMZh
UPTbvWJZ1/U4uv/ylKZgqEqY61ZPS5YXKYie/d3yta2CNV7tTxyBg6o2aJV/7vpw
buRHbg/+uLDORNf94ADBiKEBEWU5nmCh91Cag1Bfu4Vq+/JZZva4JkP3WCXrc72L
aDfK9gQAuYiaJTI6ZfZVYpWrGPYsi9b8W53TpcKXe7ErdFXG1OyM9dobg8NWnGib
wLkeJPOu0UQxG5LCTvs3DaeK5bFStjWnSDdz6QWVAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU6S9ett6vWLKlxdbdntqJvFmH430wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2JlNmQwMjllLTY5M2ItNGY1NS04NTk3LTA3ZTQ2MDZhODFjZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8UQDANBgkqhkiG9w0BAQsFAAOCAQEAoQ4OtDSf14DuhRri7r1JRN3x
nzmK4+tRz3JJ2AV82VHhhocy9ukslFHodsBeqWxr8cCHz9gxhxhscoxIapSVkFTM
8ctm6EBx7CYxHjm/D1yxqYxTkPpFZOu4pQ9Yzm9ABhBZldc770FUzqHI2gg/M98L
JrlWTa/ShB9fUhnyPLsJHProw/I7gWwZN+cs1/3f2l74/sw65E+Lf9ifE0/C/Ki8
+JuXJlzjki47xfUEwAsqWjvrl4BAbUWyn33n6XuV4xXZRIrW6GP6NCBIRgkrNe1d
IwyMlqmcVhGNwUQNn7IXa4/9GSNP8ZpqYFoaE3o+ojjbRAU2jtjlbsNYpuUvVw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:49:43 2025 by rpki-client