Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c072676c-6e1c-44db-9bc3-6e9f8582d879.roa
File: c072676c-6e1c-44db-9bc3-6e9f8582d879.roa (raw, json)
Hash identifier: PEY6JBIxrQUwVbS0kd6SWMnoXWKIjZAE+qTbDCzbF5k=
Subject key identifier: 6D:7E:06:A5:4F:D6:2F:C4:B8:15:AB:94:E4:8E:17:79:6E:36:9C:12
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 12FE1B084C72AA699AB432E1739F9FD26BEB6967
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c072676c-6e1c-44db-9bc3-6e9f8582d879.roa
Signing time: Wed 01 Jan 2025 00:00:00 +0000
ROA not before: Wed 01 Jan 2025 00:00:00 +0000
ROA not after: Wed 05 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 56.90.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:fe:1b:08:4c:72:aa:69:9a:b4:32:e1:73:9f:9f:d2:6b:eb:69:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 1 00:00:00 2025 GMT
Not After : Feb 5 23:59:59 2025 GMT
Subject: serialNumber=41b32de7be65e3e1f4e35366b3432640e480bfe4602797180dedb21c2c8a7f1a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:a7:cf:b3:d4:a7:dc:09:8e:a5:1d:be:5e:
06:2a:d1:d4:45:b6:22:e1:04:cd:54:17:bd:c4:8e:
8f:30:42:a6:ac:cb:06:d3:f0:7a:a6:44:94:0b:ea:
85:6a:5e:32:14:0e:99:ed:ba:24:15:b5:1c:f6:70:
7c:73:11:f5:40:ca:45:08:0f:da:ea:11:7f:87:33:
24:89:fc:7a:db:f8:fa:dd:f5:30:ba:0b:f1:98:b1:
26:d2:ec:46:ed:db:89:93:f1:93:24:1a:1b:11:0c:
23:67:0b:d1:87:11:ed:98:3a:30:3e:05:94:30:28:
4e:ff:d8:96:11:7c:1f:f8:7d:60:2e:a0:30:84:5b:
25:f5:9e:fe:14:15:eb:a5:78:05:ef:74:42:8d:68:
e9:ef:18:eb:a3:60:d1:63:f9:e6:b3:64:cd:c5:84:
c3:5a:5e:17:1b:41:12:96:ba:0c:e5:6a:fd:66:33:
3d:c5:1e:6f:22:02:11:96:77:e8:a4:c3:87:31:f8:
5c:15:3f:4c:19:49:2c:98:e5:0b:6d:2e:ae:64:ad:
41:b3:d4:dc:54:fa:c0:df:01:f7:ec:c7:44:07:cf:
95:82:af:c9:d3:6a:31:e4:f7:75:e9:f1:ec:0d:52:
05:ea:62:b9:a2:f4:e7:24:0d:83:9f:39:27:04:71:
79:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7E:06:A5:4F:D6:2F:C4:B8:15:AB:94:E4:8E:17:79:6E:36:9C:12
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c072676c-6e1c-44db-9bc3-6e9f8582d879.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.90.0.0/16
Signature Algorithm: sha256WithRSAEncryption
be:e0:c6:63:ba:25:d6:37:ef:7d:64:fd:74:a5:44:ae:60:b4:
2a:0d:12:94:83:b8:c0:b4:2a:b0:49:aa:d8:34:87:b7:38:62:
d8:9e:d3:50:3f:ef:8d:c6:98:2c:bb:7c:a7:72:73:40:84:d1:
a7:2c:65:b5:de:8c:45:91:5d:69:dd:5b:b5:68:08:c5:9d:aa:
7c:90:d5:5b:95:7e:1e:99:f7:3d:73:9d:a7:55:94:38:41:d4:
8f:06:05:10:29:a3:2a:fe:c9:0e:06:f2:f0:9e:fc:3e:66:d2:
67:c0:6e:2e:cf:ea:6b:08:50:86:6e:43:e2:2d:de:55:34:70:
9b:d7:bf:57:1d:99:96:90:4a:cb:07:2c:83:0a:bf:17:5c:fe:
98:16:53:8f:3c:6c:f5:c8:c6:ee:73:04:b1:dc:2f:86:3f:88:
f0:75:1d:eb:27:fa:56:88:8f:1a:6c:aa:6b:a1:c7:14:0e:96:
86:6f:b4:86:77:97:7e:b4:23:78:12:6d:2a:ce:2a:c8:f3:2a:
8b:15:99:b1:86:d3:38:fb:da:9e:db:a5:0b:d4:48:b7:a7:67:
6e:1f:ef:4d:53:c1:58:11:17:98:31:21:cb:66:82:ba:4a:c7:
7f:66:71:96:be:cb:69:65:bd:81:e6:7a:b2:20:51:1b:67:04:
15:a1:b2:da
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUEv4bCExyqmmatDLhc5+f0mvraWcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTAxMDAwMDAwWhcNMjUwMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A0MWIzMmRlN2JlNjVlM2UxZjRlMzUzNjZiMzQzMjY0MGU0
ODBiZmU0NjAyNzk3MTgwZGVkYjIxYzJjOGE3ZjFhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCv/qfPs9Sn3AmOpR2+XgYq0dRFtiLhBM1UF73Ejo8wQqas
ywbT8HqmRJQL6oVqXjIUDpntuiQVtRz2cHxzEfVAykUID9rqEX+HMySJ/Hrb+Prd
9TC6C/GYsSbS7Ebt24mT8ZMkGhsRDCNnC9GHEe2YOjA+BZQwKE7/2JYRfB/4fWAu
oDCEWyX1nv4UFeuleAXvdEKNaOnvGOujYNFj+eazZM3FhMNaXhcbQRKWugzlav1m
Mz3FHm8iAhGWd+ikw4cx+FwVP0wZSSyY5QttLq5krUGz1NxU+sDfAffsx0QHz5WC
r8nTajHk93Xp8ewNUgXqYrmi9OckDYOfOScEcXkzAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUbX4GpU/WL8S4FauU5I4XeW42nBIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2MwNzI2NzZjLTZlMWMtNDRkYi05YmMzLTZlOWY4NTgyZDg3OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4WjANBgkqhkiG9w0BAQsFAAOCAQEAvuDGY7ol1jfvfWT9dKVErmC0Kg0S
lIO4wLQqsEmq2DSHtzhi2J7TUD/vjcaYLLt8p3JzQITRpyxltd6MRZFdad1btWgI
xZ2qfJDVW5V+Hpn3PXOdp1WUOEHUjwYFECmjKv7JDgby8J78PmbSZ8BuLs/qawhQ
hm5D4i3eVTRwm9e/Vx2ZlpBKywcsgwq/F1z+mBZTjzxs9cjG7nMEsdwvhj+I8HUd
6yf6VoiPGmyqa6HHFA6Whm+0hneXfrQjeBJtKs4qyPMqixWZsYbTOPvantulC9RI
t6dnbh/vTVPBWBEXmDEhy2aCukrHf2Zxlr7LaWW9geZ6siBRG2cEFaGy2g==
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:37:45 2025 by rpki-client