Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c08d6dce-3e2a-4d24-a991-d2eb5638198a.roa
File: c08d6dce-3e2a-4d24-a991-d2eb5638198a.roa (raw, json)
Hash identifier: fZQc92Vx5nfY899IKUoamWZgmasb/V6G5TRqT7l218w=
Subject key identifier: 19:19:53:DC:26:9E:7E:03:1A:0D:E7:89:8D:57:2F:A4:70:5E:B1:84
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 55F8F3F821B2CA501DF0FA80131C3626C2D1BCAB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c08d6dce-3e2a-4d24-a991-d2eb5638198a.roa
Signing time: Sat 15 Mar 2025 00:30:30 +0000
ROA not before: Sat 15 Mar 2025 00:30:30 +0000
ROA not after: Sat 19 Apr 2025 23:59:59 +0000
asID: 19047
IP address blocks: 70.130.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:f8:f3:f8:21:b2:ca:50:1d:f0:fa:80:13:1c:36:26:c2:d1:bc:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 15 00:30:30 2025 GMT
Not After : Apr 19 23:59:59 2025 GMT
Subject: serialNumber=13f9bb6f73fd24c8e6a4e2fbcad57d6ec05903aa5464d7dfec62d063afb88432, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:59:a6:43:ec:ae:e0:4b:04:0a:b7:dd:77:7f:
c1:da:39:5c:cd:52:35:56:0f:e5:c4:c4:91:0f:d2:
3b:f5:69:2b:da:cf:9c:f1:f8:9b:24:8c:2c:1e:e6:
5c:47:10:d6:2b:3e:28:18:2e:c6:8c:bc:b4:71:96:
d6:09:62:af:5d:63:90:53:31:ad:6b:87:6c:b3:f2:
dd:30:2f:be:80:dd:2e:01:c2:54:70:56:f7:f6:c0:
5f:e3:18:77:80:7f:7f:4e:ba:dd:a2:28:e2:ae:9c:
79:f4:be:6a:02:5c:00:96:cf:2a:01:83:d0:7a:38:
93:1f:33:a6:3f:ca:bd:e4:0e:4d:6b:74:b3:a5:9c:
ee:36:6d:70:6b:f5:57:36:33:7b:29:f3:fb:24:38:
d6:2a:7c:69:8b:7d:b9:2d:2e:4c:e9:12:36:e2:34:
7d:68:2b:78:db:be:36:ad:b2:86:2a:74:66:d0:b5:
58:79:5e:16:3c:d8:c2:6a:e1:7e:3c:a4:ce:0c:93:
34:51:ab:3c:26:37:91:90:9d:a7:6c:78:c2:f5:36:
a9:b1:df:7a:c0:80:2f:66:95:c3:59:8c:c0:65:2b:
78:36:fc:3b:d4:12:ff:80:d4:eb:ac:31:80:f1:79:
42:c9:bf:4e:20:57:de:b7:94:8c:13:10:3d:62:8d:
c7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:19:53:DC:26:9E:7E:03:1A:0D:E7:89:8D:57:2F:A4:70:5E:B1:84
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c08d6dce-3e2a-4d24-a991-d2eb5638198a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.130.224.0/24
Signature Algorithm: sha256WithRSAEncryption
08:7b:24:a9:f0:24:fc:47:6f:a8:d6:bc:d0:fa:69:38:e3:2d:
cc:bb:fa:7d:d1:ab:e2:1a:7f:01:e1:dc:89:85:4b:9a:83:9e:
56:7c:44:75:20:af:72:58:9b:17:77:32:0e:9b:27:65:f5:69:
d3:ce:2d:79:f3:34:61:c9:c6:1d:a0:bc:c2:00:0b:ce:3a:c1:
c1:2b:56:4b:72:43:57:d2:72:22:d2:83:1d:e8:be:b4:df:7b:
f9:3f:a7:81:ec:b2:4a:2b:4f:0f:ab:17:b2:c1:37:b3:f7:e7:
36:c6:21:f4:77:e1:24:dc:ad:30:33:21:60:e0:f8:37:76:df:
85:0c:15:bb:fa:00:84:96:ae:fb:a3:1f:21:b2:11:70:d8:43:
8d:55:b3:f1:c2:ae:69:b3:66:5d:d8:f3:a7:1b:fc:61:62:c6:
44:c2:9c:79:35:68:0f:7d:49:d9:89:0e:49:9e:74:c9:4c:1e:
16:bb:17:22:45:ed:36:61:2d:88:72:3b:ef:b9:87:1a:ce:f8:
7d:e8:91:4a:95:35:60:14:68:5a:70:c1:71:30:ed:81:3f:20:
5d:b0:72:7d:5c:0a:c3:db:b5:cc:75:17:bd:45:ad:1b:68:96:
45:55:2e:37:20:cd:5b:95:e1:43:a5:17:ed:f9:6f:d9:71:f6:
1d:74:23:2a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVfjz+CGyylAd8PqAExw2JsLRvKswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE1MDAzMDMwWhcNMjUwNDE5MjM1OTU5
WjB6MUkwRwYDVQQFE0AxM2Y5YmI2ZjczZmQyNGM4ZTZhNGUyZmJjYWQ1N2Q2ZWMw
NTkwM2FhNTQ2NGQ3ZGZlYzYyZDA2M2FmYjg4NDMyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD2WaZD7K7gSwQKt913f8HaOVzNUjVWD+XExJEP0jv1aSva
z5zx+JskjCwe5lxHENYrPigYLsaMvLRxltYJYq9dY5BTMa1rh2yz8t0wL76A3S4B
wlRwVvf2wF/jGHeAf39Out2iKOKunHn0vmoCXACWzyoBg9B6OJMfM6Y/yr3kDk1r
dLOlnO42bXBr9Vc2M3sp8/skONYqfGmLfbktLkzpEjbiNH1oK3jbvjatsoYqdGbQ
tVh5XhY82MJq4X48pM4MkzRRqzwmN5GQnadseML1Nqmx33rAgC9mlcNZjMBlK3g2
/DvUEv+A1OusMYDxeULJv04gV963lIwTED1ijcfLAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUGRlT3CaefgMaDeeJjVcvpHBesYQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2MwOGQ2ZGNlLTNlMmEtNGQyNC1hOTkxLWQyZWI1NjM4MTk4YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABGguAwDQYJKoZIhvcNAQELBQADggEBAAh7JKnwJPxHb6jWvND6aTjjLcy7
+n3Rq+IafwHh3ImFS5qDnlZ8RHUgr3JYmxd3Mg6bJ2X1adPOLXnzNGHJxh2gvMIA
C846wcErVktyQ1fSciLSgx3ovrTfe/k/p4HsskorTw+rF7LBN7P35zbGIfR34STc
rTAzIWDg+Dd234UMFbv6AISWrvujHyGyEXDYQ41Vs/HCrmmzZl3Y86cb/GFixkTC
nHk1aA99SdmJDkmedMlMHha7FyJF7TZhLYhyO++5hxrO+H3okUqVNWAUaFpwwXEw
7YE/IF2wcn1cCsPbtcx1F71FrRtolkVVLjcgzVuV4UOlF+35b9lx9h10Iyo=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:09:38 2025 by rpki-client