Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c23e6a5e-8adb-47e9-b05f-adf357a506ed.roa
File: c23e6a5e-8adb-47e9-b05f-adf357a506ed.roa (raw, json)
Hash identifier: Wz4KfZkr7Ed4eQNLG6OV0/tV3nuRlttW1QgeKki7vmM=
Subject key identifier: 96:7B:27:AC:44:05:69:5B:40:9B:35:34:4F:70:7D:01:B1:9E:A9:56
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0C3E8C2607CF50B8267B7485CF142BF1B6D33CAE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c23e6a5e-8adb-47e9-b05f-adf357a506ed.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 16.92.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:3e:8c:26:07:cf:50:b8:26:7b:74:85:cf:14:2b:f1:b6:d3:3c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=18c7c22e68a234e93f72f2e98fe9a48417a0ba8f7ca6a6ae95e2b2a2a1c4b3c2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:13:b2:0a:70:89:5c:0f:13:cc:3e:fe:86:1f:
49:81:6f:4e:0e:88:c3:cc:0d:04:a0:c8:a8:cc:0a:
2a:a1:af:75:67:2d:d0:fc:67:04:09:28:75:6f:b6:
9a:6c:dd:1b:d7:50:93:e6:57:97:82:5b:ca:e4:eb:
53:df:e5:89:ef:56:06:6d:44:a0:1c:b0:6d:76:96:
79:00:85:24:de:0c:b0:41:72:98:69:44:e6:44:66:
11:d0:6f:90:16:0d:2e:bc:36:a6:d3:fd:a1:3f:cd:
99:e3:20:b2:01:f9:97:6b:0d:97:5c:5d:2c:0a:33:
6c:39:f7:cb:04:db:98:e1:f0:f2:6b:b4:d9:fd:e7:
23:7e:7f:b5:5e:8d:88:11:58:51:ad:d2:64:de:15:
e1:e9:fa:a6:4a:1a:0e:8e:67:56:4c:27:05:22:4e:
b9:54:57:34:9f:77:b6:48:b7:fa:63:41:87:d7:92:
5e:8a:a5:08:9f:fe:56:e7:68:14:2a:43:6a:c1:78:
16:d9:a8:46:ec:14:6b:5c:a8:55:5f:21:53:32:a1:
4c:cd:c4:01:1d:b8:73:4c:52:4d:3c:b7:1d:c4:13:
e6:06:0f:40:11:14:05:1d:2f:8e:5e:41:45:2f:36:
07:6c:7a:dd:a0:38:bc:97:bd:e6:a2:4b:a2:99:4e:
46:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7B:27:AC:44:05:69:5B:40:9B:35:34:4F:70:7D:01:B1:9E:A9:56
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c23e6a5e-8adb-47e9-b05f-adf357a506ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.92.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:6f:e3:26:17:0b:eb:40:e3:51:d1:e5:46:bb:fd:b9:60:00:
ef:62:31:a2:e3:2a:9c:7b:ca:5a:42:c1:a5:84:c4:8b:b3:24:
0d:98:1e:e3:04:51:75:fa:1c:69:29:ee:14:d2:fe:43:52:db:
b0:b7:ed:96:89:20:8c:a4:d3:e3:b8:d7:4e:94:90:87:49:ae:
f8:ea:85:0f:03:64:18:bd:cf:e9:c7:d9:28:4e:82:ec:92:71:
69:8f:a6:c2:8e:69:94:9f:c9:35:e0:67:1e:52:6f:2c:77:dd:
2b:21:b2:f2:25:68:e3:b7:97:f8:28:83:d5:f1:f1:ba:3d:4d:
ff:6a:8b:23:a6:ee:6d:86:c1:53:59:eb:89:1a:6d:ad:a4:7a:
21:28:d7:9f:fb:bc:d6:c6:25:c0:b9:c4:f3:90:a6:43:9b:d9:
3f:67:00:eb:cd:a6:97:9d:c9:26:bc:a5:79:6b:0c:7c:23:80:
25:fa:da:ba:44:6f:b0:f8:b6:1d:f4:c0:cb:59:dd:33:9b:54:
e5:1c:9e:30:85:71:9d:4e:ac:7d:bf:ed:1d:b6:f0:a6:52:9d:
58:4d:60:7b:ec:b7:e0:78:62:32:0a:1d:1c:4a:c8:6f:19:f5:
ef:6a:ba:ed:6d:81:85:12:e3:bf:0a:91:92:f2:4a:be:76:cf:
ac:63:3b:94
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUDD6MJgfPULgme3SFzxQr8bbTPK4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjI3MDAwMDAwWhcNMjUwMTMxMjM1OTU5
WjB6MUkwRwYDVQQFE0AxOGM3YzIyZTY4YTIzNGU5M2Y3MmYyZTk4ZmU5YTQ4NDE3
YTBiYThmN2NhNmE2YWU5NWUyYjJhMmExYzRiM2MyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4E7IKcIlcDxPMPv6GH0mBb04OiMPMDQSgyKjMCiqhr3Vn
LdD8ZwQJKHVvtpps3RvXUJPmV5eCW8rk61Pf5YnvVgZtRKAcsG12lnkAhSTeDLBB
cphpROZEZhHQb5AWDS68NqbT/aE/zZnjILIB+ZdrDZdcXSwKM2w598sE25jh8PJr
tNn95yN+f7VejYgRWFGt0mTeFeHp+qZKGg6OZ1ZMJwUiTrlUVzSfd7ZIt/pjQYfX
kl6KpQif/lbnaBQqQ2rBeBbZqEbsFGtcqFVfIVMyoUzNxAEduHNMUk08tx3EE+YG
D0ARFAUdL45eQUUvNgdset2gOLyXveaiS6KZTkYrAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUlnsnrEQFaVtAmzU0T3B9AbGeqVYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2MyM2U2YTVlLThhZGItNDdlOS1iMDVmLWFkZjM1N2E1MDZlZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQXDANBgkqhkiG9w0BAQsFAAOCAQEAF2/jJhcL60DjUdHlRrv9uWAA72Ix
ouMqnHvKWkLBpYTEi7MkDZge4wRRdfocaSnuFNL+Q1LbsLftlokgjKTT47jXTpSQ
h0mu+OqFDwNkGL3P6cfZKE6C7JJxaY+mwo5plJ/JNeBnHlJvLHfdKyGy8iVo47eX
+CiD1fHxuj1N/2qLI6bubYbBU1nriRptraR6ISjXn/u81sYlwLnE85CmQ5vZP2cA
682ml53JJryleWsMfCOAJfraukRvsPi2HfTAy1ndM5tU5RyeMIVxnU6sfb/tHbbw
plKdWE1ge+y34HhiMgodHErIbxn172q67W2BhRLjvwqRkvJKvnbPrGM7lA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:42:51 2025 by rpki-client