Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbd56fda-b6e0-4a53-bfc6-f63d697836b8.roa
File: cbd56fda-b6e0-4a53-bfc6-f63d697836b8.roa (raw, json)
Hash identifier: gUQZV4loWUUyqXHI0zkJNTZY5pj/DlDXakzfth9YEaw=
Subject key identifier: D7:74:74:08:93:E5:A7:0E:B5:99:30:E3:7E:81:C6:20:E2:48:79:5B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4D415C2FE7754CDB0991522B3B7C70DE2BC9AEF3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbd56fda-b6e0-4a53-bfc6-f63d697836b8.roa
Signing time: Tue 03 Dec 2024 00:00:00 +0000
ROA not before: Tue 03 Dec 2024 00:00:00 +0000
ROA not after: Tue 07 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 100.20.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:41:5c:2f:e7:75:4c:db:09:91:52:2b:3b:7c:70:de:2b:c9:ae:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 3 00:00:00 2024 GMT
Not After : Jan 7 23:59:59 2025 GMT
Subject: serialNumber=db8c9041cd9347e073c02b536ce485f70900c149850b5b8ffce6fb5c8931f589, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d2:d8:e6:c7:f0:97:65:a3:10:3c:61:9b:f1:
e9:f9:09:99:0b:08:6d:aa:7e:9f:54:f5:62:fd:33:
13:2f:22:ae:b3:5a:a6:c3:a4:09:51:89:53:e6:71:
d9:8a:b5:7f:2e:30:7c:ab:61:5f:cb:95:e2:26:98:
ce:a7:62:2c:28:ce:3a:c9:28:8d:36:3e:d4:af:5e:
3d:3e:82:9c:15:f2:d1:58:90:63:4b:3b:b5:69:22:
66:7b:10:3b:40:1b:1c:58:0b:da:27:3b:62:3f:cc:
a7:5e:27:8d:53:9f:f5:d1:28:ee:ec:47:ed:fb:40:
a8:fe:05:66:93:ef:03:7d:c8:ae:76:4b:95:c7:80:
b6:00:40:c3:3b:f4:f2:9d:f7:8b:bb:12:a4:41:0a:
dd:b0:94:c3:36:4f:0f:a3:76:b0:58:f3:c9:4e:5c:
a2:22:c4:33:77:4d:4f:c8:b7:05:7b:20:34:b8:5b:
13:34:43:d1:18:1b:82:5f:61:42:a5:27:f7:e6:79:
9d:69:06:52:ff:a5:60:ef:11:97:d5:cf:fa:c3:d1:
9f:1c:da:81:1e:29:14:58:d6:37:2e:80:0f:f5:92:
3b:c9:f3:24:6d:53:62:57:31:63:46:07:14:5e:52:
11:4e:b9:b4:70:88:4c:2a:b4:8b:e0:9f:e2:69:4e:
3c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:74:74:08:93:E5:A7:0E:B5:99:30:E3:7E:81:C6:20:E2:48:79:5B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbd56fda-b6e0-4a53-bfc6-f63d697836b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
100.20.0.0/14
Signature Algorithm: sha256WithRSAEncryption
0b:a1:24:32:76:63:63:16:87:32:37:aa:35:1c:23:d3:9b:19:
fa:0c:92:df:c2:b3:f0:04:41:d4:8b:e5:19:dd:a4:1e:f8:99:
01:c4:2d:9b:d3:86:9f:01:2d:0c:f2:85:d9:cf:c6:22:d5:28:
e2:99:7f:77:04:b0:8a:7a:7f:e6:93:23:30:11:53:e1:c0:eb:
e6:5c:87:0b:f8:f1:ca:c6:35:d9:1d:7c:40:0c:cb:eb:47:92:
bb:e6:a7:98:02:0e:c2:25:c2:94:f6:14:5b:fe:fb:48:2b:d5:
bb:33:c6:ba:9c:f2:12:08:1d:66:eb:d5:6b:3a:64:6f:23:3e:
53:79:5b:ba:e1:40:80:f1:b3:b7:2e:a1:f8:85:7c:ec:0f:12:
17:f6:f7:ce:a1:a8:54:be:8c:e9:51:21:d5:c7:f1:e5:31:c8:
e2:3c:c9:5d:1b:91:b2:99:08:e6:a7:91:de:f0:bd:21:99:b4:
13:3c:fe:0b:64:95:1f:72:f0:d1:f7:05:44:2a:cd:86:b9:04:
58:ff:b5:3e:8c:c1:bd:db:b2:c9:7e:c6:06:6f:8f:23:d7:0e:
5c:1b:ee:00:c9:6f:85:85:3d:d1:3f:1b:bf:6f:a7:f9:7f:6e:
df:6b:2f:c1:b4:70:ac:25:54:9d:1e:0e:cc:4e:fb:14:cd:8f:
2a:a5:b2:2a
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUTUFcL+d1TNsJkVIrO3xw3ivJrvMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjAzMDAwMDAwWhcNMjUwMTA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BkYjhjOTA0MWNkOTM0N2UwNzNjMDJiNTM2Y2U0ODVmNzA5
MDBjMTQ5ODUwYjViOGZmY2U2ZmI1Yzg5MzFmNTg5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDE0tjmx/CXZaMQPGGb8en5CZkLCG2qfp9U9WL9MxMvIq6z
WqbDpAlRiVPmcdmKtX8uMHyrYV/LleImmM6nYiwozjrJKI02PtSvXj0+gpwV8tFY
kGNLO7VpImZ7EDtAGxxYC9onO2I/zKdeJ41Tn/XRKO7sR+37QKj+BWaT7wN9yK52
S5XHgLYAQMM79PKd94u7EqRBCt2wlMM2Tw+jdrBY88lOXKIixDN3TU/ItwV7IDS4
WxM0Q9EYG4JfYUKlJ/fmeZ1pBlL/pWDvEZfVz/rD0Z8c2oEeKRRY1jcugA/1kjvJ
8yRtU2JXMWNGBxReUhFOubRwiEwqtIvgn+JpTjx3AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU13R0CJPlpw61mTDjfoHGIOJIeVswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2NiZDU2ZmRhLWI2ZTAtNGE1My1iZmM2LWY2M2Q2OTc4MzZiOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwJkFDANBgkqhkiG9w0BAQsFAAOCAQEAC6EkMnZjYxaHMjeqNRwj05sZ+gyS
38Kz8ARB1IvlGd2kHviZAcQtm9OGnwEtDPKF2c/GItUo4pl/dwSwinp/5pMjMBFT
4cDr5lyHC/jxysY12R18QAzL60eSu+anmAIOwiXClPYUW/77SCvVuzPGupzyEggd
ZuvVazpkbyM+U3lbuuFAgPGzty6h+IV87A8SF/b3zqGoVL6M6VEh1cfx5THI4jzJ
XRuRspkI5qeR3vC9IZm0Ezz+C2SVH3Lw0fcFRCrNhrkEWP+1PozBvduyyX7GBm+P
I9cOXBvuAMlvhYU90T8bv2+n+X9u32svwbRwrCVUnR4OzE77FM2PKqWyKg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:18:18 2025 by rpki-client