Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce8c557f-d3d3-46d0-bd45-d21e98e671d6.roa
File: ce8c557f-d3d3-46d0-bd45-d21e98e671d6.roa (raw, json)
Hash identifier: XCYUtLUsDd8bHTmmXkfVapvuPUck9BJ4CvMsvqHRMcY=
Subject key identifier: 6A:F1:10:D6:15:1E:12:A8:E3:6A:DA:03:2F:12:99:1A:60:71:C8:42
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3AEF5C96CFF2DB64765BD2B556421D3C6425715A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce8c557f-d3d3-46d0-bd45-d21e98e671d6.roa
Signing time: Sat 28 Dec 2024 00:00:00 +0000
ROA not before: Sat 28 Dec 2024 00:00:00 +0000
ROA not after: Sat 01 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 16.6.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:ef:5c:96:cf:f2:db:64:76:5b:d2:b5:56:42:1d:3c:64:25:71:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 28 00:00:00 2024 GMT
Not After : Feb 1 23:59:59 2025 GMT
Subject: serialNumber=3bfae9858e0f8c930edcaef8a9997b4829f3cb6e32b453fee8720d592b9dbd5d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2c:e2:32:f0:01:26:31:69:1b:94:e7:0b:c3:
24:8b:6b:5a:57:0f:b1:9e:21:20:ee:5c:27:c8:68:
9b:9f:e5:62:72:a7:60:b1:25:95:41:91:a7:40:0c:
f5:ce:10:71:e2:39:47:41:47:a2:e3:e3:0d:c1:87:
67:33:46:f9:b9:4a:a5:af:67:64:13:c2:ae:a7:a1:
80:7e:ae:54:bd:16:30:66:20:6e:c8:3b:c6:d6:56:
43:a9:1e:d8:ec:ea:c5:f9:e6:13:fa:40:d5:92:b9:
29:0b:d3:df:5e:b3:64:27:8b:08:a3:68:1d:b4:4a:
09:18:b4:70:f9:97:6a:b3:f9:77:aa:3c:af:e2:8b:
10:3c:59:ba:a1:c1:4a:6a:bf:c9:c5:65:f7:42:e3:
cf:f1:51:0f:11:38:6f:6b:fa:69:ef:b5:32:02:29:
c7:45:aa:0a:87:65:65:84:5f:99:0c:12:a5:db:ea:
e8:0d:e6:42:e0:11:6b:23:30:b9:6b:63:43:b8:71:
60:6f:0b:bf:e5:9a:78:46:fb:2c:33:5f:1e:ea:35:
64:6e:b6:a8:d7:47:a9:cd:4a:0b:06:0c:ce:fb:45:
29:73:dd:7f:66:ca:44:bf:b6:37:44:83:ea:a1:41:
a2:74:c1:53:c9:68:b0:0a:ce:ed:71:db:b8:c5:e9:
d0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F1:10:D6:15:1E:12:A8:E3:6A:DA:03:2F:12:99:1A:60:71:C8:42
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce8c557f-d3d3-46d0-bd45-d21e98e671d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.6.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d4:11:da:29:5f:fe:9f:79:56:1f:63:a6:58:ac:91:00:1c:95:
8e:ab:c6:db:04:51:70:19:40:56:0d:db:1a:fb:59:b4:56:6a:
1d:1e:56:30:ab:92:73:0e:f7:9a:ba:b7:0e:a7:64:8c:59:cd:
9f:5e:8f:c4:fc:d5:c6:ca:1d:3e:35:68:79:7e:3b:5b:46:ba:
22:cf:a9:81:ab:db:40:5a:64:6a:3d:54:e4:22:2d:18:ed:cc:
24:10:81:8d:0e:18:3d:45:6b:98:e3:f7:9f:22:6e:0a:c1:1b:
7a:64:01:1c:d7:16:0d:eb:08:fa:7c:03:1a:e1:c1:1a:45:83:
28:f7:99:27:80:50:a7:70:22:e3:13:4f:81:5d:31:b8:ae:1d:
7d:f1:ca:c3:4a:a7:d6:31:b3:00:92:f0:d5:1d:25:f0:ab:a1:
8e:b4:a4:14:1f:62:56:55:1a:d1:a6:f3:c9:9a:6d:7c:81:ef:
d9:72:82:02:2b:a8:16:ff:0f:d2:f6:43:f4:23:3c:d4:7d:b2:
0c:52:dd:48:7b:03:0a:f9:b0:f3:64:a2:0f:57:ae:26:34:9d:
5f:de:aa:02:b8:df:32:af:e2:1f:66:d8:ab:5f:c2:2e:3a:e8:
16:0a:aa:2b:12:5c:50:e0:62:e6:08:1b:f4:42:00:c4:fe:c7:
c9:b9:27:03
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUOu9cls/y22R2W9K1VkIdPGQlcVowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjI4MDAwMDAwWhcNMjUwMjAxMjM1OTU5
WjB6MUkwRwYDVQQFE0AzYmZhZTk4NThlMGY4YzkzMGVkY2FlZjhhOTk5N2I0ODI5
ZjNjYjZlMzJiNDUzZmVlODcyMGQ1OTJiOWRiZDVkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDNLOIy8AEmMWkblOcLwySLa1pXD7GeISDuXCfIaJuf5WJy
p2CxJZVBkadADPXOEHHiOUdBR6Lj4w3Bh2czRvm5SqWvZ2QTwq6noYB+rlS9FjBm
IG7IO8bWVkOpHtjs6sX55hP6QNWSuSkL099es2QniwijaB20SgkYtHD5l2qz+Xeq
PK/iixA8WbqhwUpqv8nFZfdC48/xUQ8ROG9r+mnvtTICKcdFqgqHZWWEX5kMEqXb
6ugN5kLgEWsjMLlrY0O4cWBvC7/lmnhG+ywzXx7qNWRutqjXR6nNSgsGDM77RSlz
3X9mykS/tjdEg+qhQaJ0wVPJaLAKzu1x27jF6dAhAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUavEQ1hUeEqjjatoDLxKZGmBxyEIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2NlOGM1NTdmLWQzZDMtNDZkMC1iZDQ1LWQyMWU5OGU2NzFkNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQBjANBgkqhkiG9w0BAQsFAAOCAQEA1BHaKV/+n3lWH2OmWKyRAByVjqvG
2wRRcBlAVg3bGvtZtFZqHR5WMKuScw73mrq3DqdkjFnNn16PxPzVxsodPjVoeX47
W0a6Is+pgavbQFpkaj1U5CItGO3MJBCBjQ4YPUVrmOP3nyJuCsEbemQBHNcWDesI
+nwDGuHBGkWDKPeZJ4BQp3Ai4xNPgV0xuK4dffHKw0qn1jGzAJLw1R0l8KuhjrSk
FB9iVlUa0abzyZptfIHv2XKCAiuoFv8P0vZD9CM81H2yDFLdSHsDCvmw82SiD1eu
JjSdX96qArjfMq/iH2bYq1/CLjroFgqqKxJcUOBi5ggb9EIAxP7HybknAw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:01:03 2025 by rpki-client