Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d130dd80-aad8-4b10-9749-34ba28d3e402.roa
File: d130dd80-aad8-4b10-9749-34ba28d3e402.roa (raw, json)
Hash identifier: FgKH2HqGc/idkB0q+xeKP0B4ihEbtAr3r4kYE6yZSbA=
Subject key identifier: 9D:DA:89:87:DE:5B:4B:0D:A7:85:D4:84:87:CB:E7:44:88:77:ED:3E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5733373A21A8C2A3B8AA5FBA0DE210D4F8C3A80F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d130dd80-aad8-4b10-9749-34ba28d3e402.roa
Signing time: Mon 09 Dec 2024 00:00:00 +0000
ROA not before: Mon 09 Dec 2024 00:00:00 +0000
ROA not after: Mon 13 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.57.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:33:37:3a:21:a8:c2:a3:b8:aa:5f:ba:0d:e2:10:d4:f8:c3:a8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 9 00:00:00 2024 GMT
Not After : Jan 13 23:59:59 2025 GMT
Subject: serialNumber=9e1df0ab43a844b3b31b6a24020f41baca8a5735ab762f91aa4bb2f6be11bd34, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0f:0d:ae:40:62:00:3e:ad:4f:d6:20:ff:1f:
be:93:02:b1:fe:f7:65:e7:55:2e:84:9e:33:0a:e4:
79:e9:19:96:74:75:02:d6:ac:01:41:11:41:49:a0:
74:9d:55:8c:bb:b1:33:a4:62:3f:b8:9f:05:5d:e4:
62:50:c8:04:c6:4f:03:e3:ae:e8:20:46:fc:e9:c0:
d1:86:e2:bc:e4:bb:8c:87:55:ca:30:68:44:68:57:
0a:5d:34:99:c4:8c:dc:e8:ad:ad:ad:35:77:66:79:
f1:4a:b8:b7:46:76:20:bc:51:8b:8c:c9:ea:8c:66:
29:13:e2:05:83:4d:b7:f7:e5:39:bf:c9:b4:e7:57:
fb:c6:f2:a1:4b:6a:85:60:72:6a:df:5b:7e:ae:9a:
b1:49:8d:9c:29:8d:ed:0d:04:81:d4:84:6a:cc:aa:
d9:f0:e3:4b:43:4f:3c:09:16:cd:03:fa:fa:4a:8d:
70:c8:05:b9:fd:61:9b:50:06:5e:56:d1:7c:b7:be:
ee:2d:ea:ca:a3:02:d5:20:55:94:dc:23:ad:60:b2:
86:2e:30:99:b4:cc:41:e7:b2:ce:b0:13:dc:c4:a6:
73:5a:53:f7:14:59:80:fa:f1:3f:7d:0f:9c:fe:88:
1a:a6:3f:8d:02:c3:de:13:5e:1d:8b:dc:6d:fd:33:
84:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DA:89:87:DE:5B:4B:0D:A7:85:D4:84:87:CB:E7:44:88:77:ED:3E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d130dd80-aad8-4b10-9749-34ba28d3e402.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.57.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4a:f5:c0:0a:37:fd:fc:b5:d1:dd:c3:4b:d2:07:90:06:d0:8c:
d7:c7:99:fe:89:af:0c:1a:f9:b3:cc:08:a3:14:ad:78:e7:ac:
e4:57:02:20:60:71:ae:2f:0b:0a:c8:9d:ec:76:52:0e:fd:d9:
58:28:bc:76:b3:fb:30:77:af:b0:06:21:f2:31:68:f9:bc:32:
d8:b6:af:ba:67:46:4b:0a:45:f2:11:33:7f:2d:3b:52:07:37:
f0:fe:e0:06:a7:91:88:9b:16:4a:41:7a:e9:70:5f:68:7a:c9:
08:bb:a6:97:08:02:63:7c:7b:4a:63:24:92:2f:71:0e:f3:44:
41:2c:7d:f4:e9:87:ca:92:73:9c:70:03:f5:a4:7c:4e:00:58:
76:2d:61:15:2b:a7:16:c1:0a:2f:5d:af:1a:0a:ad:5c:4d:5c:
33:e4:8e:24:61:90:53:66:db:f1:a5:48:4e:c6:fd:da:ae:d1:
96:6b:62:05:3c:5a:9a:8a:d1:37:56:c9:34:bf:a0:59:52:45:
6e:c0:13:37:fb:5d:75:87:a1:90:41:cd:41:d4:48:fb:43:ef:
12:c9:82:52:73:2f:4e:8e:c2:3b:7c:87:99:12:8c:ab:9e:ea:
a0:ce:96:c7:fe:d9:42:b5:91:07:78:5e:3b:d2:a5:29:4e:19:
a8:18:d0:37
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUVzM3OiGowqO4ql+6DeIQ1PjDqA8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjA5MDAwMDAwWhcNMjUwMTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A5ZTFkZjBhYjQzYTg0NGIzYjMxYjZhMjQwMjBmNDFiYWNh
OGE1NzM1YWI3NjJmOTFhYTRiYjJmNmJlMTFiZDM0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDbDw2uQGIAPq1P1iD/H76TArH+92XnVS6EnjMK5HnpGZZ0
dQLWrAFBEUFJoHSdVYy7sTOkYj+4nwVd5GJQyATGTwPjruggRvzpwNGG4rzku4yH
VcowaERoVwpdNJnEjNzora2tNXdmefFKuLdGdiC8UYuMyeqMZikT4gWDTbf35Tm/
ybTnV/vG8qFLaoVgcmrfW36umrFJjZwpje0NBIHUhGrMqtnw40tDTzwJFs0D+vpK
jXDIBbn9YZtQBl5W0Xy3vu4t6sqjAtUgVZTcI61gsoYuMJm0zEHnss6wE9zEpnNa
U/cUWYD68T99D5z+iBqmP40Cw94TXh2L3G39M4RHAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUndqJh95bSw2nhdSEh8vnRIh37T4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2QxMzBkZDgwLWFhZDgtNGIxMC05NzQ5LTM0YmEyOGQzZTQwMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQOTANBgkqhkiG9w0BAQsFAAOCAQEASvXACjf9/LXR3cNL0geQBtCM18eZ
/omvDBr5s8wIoxSteOes5FcCIGBxri8LCsid7HZSDv3ZWCi8drP7MHevsAYh8jFo
+bwy2LavumdGSwpF8hEzfy07Ugc38P7gBqeRiJsWSkF66XBfaHrJCLumlwgCY3x7
SmMkki9xDvNEQSx99OmHypJznHAD9aR8TgBYdi1hFSunFsEKL12vGgqtXE1cM+SO
JGGQU2bb8aVITsb92q7RlmtiBTxamorRN1bJNL+gWVJFbsATN/tddYehkEHNQdRI
+0PvEsmCUnMvTo7CO3yHmRKMq57qoM6Wx/7ZQrWRB3heO9KlKU4ZqBjQNw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:19:26 2025 by rpki-client