Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d240e5e0-ac2f-4b0d-8036-6e171c0a615a.roa
File: d240e5e0-ac2f-4b0d-8036-6e171c0a615a.roa (raw, json)
Hash identifier: DO0wable40ExBsAX65Y1u53aY0fc0zwavIfnU7LVmC8=
Subject key identifier: 41:6B:25:D1:88:3C:0C:6B:DF:0B:C3:EF:95:42:71:0E:9B:00:EE:CE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 77D55F1C88496D6403EB5F1B1353F7DF0DE2E9DA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d240e5e0-ac2f-4b0d-8036-6e171c0a615a.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 168.192.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:d5:5f:1c:88:49:6d:64:03:eb:5f:1b:13:53:f7:df:0d:e2:e9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=a48034216442af62105d132bea828aefab9d8ce86e39fd6456b5e4bb06d991b3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f8:76:88:f6:95:3f:f6:4f:e5:42:38:98:13:
1a:9f:0b:3b:cf:f9:0e:b7:fc:31:6b:a8:31:a4:23:
34:da:b9:49:9a:82:69:d5:05:14:13:38:33:fe:b8:
ea:30:47:88:71:e1:98:7b:6d:a9:e5:a1:fd:6c:1d:
81:77:6f:36:78:40:69:26:03:87:6b:39:a0:bc:f2:
db:71:23:02:76:a6:c7:50:bc:4b:8c:4c:96:88:3a:
bc:a7:30:05:90:54:10:c8:73:27:45:fc:1d:0f:fd:
34:de:90:09:0a:62:87:b0:41:de:e6:87:63:08:a0:
4b:c3:b9:9a:17:56:24:80:e4:7f:da:4f:5a:21:3d:
07:61:da:51:41:3e:d8:1a:34:98:2b:79:2c:be:71:
5c:f2:78:1f:60:d7:42:b8:20:8e:53:c5:9c:7a:7a:
97:95:da:ad:d7:df:94:c6:1d:84:0e:c4:23:6f:d7:
87:a0:41:01:f2:85:79:30:5b:9f:59:1f:00:1e:ab:
b6:df:92:33:0e:b5:f6:bf:49:2a:f1:f1:2a:ac:80:
59:75:8c:b1:c4:3e:a0:34:b2:fc:8c:9a:a4:de:8b:
53:3c:ac:4d:f4:57:be:f1:e3:cb:39:17:0d:09:62:
74:5a:e0:4a:0e:85:62:1f:a3:8c:b1:03:e9:5b:91:
44:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6B:25:D1:88:3C:0C:6B:DF:0B:C3:EF:95:42:71:0E:9B:00:EE:CE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d240e5e0-ac2f-4b0d-8036-6e171c0a615a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.192.0.0/15
Signature Algorithm: sha256WithRSAEncryption
05:e5:4f:06:a6:fc:c9:1f:ba:e2:31:d5:30:82:b1:50:7e:70:
20:c3:33:5a:00:16:48:aa:32:b4:bd:ef:a0:14:c8:a9:8a:56:
0a:a9:a6:0f:79:ef:10:2f:48:8a:9d:33:fe:8d:49:89:88:8c:
1f:6a:4a:b1:66:47:f1:5f:3f:09:cb:d7:11:4a:4c:de:90:d0:
41:81:a4:ca:33:68:18:d9:c8:92:97:5e:6c:20:88:4f:ac:89:
38:a9:23:93:92:96:b5:89:98:b1:e5:d5:3b:c5:ac:2c:0d:b2:
bb:ea:5c:28:85:8e:8b:55:46:9c:8a:7d:02:d2:cf:bc:3d:0f:
4d:96:b9:a3:aa:99:14:e5:5f:eb:3d:42:e5:b9:a0:b5:df:c3:
f1:ff:67:af:8b:18:45:86:1f:ab:e6:ae:a4:e0:e8:52:7e:c2:
96:37:42:0b:c4:33:30:2b:d4:8c:08:29:83:00:ce:c3:93:48:
af:b1:af:79:cf:09:1e:ef:6d:09:92:fa:43:ad:9e:b3:2e:1c:
6f:64:9e:8f:3d:fd:b4:86:0b:f2:74:7d:a5:71:ab:e2:4b:e9:
14:0d:a7:96:56:54:7d:2a:f6:73:e5:bd:bf:d4:8f:a9:aa:fb:
48:ad:b2:e7:8c:44:c2:90:f3:98:f6:ca:8d:4b:33:de:1d:f3:
51:a1:2f:3f
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUd9VfHIhJbWQD618bE1P33w3i6dowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTE0MDAwMDAwWhcNMjUwMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BhNDgwMzQyMTY0NDJhZjYyMTA1ZDEzMmJlYTgyOGFlZmFi
OWQ4Y2U4NmUzOWZkNjQ1NmI1ZTRiYjA2ZDk5MWIzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDP+HaI9pU/9k/lQjiYExqfCzvP+Q63/DFrqDGkIzTauUma
gmnVBRQTODP+uOowR4hx4Zh7banlof1sHYF3bzZ4QGkmA4drOaC88ttxIwJ2psdQ
vEuMTJaIOrynMAWQVBDIcydF/B0P/TTekAkKYoewQd7mh2MIoEvDuZoXViSA5H/a
T1ohPQdh2lFBPtgaNJgreSy+cVzyeB9g10K4II5TxZx6epeV2q3X35TGHYQOxCNv
14egQQHyhXkwW59ZHwAeq7bfkjMOtfa/SSrx8SqsgFl1jLHEPqA0svyMmqTei1M8
rE30V77x48s5Fw0JYnRa4EoOhWIfo4yxA+lbkUQfAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUQWsl0Yg8DGvfC8PvlUJxDpsA7s4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2QyNDBlNWUwLWFjMmYtNGIwZC04MDM2LTZlMTcxYzBhNjE1YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwGowDANBgkqhkiG9w0BAQsFAAOCAQEABeVPBqb8yR+64jHVMIKxUH5wIMMz
WgAWSKoytL3voBTIqYpWCqmmD3nvEC9Iip0z/o1JiYiMH2pKsWZH8V8/CcvXEUpM
3pDQQYGkyjNoGNnIkpdebCCIT6yJOKkjk5KWtYmYseXVO8WsLA2yu+pcKIWOi1VG
nIp9AtLPvD0PTZa5o6qZFOVf6z1C5bmgtd/D8f9nr4sYRYYfq+aupODoUn7CljdC
C8QzMCvUjAgpgwDOw5NIr7Gvec8JHu9tCZL6Q62esy4cb2Sejz39tIYL8nR9pXGr
4kvpFA2nllZUfSr2c+W9v9SPqar7SK2y54xEwpDzmPbKjUsz3h3zUaEvPw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:42:10 2025 by rpki-client