Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4ee18cd-1f87-4105-95c8-9f1c2d39683d.roa
File: e4ee18cd-1f87-4105-95c8-9f1c2d39683d.roa (raw, json)
Hash identifier: j/HVKpcLJbuEtRPz4xnjFwFaX+FBwJA4z1boep0iHU4=
Subject key identifier: 6D:13:13:D3:BA:80:BF:40:2D:2E:01:46:D3:B1:CD:B7:EC:4A:57:A3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2DC7FA413FB15E9DD561BB8C497E96F242BE4763
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4ee18cd-1f87-4105-95c8-9f1c2d39683d.roa
Signing time: Sat 11 Jan 2025 00:00:00 +0000
ROA not before: Sat 11 Jan 2025 00:00:00 +0000
ROA not after: Sat 15 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 205.210.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:c7:fa:41:3f:b1:5e:9d:d5:61:bb:8c:49:7e:96:f2:42:be:47:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 11 00:00:00 2025 GMT
Not After : Feb 15 23:59:59 2025 GMT
Subject: serialNumber=ea91491945689c3c454283b9ed8bc49d9dd105a09ffcbb9f45f558bccbbac81b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d2:72:68:e3:21:3d:88:f4:09:5c:f8:10:e3:
fa:50:b2:e6:53:b5:7d:99:f6:88:94:16:6a:ed:68:
b1:8d:bf:00:43:f0:5f:12:1b:72:d3:48:b0:c9:42:
bc:90:2a:a5:5e:bc:8e:e1:82:26:f7:75:e0:1d:90:
df:1f:a0:f4:0a:03:b5:3c:dd:ad:e9:02:76:03:0e:
bd:d8:3d:08:13:e5:15:43:22:36:bf:6a:61:7d:88:
f2:b0:db:2c:41:a8:15:f7:39:8c:1d:e1:cf:01:92:
73:64:15:be:f8:d3:dc:aa:d2:6c:5c:dd:76:9d:4b:
17:31:f6:42:e4:19:72:ad:1c:cb:cf:3c:24:69:4f:
40:6f:87:d9:b1:17:f6:3c:be:c5:9a:ca:99:4a:db:
17:f3:1b:7f:47:a9:2e:85:65:61:23:4f:bb:6a:0c:
09:21:69:54:6d:24:7c:05:55:7a:6a:33:64:7f:f8:
dd:dd:fd:b3:9b:36:66:13:4f:56:c5:13:a2:53:33:
09:65:c3:81:ff:bd:8f:1b:85:59:51:9d:71:64:0c:
52:1f:50:7e:07:12:9b:d2:cb:14:e1:e9:e9:df:05:
b5:ca:d3:84:5d:44:dc:5f:5e:04:e9:f6:6d:e6:3d:
fa:66:28:e2:e2:4c:a0:de:e6:45:db:19:4d:85:ff:
69:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:13:13:D3:BA:80:BF:40:2D:2E:01:46:D3:B1:CD:B7:EC:4A:57:A3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4ee18cd-1f87-4105-95c8-9f1c2d39683d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.210.108.0/22
Signature Algorithm: sha256WithRSAEncryption
79:47:c3:6c:5a:98:6c:1d:c9:85:c7:7a:bb:bd:1a:1e:5c:ee:
98:30:7a:98:57:02:1a:d9:0e:06:c1:92:9f:fc:a6:48:0b:16:
d1:8f:44:e3:6c:21:ea:95:6d:ea:bc:26:f8:f3:b8:8e:90:fa:
95:33:53:94:66:2c:4f:c1:85:a5:a2:11:6c:a3:27:78:f4:c3:
a8:95:e1:ef:b2:d6:08:84:4e:06:cd:6b:de:a9:63:bf:e0:9e:
c9:10:f1:5c:9c:73:e7:b2:b8:e8:b0:83:72:41:67:7a:8e:37:
e1:8e:ce:f0:2c:9f:18:31:58:d8:7f:d9:fd:bb:8d:a2:64:ce:
57:85:5d:17:45:64:ac:68:8a:c6:00:7a:a6:f9:09:4b:fc:b6:
24:6b:2d:38:cf:70:bd:24:35:2a:6d:bc:1c:9f:29:94:8d:5e:
c1:e5:f9:f4:5e:65:93:82:af:1d:93:2c:90:c2:25:df:b8:b0:
c8:76:a6:bc:42:71:fe:98:d0:88:f3:80:87:e8:95:c0:e9:5e:
42:8c:5d:88:47:eb:c8:bf:cd:12:d7:2a:d1:93:37:85:49:fe:
5c:c1:3d:bf:b9:a8:a6:78:9c:17:86:39:8f:5c:7a:b8:11:62:
7d:1c:de:2d:92:5b:38:93:83:cf:ee:48:90:aa:c7:c7:3f:c2:
c5:16:51:37
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULcf6QT+xXp3VYbuMSX6W8kK+R2MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTExMDAwMDAwWhcNMjUwMjE1MjM1OTU5
WjB6MUkwRwYDVQQFE0BlYTkxNDkxOTQ1Njg5YzNjNDU0MjgzYjllZDhiYzQ5ZDlk
ZDEwNWEwOWZmY2JiOWY0NWY1NThiY2NiYmFjODFiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC30nJo4yE9iPQJXPgQ4/pQsuZTtX2Z9oiUFmrtaLGNvwBD
8F8SG3LTSLDJQryQKqVevI7hgib3deAdkN8foPQKA7U83a3pAnYDDr3YPQgT5RVD
Ija/amF9iPKw2yxBqBX3OYwd4c8BknNkFb7409yq0mxc3XadSxcx9kLkGXKtHMvP
PCRpT0Bvh9mxF/Y8vsWayplK2xfzG39HqS6FZWEjT7tqDAkhaVRtJHwFVXpqM2R/
+N3d/bObNmYTT1bFE6JTMwllw4H/vY8bhVlRnXFkDFIfUH4HEpvSyxTh6enfBbXK
04RdRNxfXgTp9m3mPfpmKOLiTKDe5kXbGU2F/2l9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUbRMT07qAv0AtLgFG07HNt+xKV6MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U0ZWUxOGNkLTFmODctNDEwNS05NWM4LTlmMWMyZDM5NjgzZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALN0mwwDQYJKoZIhvcNAQELBQADggEBAHlHw2xamGwdyYXHeru9Gh5c7pgw
ephXAhrZDgbBkp/8pkgLFtGPRONsIeqVbeq8JvjzuI6Q+pUzU5RmLE/BhaWiEWyj
J3j0w6iV4e+y1giETgbNa96pY7/gnskQ8Vycc+eyuOiwg3JBZ3qON+GOzvAsnxgx
WNh/2f27jaJkzleFXRdFZKxoisYAeqb5CUv8tiRrLTjPcL0kNSptvByfKZSNXsHl
+fReZZOCrx2TLJDCJd+4sMh2prxCcf6Y0IjzgIfolcDpXkKMXYhH68i/zRLXKtGT
N4VJ/lzBPb+5qKZ4nBeGOY9cergRYn0c3i2SWziTg8/uSJCqx8c/wsUWUTc=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:05 2025 by rpki-client