Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed9ea5ca-e728-4639-afa6-20b57823ca6e.roa
File: ed9ea5ca-e728-4639-afa6-20b57823ca6e.roa (raw, json)
Hash identifier: MGgMdt80KBDTYhsYATfPaZ5jVft95OZ0cgJ5fO8q+8I=
Subject key identifier: 44:A4:9E:9E:E1:50:12:FF:88:8D:70:4B:40:C3:4D:4D:B2:FE:7B:50
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 21812F111FB32877C0A56FA7972AFAE626A4DA2D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed9ea5ca-e728-4639-afa6-20b57823ca6e.roa
Signing time: Sat 28 Dec 2024 00:00:00 +0000
ROA not before: Sat 28 Dec 2024 00:00:00 +0000
ROA not after: Sat 01 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:81:2f:11:1f:b3:28:77:c0:a5:6f:a7:97:2a:fa:e6:26:a4:da:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 28 00:00:00 2024 GMT
Not After : Feb 1 23:59:59 2025 GMT
Subject: serialNumber=2ac19966d60dd6514fa74fffa2c96f90da13d8c286b9a2cb0260c66e8139f6f1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:8d:1c:c7:7f:65:f4:9a:d0:b0:fa:a6:bc:
d9:6a:eb:1f:b9:56:d8:da:c6:32:9d:7a:bd:1b:86:
51:08:3b:4f:e7:96:a0:d2:e1:ee:cb:cb:41:54:70:
06:b8:c4:a0:ac:9a:4a:18:05:6d:8c:4a:6e:e5:a4:
53:00:d2:2d:91:80:10:e0:36:b5:7d:65:2e:d4:c0:
a1:9d:28:20:be:18:9f:8e:3a:e0:78:18:44:c8:d0:
84:37:6a:43:d7:9a:00:50:a0:23:c3:53:4c:33:1a:
48:5c:36:0a:2a:06:2e:43:d0:2c:12:cd:a4:17:8f:
e3:37:49:b4:d5:82:8a:e6:24:41:3d:d3:a9:ce:a0:
85:61:14:70:40:56:52:4d:9a:65:26:c1:65:4a:2e:
2d:fd:55:c0:e0:d0:3d:77:7c:86:86:f4:96:24:a7:
f5:f3:f4:fc:44:e0:01:01:0c:e6:30:4e:3b:40:19:
94:64:5c:ee:c4:ff:66:e0:d1:d9:4f:d1:e9:27:b6:
b2:f5:02:86:fc:72:7d:c5:d4:62:30:4e:59:1e:93:
1e:6f:be:e6:ce:c8:d3:2c:89:be:88:2f:b2:7a:76:
d0:37:b2:56:bf:f6:00:03:6c:56:d7:a6:40:36:58:
10:59:7b:82:02:1b:9e:98:12:a3:e0:2a:9b:26:fa:
17:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A4:9E:9E:E1:50:12:FF:88:8D:70:4B:40:C3:4D:4D:B2:FE:7B:50
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed9ea5ca-e728-4639-afa6-20b57823ca6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.255.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:fc:39:e3:89:2e:00:33:b1:55:b4:3f:3c:c9:6e:f1:2c:e2:
76:eb:72:a3:2a:d3:e6:53:03:a6:94:95:2e:2b:79:c9:9e:61:
f6:21:49:5b:64:71:8e:ba:c4:a5:cc:ca:dc:a7:88:1e:ab:1a:
41:3d:2f:c0:94:b6:f1:33:3a:b8:44:dd:5c:fb:90:98:7e:e4:
ee:23:5e:72:5e:21:27:5d:5c:6d:20:ba:b0:8c:12:cf:18:83:
67:b3:26:ba:92:83:e2:5e:bf:ba:1b:3b:98:b9:aa:57:38:8b:
70:d2:62:83:d2:0a:af:cf:71:d1:c5:12:43:e5:fd:c6:fe:dd:
70:b7:1d:67:5b:5e:8b:b5:34:0c:37:cf:3c:4c:19:33:f1:17:
87:45:17:5a:27:0f:3d:da:69:79:74:cb:13:26:4e:e0:11:f5:
d4:60:23:aa:02:45:05:a6:e5:3a:f8:7f:e4:84:62:02:ad:17:
45:16:ba:25:98:db:b5:73:53:c7:20:77:c6:92:20:85:61:2c:
29:3a:44:c2:ff:8d:b8:9f:af:3e:a6:af:f5:66:5a:bb:2a:b7:
98:e8:79:e5:dc:c2:5a:92:cb:ea:2e:0e:55:13:1e:34:0c:a5:
0e:e0:98:7b:a8:c1:8c:e7:49:83:47:92:ee:3f:ea:6e:2f:d2:
35:ae:b9:c9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUIYEvER+zKHfApW+nlyr65iak2i0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjI4MDAwMDAwWhcNMjUwMjAxMjM1OTU5
WjB6MUkwRwYDVQQFE0AyYWMxOTk2NmQ2MGRkNjUxNGZhNzRmZmZhMmM5NmY5MGRh
MTNkOGMyODZiOWEyY2IwMjYwYzY2ZTgxMzlmNmYxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC67Y0cx39l9JrQsPqmvNlq6x+5VtjaxjKder0bhlEIO0/n
lqDS4e7Ly0FUcAa4xKCsmkoYBW2MSm7lpFMA0i2RgBDgNrV9ZS7UwKGdKCC+GJ+O
OuB4GETI0IQ3akPXmgBQoCPDU0wzGkhcNgoqBi5D0CwSzaQXj+M3SbTVgormJEE9
06nOoIVhFHBAVlJNmmUmwWVKLi39VcDg0D13fIaG9JYkp/Xz9PxE4AEBDOYwTjtA
GZRkXO7E/2bg0dlP0ekntrL1Aob8cn3F1GIwTlkekx5vvubOyNMsib6IL7J6dtA3
sla/9gADbFbXpkA2WBBZe4ICG56YEqPgKpsm+hcLAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQURKSenuFQEv+IjXBLQMNNTbL+e1AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2VkOWVhNWNhLWU3MjgtNDYzOS1hZmE2LTIwYjU3ODIzY2E2ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsP8wDQYJKoZIhvcNAQELBQADggEBALf8OeOJLgAzsVW0PzzJbvEs4nbr
cqMq0+ZTA6aUlS4recmeYfYhSVtkcY66xKXMytyniB6rGkE9L8CUtvEzOrhE3Vz7
kJh+5O4jXnJeISddXG0gurCMEs8Yg2ezJrqSg+Jev7obO5i5qlc4i3DSYoPSCq/P
cdHFEkPl/cb+3XC3HWdbXou1NAw3zzxMGTPxF4dFF1onDz3aaXl0yxMmTuAR9dRg
I6oCRQWm5Tr4f+SEYgKtF0UWuiWY27VzU8cgd8aSIIVhLCk6RML/jbifrz6mr/Vm
Wrsqt5joeeXcwlqSy+ouDlUTHjQMpQ7gmHuowYznSYNHku4/6m4v0jWuuck=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:50:58 2025 by rpki-client