Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee2fdf06-81e8-4e0a-8595-822d19ded480.roa
File: ee2fdf06-81e8-4e0a-8595-822d19ded480.roa (raw, json)
Hash identifier: 9peaJmCc9Qm6jj36j2ORD2MOTeZwYTli6f7KxXNhJFM=
Subject key identifier: C4:68:1B:82:34:D0:AC:CB:E2:C7:04:D7:22:69:AE:9D:9D:86:CD:2D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4E46995097986CB77ED58B58123E916B85D2CA03
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee2fdf06-81e8-4e0a-8595-822d19ded480.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 74.127.0.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:46:99:50:97:98:6c:b7:7e:d5:8b:58:12:3e:91:6b:85:d2:ca:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=0ee3e3a9661a684aa4f842ab5f94d6e1b23036e6a76bb8e1b919c8e0f60d0b89, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a8:7c:4a:3c:93:02:68:ab:a0:52:eb:d5:1b:
50:4e:b5:73:43:5a:29:05:6c:e4:66:24:c3:f3:92:
c1:4a:5b:be:e7:a8:ac:c7:df:74:c2:f1:2b:d9:ae:
54:e3:42:e9:84:e6:31:36:86:c2:6e:48:ac:0b:ad:
b0:26:f5:d1:5b:7e:c0:42:19:fc:e5:f6:ac:b6:ea:
64:93:41:8e:6b:8f:8f:04:bd:df:7b:e9:3a:9d:a7:
fa:4a:63:e3:6c:e1:17:d0:8c:b0:1d:2f:bd:8a:b8:
a3:16:03:14:c3:fa:58:d7:c4:6e:30:ed:b3:ad:5d:
b0:3d:04:20:7b:43:b6:98:ef:25:25:de:f9:24:db:
e7:8d:ef:98:1d:b2:29:85:51:d9:a1:de:c2:53:dd:
36:61:6e:12:59:f9:b8:8b:b4:43:65:55:de:a0:4f:
ad:b0:de:79:2e:89:5e:a4:cf:8a:f7:d8:cb:76:6d:
46:c8:ff:27:f8:3f:8b:e3:e6:2d:7d:d8:21:a2:8b:
01:05:8b:e2:dc:17:88:16:49:56:82:34:1b:5d:ac:
c8:a9:bb:52:26:32:a5:25:2a:72:6e:e2:95:40:1b:
a8:87:37:b0:51:14:71:4d:32:a5:64:b7:1e:91:9d:
e7:77:29:c7:fa:9f:37:6f:b0:61:6e:7d:be:f4:69:
5a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:68:1B:82:34:D0:AC:CB:E2:C7:04:D7:22:69:AE:9D:9D:86:CD:2D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee2fdf06-81e8-4e0a-8595-822d19ded480.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.127.0.0/18
Signature Algorithm: sha256WithRSAEncryption
bd:a7:4b:98:ac:1e:aa:34:42:db:f1:87:93:2b:11:93:d0:2a:
71:15:37:35:f3:9f:19:b8:58:a3:31:6e:cd:87:f7:90:a1:d6:
e0:25:21:94:c3:6b:ad:d0:8f:80:63:18:07:35:92:8e:7c:81:
08:3f:35:9f:6b:00:3b:36:cc:29:90:21:0f:0b:62:94:93:70:
3a:6b:ab:fb:8b:eb:b9:3c:a1:d3:0c:11:29:6a:fb:f2:0c:41:
d1:c5:65:c1:9b:89:6b:20:c5:2e:47:44:ce:a9:7a:8e:9f:1e:
1f:d1:86:01:ef:05:40:39:12:d2:04:62:6d:e0:8d:c5:bd:68:
14:67:f5:0f:3e:68:14:6c:5b:4b:71:90:db:7e:f4:9a:b6:96:
11:b4:2e:72:e3:d1:2a:c7:b2:3d:36:aa:e8:e7:59:be:e3:6b:
51:ab:36:72:34:12:12:c4:33:f9:0c:53:7e:46:21:f6:79:97:
5e:24:1d:6b:1d:6e:65:6d:7a:79:a8:5d:2a:c1:92:57:56:ca:
a8:7b:c1:0c:08:d2:92:f0:e9:59:9c:16:f3:40:05:64:ab:f3:
99:11:83:20:e1:8f:e9:9c:d2:76:68:89:1c:f3:26:5f:20:97:
b9:39:20:7c:79:48:c6:0d:11:1c:e5:00:89:14:45:1d:db:27:
64:5f:2c:b5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTkaZUJeYbLd+1YtYEj6Ra4XSygMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjI3MDAwMDAwWhcNMjUwMTMxMjM1OTU5
WjB6MUkwRwYDVQQFE0AwZWUzZTNhOTY2MWE2ODRhYTRmODQyYWI1Zjk0ZDZlMWIy
MzAzNmU2YTc2YmI4ZTFiOTE5YzhlMGY2MGQwYjg5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCpqHxKPJMCaKugUuvVG1BOtXNDWikFbORmJMPzksFKW77n
qKzH33TC8SvZrlTjQumE5jE2hsJuSKwLrbAm9dFbfsBCGfzl9qy26mSTQY5rj48E
vd976Tqdp/pKY+Ns4RfQjLAdL72KuKMWAxTD+ljXxG4w7bOtXbA9BCB7Q7aY7yUl
3vkk2+eN75gdsimFUdmh3sJT3TZhbhJZ+biLtENlVd6gT62w3nkuiV6kz4r32Mt2
bUbI/yf4P4vj5i192CGiiwEFi+LcF4gWSVaCNBtdrMipu1ImMqUlKnJu4pVAG6iH
N7BRFHFNMqVktx6Rned3Kcf6nzdvsGFufb70aVqHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUxGgbgjTQrMvixwTXImmunZ2GzS0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2VlMmZkZjA2LTgxZTgtNGUwYS04NTk1LTgyMmQxOWRlZDQ4MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZKfwAwDQYJKoZIhvcNAQELBQADggEBAL2nS5isHqo0Qtvxh5MrEZPQKnEV
NzXznxm4WKMxbs2H95Ch1uAlIZTDa63Qj4BjGAc1ko58gQg/NZ9rADs2zCmQIQ8L
YpSTcDprq/uL67k8odMMESlq+/IMQdHFZcGbiWsgxS5HRM6peo6fHh/RhgHvBUA5
EtIEYm3gjcW9aBRn9Q8+aBRsW0txkNt+9Jq2lhG0LnLj0SrHsj02qujnWb7ja1Gr
NnI0EhLEM/kMU35GIfZ5l14kHWsdbmVtenmoXSrBkldWyqh7wQwI0pLw6VmcFvNA
BWSr85kRgyDhj+mc0nZoiRzzJl8gl7k5IHx5SMYNERzlAIkURR3bJ2RfLLU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:44 2025 by rpki-client