Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ea92d0d-8edc-48f8-a695-5c2e6a83a86a.roa
File: 0ea92d0d-8edc-48f8-a695-5c2e6a83a86a.roa (raw, json)
Hash identifier: ouOQ41Tu8LXe8CADXSHvUUNvAP8yMnetLFPwbW8JEiU=
Subject key identifier: 97:58:29:6C:D8:47:02:DF:A2:D8:A7:CB:F3:76:38:19:E2:DF:93:D3
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 69730DA260D3EBB8FBE81878720B1D35B774336E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ea92d0d-8edc-48f8-a695-5c2e6a83a86a.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.93.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:73:0d:a2:60:d3:eb:b8:fb:e8:18:78:72:0b:1d:35:b7:74:33:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=3f9c65cebcf3b0e8284cf87b55858b0dbaeb3abb97a67d39231b282f7920d7b9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2f:2e:1f:03:fb:d0:0e:b8:c4:e9:63:a3:8a:
56:3a:54:f3:30:38:9b:88:5d:cf:2a:76:52:39:17:
56:90:09:af:bb:17:88:29:25:bf:89:9b:64:63:cb:
e3:fd:f7:04:93:b8:77:22:8d:36:68:ee:7b:6e:bf:
59:89:7c:51:6c:8c:08:5e:90:44:9a:02:ce:bc:1e:
00:39:c8:bc:7f:23:03:63:98:3f:75:19:13:a9:4e:
63:a8:54:83:04:43:9d:63:32:ad:1e:ef:97:f8:f5:
f3:1a:70:68:52:a7:e8:a7:be:5e:7a:c6:fb:30:f4:
1c:8d:c0:70:08:9f:91:18:d8:bc:83:bd:90:60:4a:
ca:ae:6f:ea:cf:85:1c:c1:dd:21:ea:9d:61:47:8f:
06:ca:40:6f:20:df:2d:b7:68:aa:53:3e:da:16:40:
9c:0f:d4:c2:64:7d:c7:22:f2:5a:13:d1:8d:cb:a5:
f5:3d:8a:ae:59:d6:95:a3:7a:a0:0a:9d:6a:9a:46:
eb:7f:54:4f:f4:35:d6:ae:ac:71:71:a9:df:4f:15:
0d:04:96:fb:e6:1b:47:39:1c:fb:4e:f8:aa:40:8b:
d5:d9:f3:3f:de:40:eb:47:c9:50:40:2b:05:44:7a:
6a:c2:64:02:a2:8c:58:56:cd:17:cb:26:4b:e4:a8:
d4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:58:29:6C:D8:47:02:DF:A2:D8:A7:CB:F3:76:38:19:E2:DF:93:D3
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ea92d0d-8edc-48f8-a695-5c2e6a83a86a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.93.237.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:21:10:be:d7:73:11:7e:03:0e:8a:58:12:29:90:64:37:8f:
2a:8d:d7:f8:cb:23:00:ed:2f:1f:f0:e7:b6:88:69:99:6b:b4:
63:78:2d:e2:11:f8:1a:c1:0d:35:c3:ec:d0:19:08:a1:38:66:
d3:72:70:3a:e0:2d:14:ec:ae:30:1f:10:81:1e:00:3a:6e:cf:
73:31:b4:3e:8e:ae:42:2a:ba:d3:b1:43:44:c4:b3:59:8d:36:
f8:73:8a:82:e1:33:05:87:e5:7e:3c:3b:e2:88:9c:21:4f:38:
e6:88:ee:c2:45:ef:84:de:85:11:af:c5:c9:a1:76:7a:4b:64:
55:d5:f9:83:2e:06:81:35:1f:64:db:9d:d5:21:3a:aa:45:b9:
70:3a:dd:62:a2:16:4f:56:47:86:f5:15:fd:39:fb:d0:72:33:
de:ea:70:8b:83:9e:45:d3:e3:b4:a5:8d:ab:fd:0b:89:a2:52:
b1:97:34:c8:0d:d1:85:53:ed:16:21:ca:f8:75:46:b1:e6:41:
60:cf:66:95:70:e1:5c:7d:10:4e:54:e2:ad:bb:d4:ca:f7:7c:
a2:be:a6:02:8a:a0:a4:f3:98:c3:3e:f0:69:84:a3:3f:e8:9b:
22:c5:6e:2c:b1:9a:21:31:36:dd:d4:7f:5e:89:70:ab:ab:dc:
b0:3f:7d:54
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUaXMNomDT67j76Bh4cgsdNbd0M24wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTA2MDAwMDAwWhcNMjUwMjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0AzZjljNjVjZWJjZjNiMGU4Mjg0Y2Y4N2I1NTg1OGIwZGJh
ZWIzYWJiOTdhNjdkMzkyMzFiMjgyZjc5MjBkN2I5MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCmLy4fA/vQDrjE6WOjilY6VPMwOJuIXc8qdlI5F1aQCa+7
F4gpJb+Jm2Rjy+P99wSTuHcijTZo7ntuv1mJfFFsjAhekESaAs68HgA5yLx/IwNj
mD91GROpTmOoVIMEQ51jMq0e75f49fMacGhSp+invl56xvsw9ByNwHAIn5EY2LyD
vZBgSsqub+rPhRzB3SHqnWFHjwbKQG8g3y23aKpTPtoWQJwP1MJkfcci8loT0Y3L
pfU9iq5Z1pWjeqAKnWqaRut/VE/0NdaurHFxqd9PFQ0ElvvmG0c5HPtO+KpAi9XZ
8z/eQOtHyVBAKwVEemrCZAKijFhWzRfLJkvkqNTHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUl1gpbNhHAt+i2KfL83Y4GeLfk9MwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzBlYTkyZDBkLThlZGMtNDhmOC1hNjk1LTVjMmU2YTgzYTg2YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA0Xe0wDQYJKoZIhvcNAQELBQADggEBAI0hEL7XcxF+Aw6KWBIpkGQ3jyqN
1/jLIwDtLx/w57aIaZlrtGN4LeIR+BrBDTXD7NAZCKE4ZtNycDrgLRTsrjAfEIEe
ADpuz3MxtD6OrkIqutOxQ0TEs1mNNvhzioLhMwWH5X48O+KInCFPOOaI7sJF74Te
hRGvxcmhdnpLZFXV+YMuBoE1H2TbndUhOqpFuXA63WKiFk9WR4b1Ff05+9ByM97q
cIuDnkXT47Sljav9C4miUrGXNMgN0YVT7RYhyvh1RrHmQWDPZpVw4Vx9EE5U4q27
1Mr3fKK+pgKKoKTzmMM+8GmEoz/omyLFbiyxmiExNt3Uf16JcKur3LA/fVQ=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:48:39 2025 by rpki-client