Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33701c22-a7ab-478a-9573-1949985c9be2.roa
File: 33701c22-a7ab-478a-9573-1949985c9be2.roa (raw, json)
Hash identifier: c2Wtha0WC8eMJy+or1I2BFkeqAwWt+EMYHcznWqBEX4=
Subject key identifier: D3:70:38:9F:15:38:C4:D3:90:0D:14:C3:90:2E:5E:05:32:B9:CD:86
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2D14BAD361DC473937CB7203DAE043CE876C91F6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33701c22-a7ab-478a-9573-1949985c9be2.roa
Signing time: Mon 28 Aug 2023 00:00:00 +0000
ROA not before: Mon 28 Aug 2023 00:00:00 +0000
ROA not after: Mon 02 Oct 2023 23:59:59 +0000
asID: 8987
IP address blocks: 192.189.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:14:ba:d3:61:dc:47:39:37:cb:72:03:da:e0:43:ce:87:6c:91:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 28 00:00:00 2023 GMT
Not After : Oct 2 23:59:59 2023 GMT
Subject: serialNumber=6d5141bcb1f43ffce786ed2645d00de3786961628eb856e20b89e13a3a36a1a1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:49:03:f4:95:ec:c8:f7:33:38:fd:0d:a1:9c:
c9:95:ce:97:ea:03:a0:ee:5b:a5:3b:d1:cb:7c:bd:
0d:19:a8:b9:62:05:da:86:4d:eb:01:15:91:72:41:
94:74:aa:7e:4a:45:8e:46:4b:1d:32:8a:a1:ce:9d:
a5:cf:41:78:39:79:45:c0:c0:be:ef:6b:1a:d5:4f:
5d:7b:f7:f8:9e:c7:83:a4:52:ac:bd:90:a5:81:9f:
19:38:e7:96:92:33:77:5a:2a:82:ff:d8:6d:1d:95:
87:b3:ef:2e:a0:ae:54:12:b0:58:19:8c:e7:55:65:
60:9e:0b:34:02:84:65:56:7b:d7:5a:32:98:a9:ac:
20:22:86:3c:c6:ef:97:2b:ea:ec:cb:78:8e:1b:74:
39:88:32:e5:96:bb:de:dc:26:cb:77:dc:98:1c:be:
a7:0b:4a:d4:17:42:af:1e:f2:58:d3:a5:0a:83:96:
b2:e4:5c:f7:d8:7b:ef:23:90:fe:8f:c7:cc:88:3a:
05:56:10:c2:21:56:e4:29:14:54:65:36:86:44:04:
69:9e:b1:91:4a:f9:a1:a6:62:8a:41:82:96:b0:20:
09:6c:2b:6a:d8:92:72:fd:90:0d:79:47:aa:a9:ea:
4d:5b:a5:3e:8a:1c:8c:73:99:9f:65:53:37:06:ad:
58:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:70:38:9F:15:38:C4:D3:90:0D:14:C3:90:2E:5E:05:32:B9:CD:86
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33701c22-a7ab-478a-9573-1949985c9be2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.189.196.0/24
Signature Algorithm: sha256WithRSAEncryption
54:1c:36:95:9e:2c:30:28:0d:6a:a2:aa:83:b7:93:2b:80:92:
11:16:93:83:03:22:a3:6d:07:4b:d7:68:0f:0f:5c:84:3d:45:
30:6b:fe:c3:1a:bb:6d:00:9a:80:b7:92:ac:3f:95:5b:00:88:
cf:4d:72:85:88:0d:fa:fa:9a:91:65:5c:50:91:26:a0:6e:65:
e1:cc:55:8d:25:0c:c6:3d:b1:d5:26:72:00:8f:c5:4c:e5:33:
56:f0:58:e1:5d:c5:15:66:f5:c1:b6:38:c1:59:e9:66:b9:96:
13:8a:d1:68:2e:cf:8c:69:56:ea:17:16:14:53:9e:9d:61:60:
e7:33:5d:cc:18:28:0a:5d:df:8c:bf:95:cb:09:c7:60:06:c3:
74:21:f7:0b:5c:9f:fc:d3:27:3a:e7:5e:42:fa:d2:4c:77:68:
99:22:b2:83:7b:04:0a:54:eb:aa:22:da:2b:79:52:e8:17:a8:
12:f7:97:e3:38:10:b4:d4:a7:ef:f5:4e:0f:ce:97:51:b8:51:
1a:4e:56:d4:61:ac:e9:a6:02:a5:fb:58:2f:7b:6d:dc:18:5e:
37:41:88:07:a5:f2:1c:a0:fc:7e:6a:90:b6:6f:33:33:92:39:
c3:08:a2:a1:5b:7b:64:29:74:c9:9d:35:7f:fa:40:45:48:e3:
c1:c6:75:66
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULRS602HcRzk3y3ID2uBDzodskfYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwODI4MDAwMDAwWhcNMjMxMDAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A2ZDUxNDFiY2IxZjQzZmZjZTc4NmVkMjY0NWQwMGRlMzc4
Njk2MTYyOGViODU2ZTIwYjg5ZTEzYTNhMzZhMWExMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCbSQP0lezI9zM4/Q2hnMmVzpfqA6DuW6U70ct8vQ0ZqLli
BdqGTesBFZFyQZR0qn5KRY5GSx0yiqHOnaXPQXg5eUXAwL7vaxrVT1179/iex4Ok
Uqy9kKWBnxk455aSM3daKoL/2G0dlYez7y6grlQSsFgZjOdVZWCeCzQChGVWe9da
MpiprCAihjzG75cr6uzLeI4bdDmIMuWWu97cJst33JgcvqcLStQXQq8e8ljTpQqD
lrLkXPfYe+8jkP6Px8yIOgVWEMIhVuQpFFRlNoZEBGmesZFK+aGmYopBgpawIAls
K2rYknL9kA15R6qp6k1bpT6KHIxzmZ9lUzcGrVjnAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU03A4nxU4xNOQDRTDkC5eBTK5zYYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzMzNzAxYzIyLWE3YWItNDc4YS05NTczLTE5NDk5ODVjOWJlMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADAvcQwDQYJKoZIhvcNAQELBQADggEBAFQcNpWeLDAoDWqiqoO3kyuAkhEW
k4MDIqNtB0vXaA8PXIQ9RTBr/sMau20AmoC3kqw/lVsAiM9NcoWIDfr6mpFlXFCR
JqBuZeHMVY0lDMY9sdUmcgCPxUzlM1bwWOFdxRVm9cG2OMFZ6Wa5lhOK0Wguz4xp
VuoXFhRTnp1hYOczXcwYKApd34y/lcsJx2AGw3Qh9wtcn/zTJzrnXkL60kx3aJki
soN7BApU66oi2it5UugXqBL3l+M4ELTUp+/1Tg/Ol1G4URpOVtRhrOmmAqX7WC97
bdwYXjdBiAel8hyg/H5qkLZvMzOSOcMIoqFbe2QpdMmdNX/6QEVI48HGdWY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:43 2024 by rpki-client on console-ams.rpki-client.org