Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/0f085a03-ad4c-4f84-96bd-5bbe944039fd.roa
File: 0f085a03-ad4c-4f84-96bd-5bbe944039fd.roa (raw, json)
Hash identifier: Va4dyl46kL5R+ZmNYtn9yFnNHJhHhR8Inf22otikJvk=
Subject key identifier: A1:30:9C:DC:FD:26:3B:EB:00:2D:69:54:0D:CF:28:1B:6C:52:88:FA
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 2A7F648CD2FC2284A0AEE5D91DB4AF758252EE0E
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/0f085a03-ad4c-4f84-96bd-5bbe944039fd.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 206.55.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:7f:64:8c:d2:fc:22:84:a0:ae:e5:d9:1d:b4:af:75:82:52:ee:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1e:50:4f:5a:a7:8d:04:0a:0d:7a:43:86:3a:
5a:70:be:03:26:61:2f:9b:81:29:84:b7:4a:33:c6:
2e:9c:96:2a:77:89:a7:ae:97:f6:3e:5d:cd:9e:30:
fb:9c:d6:c8:87:35:25:d4:d7:70:b2:40:fe:db:b5:
a0:64:5d:92:3f:cc:99:76:da:79:40:f5:dc:39:a0:
ec:22:a9:b0:50:fa:5f:6c:b0:a5:e7:fd:31:af:9f:
05:2e:64:00:a8:b7:c3:67:cf:52:3d:3d:be:92:d2:
48:3d:72:ed:76:46:27:51:e6:0f:7c:02:53:25:85:
95:08:bc:af:f8:7c:42:92:c9:32:64:bd:22:35:ff:
be:27:3a:c2:e8:c7:da:c7:78:d8:c3:b8:f4:5f:0f:
56:be:47:59:cc:9f:f8:d7:d6:ae:75:9f:15:56:b6:
68:29:b9:ae:4b:4d:cf:45:cd:f4:14:6f:cd:5b:e5:
54:87:e9:7c:9d:39:64:80:0d:f0:25:e1:79:85:f5:
ab:37:bc:13:28:e3:52:d4:1b:c2:08:98:e9:b9:db:
d1:f0:9c:78:47:e0:b1:22:02:b1:a5:94:7f:cb:01:
b4:92:67:fa:8f:10:57:2f:bd:48:ff:e4:21:e4:4f:
f6:57:e6:58:38:2c:fb:c4:51:b4:85:27:9d:0d:b3:
72:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:30:9C:DC:FD:26:3B:EB:00:2D:69:54:0D:CF:28:1B:6C:52:88:FA
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/0f085a03-ad4c-4f84-96bd-5bbe944039fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.55.138.0/24
Signature Algorithm: sha256WithRSAEncryption
12:30:cb:12:82:ba:ac:40:f0:23:67:44:1a:b4:a3:fd:88:f4:
c4:07:33:0d:e2:9c:5e:08:d6:96:a2:c6:31:f1:f9:69:4d:01:
58:df:c9:25:7f:8e:67:d8:2b:e9:80:f1:83:49:94:5b:5c:9e:
9c:d9:a8:c5:8a:2d:81:db:cd:c5:77:e4:73:98:99:2b:cc:4d:
39:ce:af:ab:cb:9d:bc:3b:aa:11:6e:bd:1f:9f:2e:04:96:4e:
a8:e9:09:7f:be:87:b0:7f:53:03:9f:f7:58:04:39:7d:3c:d9:
5c:0c:b8:f9:87:2b:02:af:c6:b8:9c:74:42:1c:4b:89:7e:24:
57:a8:f4:8f:63:0b:de:5d:6e:a0:66:0a:f0:f1:0c:a8:2f:5a:
98:f3:a5:f7:e8:b3:f6:93:78:38:35:11:e1:2d:6a:98:ec:29:
09:77:10:32:02:7d:6d:f0:3a:f7:3e:be:79:0b:de:f2:94:e9:
3f:d0:36:e8:75:4c:36:54:93:ee:96:ed:fc:b8:f7:80:7e:13:
5c:43:09:93:52:55:59:78:a3:80:29:06:87:f6:c9:ef:b4:72:
ec:74:55:ba:a4:0a:44:6f:98:38:96:98:44:d2:38:a7:9e:14:
60:bc:88:7b:f0:2d:ea:58:ce:27:81:23:0c:fd:fe:af:0c:3b:
1d:24:08:f7
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKn9kjNL8IoSgruXZHbSvdYJS7g4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMTA0MDAwMDAwWhcNMjUwMjA4MjM1OTU5
WjB6MUkwRwYDVQQFE0AxNzkwZGMxZTlkOGM3M2U3MTIxYjAxYzcxZWE1ZjQxOWRl
MmY5NDkzNDY1ZDhjMDhkZTQ4MzMyMjZiMzgyOGZjMS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDSHlBPWqeNBAoNekOGOlpwvgMmYS+bgSmEt0ozxi6clip3
iaeul/Y+Xc2eMPuc1siHNSXU13CyQP7btaBkXZI/zJl22nlA9dw5oOwiqbBQ+l9s
sKXn/TGvnwUuZACot8Nnz1I9Pb6S0kg9cu12RidR5g98AlMlhZUIvK/4fEKSyTJk
vSI1/74nOsLox9rHeNjDuPRfD1a+R1nMn/jX1q51nxVWtmgpua5LTc9FzfQUb81b
5VSH6XydOWSADfAl4XmF9as3vBMo41LUG8IImOm529HwnHhH4LEiArGllH/LAbSS
Z/qPEFcvvUj/5CHkT/ZX5lg4LPvEUbSFJ50Ns3IHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUoTCc3P0mO+sALWlUDc8oG2xSiPowHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkLzBmMDg1YTAzLWFkNGMtNGY4NC05NmJkLTViYmU5NDQwMzlmZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADON4owDQYJKoZIhvcNAQELBQADggEBABIwyxKCuqxA8CNnRBq0o/2I9MQH
Mw3inF4I1paixjHx+WlNAVjfySV/jmfYK+mA8YNJlFtcnpzZqMWKLYHbzcV35HOY
mSvMTTnOr6vLnbw7qhFuvR+fLgSWTqjpCX++h7B/UwOf91gEOX082VwMuPmHKwKv
xricdEIcS4l+JFeo9I9jC95dbqBmCvDxDKgvWpjzpffos/aTeDg1EeEtapjsKQl3
EDICfW3wOvc+vnkL3vKU6T/QNuh1TDZUk+6W7fy494B+E1xDCZNSVVl4o4ApBof2
ye+0cux0VbqkCkRvmDiWmETSOKeeFGC8iHvwLepYzieBIwz9/q8MOx0kCPc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:25:01 2025 by rpki-client