Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/6f35bdc0-c6fc-4fcd-b608-8465f541d901.roa
File: 6f35bdc0-c6fc-4fcd-b608-8465f541d901.roa (raw, json)
Hash identifier: hxDsiDF8OAHO2gEy3yz7dJmci6hhVSPDRiStjaHc99Q=
Subject key identifier: E3:03:19:B5:2C:A4:47:FE:28:DD:C9:58:50:BF:E9:F3:1C:6D:0E:4E
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 0A96131A8E4CDC1DF5A396D546C49F3D81264F88
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/6f35bdc0-c6fc-4fcd-b608-8465f541d901.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.251.248.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:96:13:1a:8e:4c:dc:1d:f5:a3:96:d5:46:c4:9f:3d:81:26:4f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:57:c7:63:db:98:ca:33:ef:c5:c0:32:5a:c4:
ec:ae:33:d3:39:5a:05:4f:24:ce:4b:9c:9d:03:dd:
ae:b8:dc:98:cc:94:f4:a6:3b:d9:80:e0:59:ff:95:
2e:e2:d7:67:aa:07:2c:1e:ee:a8:9d:40:1b:59:d7:
fe:18:62:5a:8f:3f:2e:46:aa:06:8b:24:34:d4:39:
89:d9:d4:2f:3a:59:c8:f0:ff:f5:90:53:a1:b2:96:
fd:2b:ac:a2:ff:01:a2:d9:7a:34:4a:05:1c:fb:53:
90:5d:28:79:cc:a1:bb:31:ef:0b:58:36:08:cf:22:
a2:02:a2:21:08:62:96:42:5d:9b:f0:08:81:f8:3a:
d5:15:fc:1e:63:b7:28:8c:bd:aa:d7:ae:cd:e5:b5:
5f:a7:f5:ef:13:17:25:4e:60:8a:b8:00:ff:2d:f5:
ce:09:79:75:f0:68:a2:6f:4e:14:57:65:49:8f:1f:
74:89:c8:24:7e:4b:8b:84:a9:67:0c:37:d4:6b:8b:
a7:3f:e6:ca:92:99:2f:60:33:53:d0:0e:c5:ef:01:
20:75:12:91:aa:0c:8f:31:07:9e:70:a8:91:b7:7a:
41:eb:c8:0a:22:48:36:37:23:37:e2:7f:73:b8:db:
fd:bf:f1:92:80:f4:79:e4:4b:f9:02:24:62:8f:b1:
f7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:03:19:B5:2C:A4:47:FE:28:DD:C9:58:50:BF:E9:F3:1C:6D:0E:4E
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/6f35bdc0-c6fc-4fcd-b608-8465f541d901.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.251.248.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:93:55:65:17:77:1d:77:21:1a:00:be:b1:5e:b7:d1:59:9b:
41:a9:0c:0c:25:79:1a:7d:20:02:6f:14:f2:02:04:07:72:35:
5e:54:37:d1:26:62:17:fe:46:86:e4:fd:ce:b5:14:4c:ea:73:
88:ab:b1:49:f4:11:41:56:bb:34:07:bb:a9:44:f5:5a:a2:89:
f2:f8:8f:d8:00:e7:2a:7f:1a:84:39:e9:c7:df:0e:e9:ea:8d:
79:59:93:10:77:2a:a3:04:f5:57:a6:da:0d:03:69:64:2b:9a:
82:c3:a9:f3:74:41:50:67:45:45:b8:75:61:e4:45:5d:5e:63:
74:c9:68:00:3c:9f:75:ae:d7:b1:2b:6f:80:72:30:a0:47:75:
a3:6e:a2:11:33:fe:82:69:21:03:e1:3b:0d:ba:16:bd:45:f3:
ad:20:dc:e6:f2:d0:23:b2:17:8f:84:3d:91:19:43:fe:41:28:
b3:8b:b6:68:e0:52:d4:70:7c:d9:03:ae:eb:e2:c3:35:84:24:
27:df:6c:76:f0:db:77:63:2e:ca:9d:7e:9e:ab:10:06:20:80:
bf:50:2b:24:1e:ef:d9:99:43:c3:f7:62:1a:e2:01:ea:71:63:
d3:b1:d7:00:ff:7e:1f:67:fb:9e:2e:85:fa:b7:1a:5f:54:3d:
49:ea:94:a0
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCpYTGo5M3B31o5bVRsSfPYEmT4gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjQxMjA2MDAwMDAwWhcNMjUwMTEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BjYmZiMjdlZmRhZTMyYmNkNDIwNGQxZDNmMzBlYTUyMzcz
ZWU1MDRhYmRkNDI0MjkxMGM2NWJkZjNjMjZhNjcxMS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDNV8dj25jKM+/FwDJaxOyuM9M5WgVPJM5LnJ0D3a643JjM
lPSmO9mA4Fn/lS7i12eqBywe7qidQBtZ1/4YYlqPPy5GqgaLJDTUOYnZ1C86Wcjw
//WQU6Gylv0rrKL/AaLZejRKBRz7U5BdKHnMobsx7wtYNgjPIqICoiEIYpZCXZvw
CIH4OtUV/B5jtyiMvarXrs3ltV+n9e8TFyVOYIq4AP8t9c4JeXXwaKJvThRXZUmP
H3SJyCR+S4uEqWcMN9Rri6c/5sqSmS9gM1PQDsXvASB1EpGqDI8xB55wqJG3ekHr
yAoiSDY3Izfif3O42/2/8ZKA9HnkS/kCJGKPsff1AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU4wMZtSykR/4o3clYUL/p8xxtDk4wHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkLzZmMzViZGMwLWM2ZmMtNGZjZC1iNjA4LTg0NjVmNTQxZDkwMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEX+/gwDQYJKoZIhvcNAQELBQADggEBAB+TVWUXdx13IRoAvrFet9FZm0Gp
DAwleRp9IAJvFPICBAdyNV5UN9EmYhf+Robk/c61FEzqc4irsUn0EUFWuzQHu6lE
9VqiifL4j9gA5yp/GoQ56cffDunqjXlZkxB3KqME9Vem2g0DaWQrmoLDqfN0QVBn
RUW4dWHkRV1eY3TJaAA8n3Wu17Erb4ByMKBHdaNuohEz/oJpIQPhOw26Fr1F860g
3Oby0COyF4+EPZEZQ/5BKLOLtmjgUtRwfNkDruviwzWEJCffbHbw23djLsqdfp6r
EAYggL9QKyQe79mZQ8P3YhriAepxY9Ox1wD/fh9n+54uhfq3Gl9UPUnqlKA=
-----END CERTIFICATE-----
Generated at Wed Apr 9 10:22:58 2025 by rpki-client