Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/727d15a8-c669-42ac-9883-480de7c1be24.roa
File: 727d15a8-c669-42ac-9883-480de7c1be24.roa (raw, json)
Hash identifier: rBQTPvYqxfmI+PaLDcgngQtJsg/G2BSp79UYbK7dTGw=
Subject key identifier: C4:17:A9:3D:D0:6B:4F:31:AF:EF:47:20:E5:AC:95:FF:96:DB:88:F0
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 41DE20FC2F2FE243A7B60F1FBB0996EC7638731D
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/727d15a8-c669-42ac-9883-480de7c1be24.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 206.55.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:de:20:fc:2f:2f:e2:43:a7:b6:0f:1f:bb:09:96:ec:76:38:73:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b2:b6:27:dd:02:a9:72:84:d4:62:81:52:f7:
10:eb:7e:57:5d:ef:3d:f2:17:f4:3d:e1:1d:8b:d4:
f0:90:a6:e4:6c:d0:b1:ac:05:f5:1e:a3:ac:55:3b:
3c:ca:45:9f:a1:92:8e:c6:f2:99:63:94:ed:fe:31:
f8:9d:25:38:11:14:73:4b:53:97:2f:dd:f6:32:c1:
7a:12:1f:72:72:b9:13:9c:6c:bf:62:f4:52:44:30:
49:de:77:79:85:ed:48:3f:49:bc:b7:eb:11:38:f4:
8b:cd:3e:77:81:4f:f0:ed:7b:22:38:32:ed:2d:bc:
5d:ca:bf:16:77:cf:9d:eb:c8:4b:f2:13:de:26:75:
bf:8a:90:d5:3d:99:77:0a:cd:27:a5:58:5a:6f:a5:
1b:b2:d8:cd:34:4f:a4:23:b0:5e:ce:be:39:fe:38:
37:45:b0:f7:99:4a:d5:eb:e7:05:23:6d:30:8c:dd:
db:1f:5c:a8:85:c0:65:8c:c2:4b:a4:db:81:2f:3e:
0b:ce:5f:f8:ca:6e:67:a7:5d:fb:8c:79:43:42:bf:
07:f2:97:22:72:2a:21:45:83:ae:4f:cb:9b:b5:a5:
26:54:67:13:f3:45:37:23:2a:75:a7:e5:4f:fe:83:
b5:f3:38:4c:9c:fa:be:be:3f:8b:b4:e4:88:54:75:
3a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:17:A9:3D:D0:6B:4F:31:AF:EF:47:20:E5:AC:95:FF:96:DB:88:F0
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/727d15a8-c669-42ac-9883-480de7c1be24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.55.128.0/19
Signature Algorithm: sha256WithRSAEncryption
6b:31:1d:e4:6d:ad:43:fc:bb:24:79:93:34:7d:f2:fc:ef:9d:
8c:e6:19:93:a3:bd:5d:7b:b3:e2:99:70:b8:04:a8:77:4f:cf:
0a:14:79:24:49:ae:29:19:4c:ac:fe:39:06:73:f0:4e:d9:6f:
b0:52:e8:b4:2b:af:a4:37:f9:fd:ef:50:6e:47:b2:a0:7b:fe:
1b:a7:27:8d:2f:00:2f:9e:98:e6:73:28:3d:6a:76:4c:b0:d4:
c9:35:35:1b:11:d8:e9:7f:c5:79:ef:9d:37:8f:72:4c:3e:a9:
34:43:a7:ff:01:3e:7e:bb:07:c7:cb:1d:aa:1d:1a:16:aa:d4:
70:a1:f2:33:bd:57:de:a9:f6:36:fc:ef:f4:83:0a:9f:ff:f7:
32:b0:ef:f7:f0:19:b4:1b:4b:d8:8f:cb:58:10:aa:c2:ac:39:
61:78:62:85:2e:f1:fc:31:b0:13:bb:63:d7:3a:70:22:85:e7:
2e:d2:69:9b:7b:f6:0c:98:16:5f:5d:e3:be:02:9f:00:a1:d7:
cd:cd:ff:2e:8e:50:be:8e:dd:00:90:a8:a9:18:75:d6:f2:c3:
33:36:08:6a:42:f4:04:7a:af:f8:9c:c6:a5:ac:b7:fe:17:1a:
df:13:f0:81:c8:a8:90:75:fb:b7:a0:b1:38:1e:14:05:c4:09:
8b:5c:af:c3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQd4g/C8v4kOntg8fuwmW7HY4cx0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMTA0MDAwMDAwWhcNMjUwMjA4MjM1OTU5
WjB6MUkwRwYDVQQFE0A3MmJjZTk2M2E3NzY5YjZlZGViZDRjN2RjYmIwYjg2YTZj
Njg1YTJlMmRlMTBiNTdjOWQ1YjRiOWY2MWY5YjFkMS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCUsrYn3QKpcoTUYoFS9xDrfldd7z3yF/Q94R2L1PCQpuRs
0LGsBfUeo6xVOzzKRZ+hko7G8pljlO3+MfidJTgRFHNLU5cv3fYywXoSH3JyuROc
bL9i9FJEMEned3mF7Ug/Sby36xE49IvNPneBT/DteyI4Mu0tvF3KvxZ3z53ryEvy
E94mdb+KkNU9mXcKzSelWFpvpRuy2M00T6QjsF7Ovjn+ODdFsPeZStXr5wUjbTCM
3dsfXKiFwGWMwkuk24EvPgvOX/jKbmenXfuMeUNCvwfylyJyKiFFg65Py5u1pSZU
ZxPzRTcjKnWn5U/+g7XzOEyc+r6+P4u05IhUdTqzAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUxBepPdBrTzGv70cg5ayV/5bbiPAwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkLzcyN2QxNWE4LWM2NjktNDJhYy05ODgzLTQ4MGRlN2MxYmUyNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXON4AwDQYJKoZIhvcNAQELBQADggEBAGsxHeRtrUP8uyR5kzR98vzvnYzm
GZOjvV17s+KZcLgEqHdPzwoUeSRJrikZTKz+OQZz8E7Zb7BS6LQrr6Q3+f3vUG5H
sqB7/hunJ40vAC+emOZzKD1qdkyw1Mk1NRsR2Ol/xXnvnTePckw+qTRDp/8BPn67
B8fLHaodGhaq1HCh8jO9V96p9jb87/SDCp//9zKw7/fwGbQbS9iPy1gQqsKsOWF4
YoUu8fwxsBO7Y9c6cCKF5y7SaZt79gyYFl9d474CnwCh183N/y6OUL6O3QCQqKkY
ddbywzM2CGpC9AR6r/icxqWst/4XGt8T8IHIqJB1+7egsTgeFAXECYtcr8M=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:46:56 2025 by rpki-client