Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33fd32b1-deb0-4729-bb9c-cbf6c0c17552.roa
File: 33fd32b1-deb0-4729-bb9c-cbf6c0c17552.roa (raw, json)
Hash identifier: yNlRCQWtIxoSZNUxlu2VcOozQ5JvXRAetifFFwVSkWs=
Subject key identifier: C4:8F:FC:E9:60:E0:03:CB:BA:44:8A:70:35:88:DE:71:AF:4F:BB:D3
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 75BFDC6F4DC78410E1F33159E5598F333EB2650A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33fd32b1-deb0-4729-bb9c-cbf6c0c17552.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 134.64.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:bf:dc:6f:4d:c7:84:10:e1:f3:31:59:e5:59:8f:33:3e:b2:65:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:55:e5:08:3c:2a:64:6b:ed:85:91:a9:4f:2e:
3c:95:f4:81:30:60:0b:d0:c8:60:e0:16:c4:29:78:
49:d1:0b:9e:f4:48:0c:2b:6f:fe:8b:c9:73:5f:09:
f9:ac:a7:b4:e2:72:6e:ce:95:70:c3:be:91:08:66:
69:b5:9b:2f:b2:25:09:8b:5c:ea:a1:2b:1a:7b:1e:
a6:86:e7:b7:c5:76:16:d1:f8:fb:a8:0f:79:84:77:
1e:36:8c:de:d3:93:74:c9:64:72:c3:1e:56:c1:3b:
46:dc:28:f2:5d:04:a0:d9:20:98:f2:df:86:1b:ce:
2c:e0:bb:ef:75:57:19:1c:04:1e:8a:e0:50:fe:0c:
9b:e5:8f:03:20:28:a2:29:ae:0f:b3:54:8a:f9:c2:
74:9b:5f:a0:23:d1:67:7b:12:89:1c:ae:f0:1c:31:
d1:2e:d8:9f:bc:d8:56:89:41:cb:5e:c2:79:87:38:
eb:98:55:55:81:b1:19:4b:91:8c:21:d2:75:e4:b4:
9c:23:43:73:e0:17:d4:9a:21:59:4e:ee:92:d1:52:
ed:a8:97:9d:82:47:37:f8:f9:2a:78:8b:f7:24:17:
37:c3:7b:25:7c:dd:d8:04:66:c3:48:0a:7a:47:05:
ad:e0:90:79:6b:ef:82:8f:0e:3c:1e:f2:be:63:bf:
96:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8F:FC:E9:60:E0:03:CB:BA:44:8A:70:35:88:DE:71:AF:4F:BB:D3
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33fd32b1-deb0-4729-bb9c-cbf6c0c17552.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.64.0.0/16
Signature Algorithm: sha256WithRSAEncryption
48:2e:b6:37:e7:e7:84:46:d8:0a:fe:3a:11:09:a8:24:82:06:
1d:0f:c6:3f:e3:83:90:a1:a3:30:f7:d4:bb:69:74:cc:39:c7:
6b:d6:e3:ea:80:a6:e1:c7:2a:d0:e5:c7:80:74:17:b1:28:cc:
d9:be:63:46:f9:d3:ba:38:7e:b2:2f:df:a4:14:58:ca:08:e4:
e9:f8:23:70:46:c9:a2:ac:0c:b1:50:a7:77:44:5e:f5:bd:4c:
ac:3d:b3:ea:c4:28:6e:52:42:ac:28:f4:c4:a4:9a:b2:74:20:
98:6f:5a:6d:25:0c:81:a8:99:11:96:fc:91:e0:e4:56:a1:da:
bc:8a:36:67:c9:0b:9a:5b:2f:32:14:b8:9b:e2:e3:15:d5:12:
ec:50:ae:e8:f0:4b:04:ab:08:f3:37:c5:47:44:37:d5:93:83:
89:be:51:1e:d0:ac:57:9a:9d:42:88:59:18:09:d7:19:8b:95:
9a:d3:56:bf:72:55:fc:d1:d2:3d:c2:6d:a6:16:94:72:03:76:
56:c9:1f:79:20:f6:f7:2c:cd:aa:fc:bf:b9:79:e4:22:6b:76:
70:e5:fe:54:3a:84:03:db:ba:85:1f:96:90:90:3c:60:dd:70:
23:d2:45:3e:ca:92:06:31:a4:c9:93:19:97:b5:6a:cb:9c:2b:
8a:fc:66:12
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUdb/cb03HhBDh8zFZ5VmPMz6yZQowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTE0MDAwMDAwWhcNMjUwMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A2YjU2YjIyOGE0OWM4MWM3ZDY3YTUyOWExMzA1NzM1NTNk
ZDU3YjU3N2I0ODk4OGI5YWM1ZGMzOWQ2MTgxMjE3MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQClVeUIPCpka+2FkalPLjyV9IEwYAvQyGDgFsQpeEnRC570
SAwrb/6LyXNfCfmsp7Ticm7OlXDDvpEIZmm1my+yJQmLXOqhKxp7HqaG57fFdhbR
+PuoD3mEdx42jN7Tk3TJZHLDHlbBO0bcKPJdBKDZIJjy34Ybzizgu+91VxkcBB6K
4FD+DJvljwMgKKIprg+zVIr5wnSbX6Aj0Wd7EokcrvAcMdEu2J+82FaJQctewnmH
OOuYVVWBsRlLkYwh0nXktJwjQ3PgF9SaIVlO7pLRUu2ol52CRzf4+Sp4i/ckFzfD
eyV83dgEZsNICnpHBa3gkHlr74KPDjwe8r5jv5YFAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUxI/86WDgA8u6RIpwNYjeca9Pu9MwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzMzZmQzMmIxLWRlYjAtNDcyOS1iYjljLWNiZjZjMGMxNzU1Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCGQDANBgkqhkiG9w0BAQsFAAOCAQEASC62N+fnhEbYCv46EQmoJIIGHQ/G
P+ODkKGjMPfUu2l0zDnHa9bj6oCm4ccq0OXHgHQXsSjM2b5jRvnTujh+si/fpBRY
ygjk6fgjcEbJoqwMsVCnd0Re9b1MrD2z6sQoblJCrCj0xKSasnQgmG9abSUMgaiZ
EZb8keDkVqHavIo2Z8kLmlsvMhS4m+LjFdUS7FCu6PBLBKsI8zfFR0Q31ZODib5R
HtCsV5qdQohZGAnXGYuVmtNWv3JV/NHSPcJtphaUcgN2VskfeSD29yzNqvy/uXnk
Imt2cOX+VDqEA9u6hR+WkJA8YN1wI9JFPsqSBjGkyZMZl7Vqy5wrivxmEg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:10 2025 by rpki-client