Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/af5b88c5-948a-4234-8c23-79373c2fd23c.roa
File: af5b88c5-948a-4234-8c23-79373c2fd23c.roa (raw, json)
Hash identifier: XYQuT+Ei9bDCZr2gMrAKGeo5dCC7Ch43glGbyERzEAE=
Subject key identifier: 97:BE:EC:B9:1B:C4:C5:A9:F5:19:15:0C:54:DB:B3:FC:CE:CF:13:56
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 779642A83644F6849F04B2458FA6822A905438D2
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/af5b88c5-948a-4234-8c23-79373c2fd23c.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.93.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:96:42:a8:36:44:f6:84:9f:04:b2:45:8f:a6:82:2a:90:54:38:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9f:ba:4c:54:af:99:cb:ce:bf:eb:91:30:d9:
6a:39:7b:7d:94:e9:99:68:8f:29:5d:c1:60:d5:7e:
8a:66:4d:dd:c8:8f:0f:c2:80:9e:03:44:b2:23:77:
3f:a8:41:e8:19:0d:4d:ba:b7:c1:be:e6:a8:7a:92:
38:df:8e:7c:de:2f:ca:bf:5d:21:4f:2d:13:0c:9b:
d7:37:19:39:bc:61:41:5c:fc:9d:3c:7e:68:79:58:
dc:89:f3:d9:e4:7a:1c:37:df:90:e6:3d:b5:29:8c:
ee:7d:bc:69:5c:2d:25:03:28:05:e9:67:29:e8:c6:
b6:0d:89:d3:98:2e:e4:f3:b3:41:62:a5:6d:92:cb:
7e:8b:00:4f:b7:de:bb:d3:ea:00:f3:a8:2c:69:d1:
34:74:ae:28:c8:47:f0:71:8d:7a:1f:9e:27:ad:05:
7e:2f:6a:cb:00:ab:d0:8c:29:ae:0a:ea:88:35:cd:
1c:06:d1:b6:aa:d2:06:86:c6:c8:88:e9:b4:bb:17:
c5:80:8c:ae:c2:b3:de:96:6f:71:77:2b:de:d0:96:
32:bf:ae:75:90:6b:76:32:ca:60:9c:79:0f:16:31:
c8:19:43:e4:6c:bf:90:f1:e5:d1:75:0a:8f:4c:23:
c7:f7:3b:35:34:a0:49:2a:6c:9d:c3:8a:f6:49:7e:
66:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BE:EC:B9:1B:C4:C5:A9:F5:19:15:0C:54:DB:B3:FC:CE:CF:13:56
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/af5b88c5-948a-4234-8c23-79373c2fd23c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.93.67.0/24
Signature Algorithm: sha256WithRSAEncryption
91:ad:3d:18:0a:32:1e:02:42:da:6f:ad:3d:05:18:64:c9:2d:
b3:04:45:9e:45:82:f3:02:59:2c:cf:ad:3c:cc:36:82:29:66:
85:37:f0:d1:ac:29:04:09:55:ec:15:52:0e:8d:34:72:bf:7e:
79:aa:a9:17:ac:3e:f8:d0:54:c8:72:fe:a1:8d:13:b9:f6:40:
77:91:b1:8e:05:73:cf:e4:1c:45:93:07:f1:2a:60:65:2e:f4:
ed:00:53:a2:b8:9c:c3:5b:1d:07:63:59:9b:51:e4:2e:71:32:
a8:89:f3:14:2b:cb:54:35:e5:4c:0b:25:03:20:d0:ff:f7:a2:
a0:2e:1a:9b:cc:38:be:b1:29:5a:9c:dd:1c:1c:6e:5d:c7:f3:
2c:8f:10:0f:47:b8:73:75:d6:d0:8d:ba:02:b3:a9:27:63:31:
d5:b6:85:27:e0:c7:7a:89:a7:3c:2d:f9:89:69:59:c1:d3:ce:
71:ce:02:59:84:12:03:a2:d6:1d:43:10:9e:9b:49:3d:58:8c:
25:82:7c:0b:a4:48:78:2d:40:64:79:e1:da:c2:24:1a:ad:f1:
44:23:18:b2:40:ed:1c:91:c4:82:dc:2f:82:43:21:6b:d8:2b:
7e:a4:5d:36:62:12:bc:61:df:2c:10:69:55:74:e7:57:50:96:
5c:17:db:46
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUd5ZCqDZE9oSfBLJFj6aCKpBUONIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMjE3MDAwMDAwWhcNMjUwMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A4YzhkMDllZTQyY2ExZTQxNzBkMzViYThjNTRkZTgxNmVh
NDQyN2Q0NTc1OWVlOTZiMzVkMDk4YzhiNDAyODM1MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCXn7pMVK+Zy86/65Ew2Wo5e32U6ZlojyldwWDVfopmTd3I
jw/CgJ4DRLIjdz+oQegZDU26t8G+5qh6kjjfjnzeL8q/XSFPLRMMm9c3GTm8YUFc
/J08fmh5WNyJ89nkehw335DmPbUpjO59vGlcLSUDKAXpZynoxrYNidOYLuTzs0Fi
pW2Sy36LAE+33rvT6gDzqCxp0TR0rijIR/BxjXofnietBX4vassAq9CMKa4K6og1
zRwG0baq0gaGxsiI6bS7F8WAjK7Cs96Wb3F3K97QljK/rnWQa3YyymCceQ8WMcgZ
Q+Rsv5Dx5dF1Co9MI8f3OzU0oEkqbJ3DivZJfmZTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUl77suRvExan1GRUMVNuz/M7PE1YwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2FmNWI4OGM1LTk0OGEtNDIzNC04YzIzLTc5MzczYzJmZDIzYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA0XUMwDQYJKoZIhvcNAQELBQADggEBAJGtPRgKMh4CQtpvrT0FGGTJLbME
RZ5FgvMCWSzPrTzMNoIpZoU38NGsKQQJVewVUg6NNHK/fnmqqResPvjQVMhy/qGN
E7n2QHeRsY4Fc8/kHEWTB/EqYGUu9O0AU6K4nMNbHQdjWZtR5C5xMqiJ8xQry1Q1
5UwLJQMg0P/3oqAuGpvMOL6xKVqc3Rwcbl3H8yyPEA9HuHN11tCNugKzqSdjMdW2
hSfgx3qJpzwt+YlpWcHTznHOAlmEEgOi1h1DEJ6bST1YjCWCfAukSHgtQGR54drC
JBqt8UQjGLJA7RyRxILcL4JDIWvYK36kXTZiErxh3ywQaVV051dQllwX20Y=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:44 2025 by rpki-client