Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d66bf911-2114-407b-820c-c9ce4b16204b.roa
File: d66bf911-2114-407b-820c-c9ce4b16204b.roa (raw, json)
Hash identifier: cH45/cNGnNZ1WaKruLxQhKN4syTjDWp5oWTqoc9u0uw=
Subject key identifier: 4C:CB:98:14:90:97:5C:5E:CD:88:95:71:95:57:32:B4:A3:F1:63:1F
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 291F6BEBCE3F71D67A25D54B4C393D5050092D58
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d66bf911-2114-407b-820c-c9ce4b16204b.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 15.210.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:1f:6b:eb:ce:3f:71:d6:7a:25:d5:4b:4c:39:3d:50:50:09:2d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:05:7b:cc:c3:f7:84:e0:a9:71:38:5b:86:cf:
35:af:57:50:a8:4c:c3:22:37:10:1c:2a:5c:c0:bb:
d1:dd:fb:fe:e0:d4:13:78:76:18:14:2d:94:f3:3b:
45:a3:24:b1:67:5b:64:db:47:5e:07:16:fc:ff:02:
57:91:7f:72:ab:81:21:de:08:ce:ed:33:76:ea:86:
bc:a8:21:a3:fb:38:2f:e6:e0:bb:52:da:a1:d9:1a:
a5:0f:83:15:43:dd:70:89:ea:cc:b5:1d:b5:c5:9e:
5a:1b:02:b1:0f:93:a2:a3:05:2d:de:e2:9c:74:23:
ca:c1:dd:ab:1a:2b:32:9a:f4:10:89:76:3b:df:1c:
8f:c6:b0:5d:79:b3:d2:b9:07:0f:fb:1b:63:7f:6a:
aa:11:8e:fe:82:51:88:4e:6a:89:ca:05:8e:51:df:
fd:23:34:2b:0e:54:cf:6c:a4:e3:39:92:a1:77:30:
fe:3d:fc:8e:de:d5:a4:b5:28:8b:9d:96:86:da:0c:
37:95:8a:b6:5f:14:19:c6:d3:90:8b:e9:da:0e:40:
c5:95:08:3d:9e:8a:0b:f9:c8:96:4e:09:94:b8:6e:
70:de:0c:51:ef:90:99:4e:e0:f4:ca:b7:3f:8c:ca:
ff:ed:cb:b5:2d:e8:46:48:dd:ae:92:0d:94:34:5f:
81:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CB:98:14:90:97:5C:5E:CD:88:95:71:95:57:32:B4:A3:F1:63:1F
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d66bf911-2114-407b-820c-c9ce4b16204b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.210.0.0/16
Signature Algorithm: sha256WithRSAEncryption
aa:63:ac:ee:8f:74:ba:75:63:e8:a5:13:b4:00:2f:92:a6:25:
ac:ec:ff:40:a7:2f:3e:8a:7e:ad:d3:e3:11:ab:94:ec:80:b5:
ac:4f:1b:51:98:be:44:a9:b7:c2:29:1c:0f:26:e1:bc:bb:c9:
9d:57:85:fe:51:7c:df:18:d5:e3:31:0c:98:9e:7f:0d:9c:bf:
a5:7e:b7:6e:aa:58:24:00:e3:a6:66:91:52:ce:44:b8:ea:92:
02:82:7a:37:4c:27:f3:51:5f:59:75:49:8a:13:01:ab:9b:2b:
a2:18:aa:b3:c3:2c:c3:9a:1f:2d:3e:94:68:3c:d6:ca:85:cf:
e7:35:17:70:da:c3:ed:ae:26:d9:eb:6f:33:67:51:1a:8b:db:
47:68:dc:b9:6c:f1:09:5b:6d:6b:81:8b:76:ab:f9:e4:94:8f:
ce:f3:d0:fb:bf:83:50:c9:4a:4a:35:8a:1f:6d:b7:ec:96:9c:
82:2c:a6:7d:d1:ac:6b:6d:65:f6:ac:6a:c8:8e:a2:ec:31:0a:
44:bf:46:6d:42:b4:8d:3f:70:77:94:8f:6f:c5:a2:1a:eb:19:
e2:4e:da:f4:1b:39:1f:95:2b:d8:03:df:0e:87:80:be:6f:9c:
12:bc:63:a5:f2:4d:12:1b:02:86:bc:cc:ea:5f:ab:44:24:43:
75:56:3d:fc
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUKR9r684/cdZ6JdVLTDk9UFAJLVgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTE0MDAwMDAwWhcNMjUwMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A5YWRlMzAyNzRkYjE4NTllMDQ0ZDQ1OTkzY2JlOWZmODlm
OTcyNmU2OWNkYmQwYzBjOTA2NmMzMDIzODRhY2EyMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDeBXvMw/eE4KlxOFuGzzWvV1CoTMMiNxAcKlzAu9Hd+/7g
1BN4dhgULZTzO0WjJLFnW2TbR14HFvz/AleRf3KrgSHeCM7tM3bqhryoIaP7OC/m
4LtS2qHZGqUPgxVD3XCJ6sy1HbXFnlobArEPk6KjBS3e4px0I8rB3asaKzKa9BCJ
djvfHI/GsF15s9K5Bw/7G2N/aqoRjv6CUYhOaonKBY5R3/0jNCsOVM9spOM5kqF3
MP49/I7e1aS1KIudlobaDDeVirZfFBnG05CL6doOQMWVCD2eigv5yJZOCZS4bnDe
DFHvkJlO4PTKtz+Myv/ty7Ut6EZI3a6SDZQ0X4GbAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUTMuYFJCXXF7NiJVxlVcytKPxYx8wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2Q2NmJmOTExLTIxMTQtNDA3Yi04MjBjLWM5Y2U0YjE2MjA0Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAP0jANBgkqhkiG9w0BAQsFAAOCAQEAqmOs7o90unVj6KUTtAAvkqYlrOz/
QKcvPop+rdPjEauU7IC1rE8bUZi+RKm3wikcDybhvLvJnVeF/lF83xjV4zEMmJ5/
DZy/pX63bqpYJADjpmaRUs5EuOqSAoJ6N0wn81FfWXVJihMBq5srohiqs8Msw5of
LT6UaDzWyoXP5zUXcNrD7a4m2etvM2dRGovbR2jcuWzxCVtta4GLdqv55JSPzvPQ
+7+DUMlKSjWKH2237JacgiymfdGsa21l9qxqyI6i7DEKRL9GbUK0jT9wd5SPb8Wi
GusZ4k7a9Bs5H5Ur2APfDoeAvm+cErxjpfJNEhsChrzM6l+rRCRDdVY9/A==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:04:04 2025 by rpki-client