Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dea1f54a-ef77-4f17-b62e-04b888f9683d.roa
File: dea1f54a-ef77-4f17-b62e-04b888f9683d.roa (raw, json)
Hash identifier: d8pcpBY1XfpOP0NoCoGunQfkV+uTx4fZlpJ+wBVriiM=
Subject key identifier: 72:25:CE:12:84:84:E1:A8:4D:C2:10:CF:CF:81:BA:30:6A:98:AA:CB
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2D76A9420D9312F48EC9C1B6BA7AFC866873C0C1
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dea1f54a-ef77-4f17-b62e-04b888f9683d.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 3.128.0.0/10 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:76:a9:42:0d:93:12:f4:8e:c9:c1:b6:ba:7a:fc:86:68:73:c0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5c:24:a3:9a:85:72:84:ed:62:6f:c6:ff:c8:
66:4d:06:1f:8a:a8:f5:52:a5:0a:19:c2:4d:ec:24:
62:20:31:c4:e2:a0:dd:38:ea:1b:0e:95:de:2a:f6:
57:e4:ab:56:c1:dc:83:7a:f2:ef:c5:bf:10:70:f1:
41:af:06:61:a6:25:3b:65:68:1e:78:af:03:05:47:
ea:eb:42:4c:d2:7a:73:7d:7a:51:c9:5e:4b:4d:8d:
08:60:54:a9:75:20:dd:bc:0b:f3:af:59:19:a9:86:
40:89:c9:18:c9:04:d8:33:92:bd:43:74:95:e6:ba:
56:fc:e9:0b:f6:2b:39:31:65:eb:71:0d:cf:73:d9:
8e:13:1b:1b:4e:c4:58:c6:60:3a:89:b6:42:73:6d:
91:b9:cb:1e:ea:77:c3:c8:20:a0:1b:01:0f:93:26:
2c:3d:20:57:7d:07:c4:09:69:18:75:23:3f:22:d7:
63:53:02:75:04:48:61:7d:d5:c5:d6:fc:00:51:02:
7f:84:7a:e3:a6:9b:67:16:31:b2:c3:9f:87:e7:dc:
a6:dd:27:59:6e:4b:83:f8:f2:3e:a1:b3:07:3f:f4:
de:5e:d0:35:99:fd:50:51:56:56:5b:fa:d3:1c:9a:
f1:0c:17:f8:bf:4e:c7:ee:00:d7:7f:9e:57:7a:06:
06:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:25:CE:12:84:84:E1:A8:4D:C2:10:CF:CF:81:BA:30:6A:98:AA:CB
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dea1f54a-ef77-4f17-b62e-04b888f9683d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.128.0.0/10
Signature Algorithm: sha256WithRSAEncryption
96:95:47:d6:08:aa:a6:44:48:bf:84:71:8f:66:a7:cb:85:47:
38:8c:f9:d2:51:13:f7:e7:cd:ac:01:3f:59:79:12:64:e6:ab:
11:da:41:23:3d:64:c7:b0:2e:9b:7e:9b:ab:22:24:dd:59:0d:
3e:91:92:28:20:55:7c:31:24:c2:3f:33:b5:74:36:20:af:0d:
b8:f1:d1:92:5f:53:5f:20:f6:e0:db:63:19:78:11:39:16:74:
f9:bf:5a:14:75:35:da:0e:ff:ba:ed:19:ad:24:98:54:6a:c4:
ff:14:3b:23:05:a5:cf:df:ed:92:f1:d2:80:e7:5d:62:76:67:
6d:55:f6:af:c8:66:f6:4c:1f:2c:ad:8f:ec:e6:42:22:e6:1e:
c4:cb:f5:8e:4a:71:d0:6d:43:0f:67:73:52:0f:2f:75:b3:ef:
e0:91:9a:52:55:f4:cf:0b:2b:73:3d:80:7e:73:d3:92:1d:54:
d4:df:41:8b:38:d9:4a:29:3c:f8:70:be:18:71:dc:cb:7e:4d:
81:36:41:fb:db:b6:f8:f3:56:57:e5:65:e0:58:7f:f3:b2:bd:
5a:bb:fe:7a:5b:10:d6:d1:9b:bd:4a:e7:b5:53:7f:16:00:b8:
c8:35:27:80:8d:bf:72:cd:36:e7:1d:6c:58:85:e8:67:02:0e:
61:62:46:64
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIULXapQg2TEvSOycG2unr8hmhzwMEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMjMwMDAwMDAwWhcNMjUwMjAzMjM1OTU5
WjB6MUkwRwYDVQQFE0A0YmM4YjQyMTM3N2U1ODM0M2QwNjUwNmUwMmFiZGNjYzc5
NWRlYjFmMmZiNDI1ODAzMTlhOWI1MGMyNDc0YmZlMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDIXCSjmoVyhO1ib8b/yGZNBh+KqPVSpQoZwk3sJGIgMcTi
oN046hsOld4q9lfkq1bB3IN68u/FvxBw8UGvBmGmJTtlaB54rwMFR+rrQkzSenN9
elHJXktNjQhgVKl1IN28C/OvWRmphkCJyRjJBNgzkr1DdJXmulb86Qv2KzkxZetx
Dc9z2Y4TGxtOxFjGYDqJtkJzbZG5yx7qd8PIIKAbAQ+TJiw9IFd9B8QJaRh1Iz8i
12NTAnUESGF91cXW/ABRAn+EeuOmm2cWMbLDn4fn3KbdJ1luS4P48j6hswc/9N5e
0DWZ/VBRVlZb+tMcmvEMF/i/TsfuANd/nld6BgY1AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUciXOEoSE4ahNwhDPz4G6MGqYqsswHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2RlYTFmNTRhLWVmNzctNGYxNy1iNjJlLTA0Yjg4OGY5NjgzZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwYDgDANBgkqhkiG9w0BAQsFAAOCAQEAlpVH1giqpkRIv4Rxj2any4VHOIz5
0lET9+fNrAE/WXkSZOarEdpBIz1kx7Aum36bqyIk3VkNPpGSKCBVfDEkwj8ztXQ2
IK8NuPHRkl9TXyD24NtjGXgRORZ0+b9aFHU12g7/uu0ZrSSYVGrE/xQ7IwWlz9/t
kvHSgOddYnZnbVX2r8hm9kwfLK2P7OZCIuYexMv1jkpx0G1DD2dzUg8vdbPv4JGa
UlX0zwsrcz2AfnPTkh1U1N9BizjZSik8+HC+GHHcy35NgTZB+9u2+PNWV+Vl4Fh/
87K9Wrv+elsQ1tGbvUrntVN/FgC4yDUngI2/cs025x1sWIXoZwIOYWJGZA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:04:11 2025 by rpki-client