Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e45966b7-c045-462d-95d5-81bf3d075a2b.roa
File: e45966b7-c045-462d-95d5-81bf3d075a2b.roa (raw, json)
Hash identifier: v0sBTgMeWSejoK8WpQtNp2Rv3f6zJJSAxiIhKQty9L4=
Subject key identifier: 96:2D:6C:3A:2F:8F:23:07:72:75:26:B2:2A:16:84:5F:9C:AC:9F:2B
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 554297803588E547262AB6D08B9D46899B707509
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e45966b7-c045-462d-95d5-81bf3d075a2b.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.230.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:42:97:80:35:88:e5:47:26:2a:b6:d0:8b:9d:46:89:9b:70:75:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0a:4a:cd:be:88:c2:d1:bf:b5:4e:ce:4a:10:
a3:a8:1f:e3:58:b0:c0:93:3e:66:17:9c:eb:61:66:
73:11:90:ea:e4:a6:1e:6d:12:ce:29:d8:cb:a8:12:
38:09:2d:db:06:29:7d:f2:46:9e:41:84:21:ff:a2:
2a:e7:4c:76:06:b6:f4:0f:38:f7:be:c0:9f:ca:d8:
6c:93:87:5b:2f:aa:e1:2e:e7:71:ea:17:b3:85:11:
e2:3f:0d:17:7f:36:00:07:f3:da:8f:c4:52:ea:c0:
c3:b4:41:1f:aa:5c:20:79:c3:2a:8e:b3:86:bd:56:
9c:18:e7:c8:9f:6b:2f:53:ae:b1:c7:0a:9c:f5:f5:
f6:ce:82:69:27:d3:85:62:bf:93:5f:30:21:24:08:
cf:5f:31:c1:0a:8d:9f:81:d6:5c:5e:38:13:24:ff:
71:8b:05:87:4a:4b:27:69:13:09:96:c2:ee:c4:f9:
3b:86:7d:cc:f1:5d:40:86:12:d4:25:e2:ee:2e:63:
35:27:d4:40:0f:98:c0:c9:62:c5:56:96:9a:9d:8a:
64:1b:14:2c:29:46:55:bf:f3:a0:7b:15:e6:7e:4d:
f6:83:05:9d:02:1b:1b:38:31:9e:8e:53:90:1f:9b:
62:53:af:c4:ab:64:7e:6e:c3:69:71:c0:be:5a:4c:
8e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2D:6C:3A:2F:8F:23:07:72:75:26:B2:2A:16:84:5F:9C:AC:9F:2B
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e45966b7-c045-462d-95d5-81bf3d075a2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.230.59.0/24
Signature Algorithm: sha256WithRSAEncryption
00:20:72:84:4c:e7:bf:4d:ab:a5:ae:1b:99:6b:03:4d:9e:f1:
da:25:99:ea:58:d9:8e:9c:68:fa:df:05:c2:10:28:29:b4:94:
b7:55:71:36:8e:af:3d:e7:a7:67:1d:c1:48:8f:63:d7:68:fe:
29:e5:a7:5e:5e:c1:42:ce:31:50:f6:e7:f7:c6:a7:c3:46:4f:
db:05:07:f0:a2:22:df:2c:24:53:79:ba:16:c9:09:8f:83:8b:
bc:03:6c:0c:e7:f6:78:6a:71:30:b1:f8:da:85:94:94:97:9b:
b7:ee:7e:62:b6:46:f1:3d:0d:a9:51:b4:20:ef:95:38:7d:bc:
50:38:6b:6c:b5:bf:0a:16:fb:c9:64:7f:b2:3a:23:0a:34:06:
5b:51:17:2a:f3:30:09:c7:0d:e8:75:f1:6e:bd:e9:90:56:65:
b8:c1:e8:76:ce:02:33:f7:01:cd:87:e8:bd:05:24:fc:39:ff:
57:b0:34:54:38:40:16:1b:b4:bc:94:b8:61:f8:3d:25:c2:4b:
ef:70:d5:27:51:e2:89:96:5b:e9:d2:6c:a3:ae:0b:e1:d9:07:
22:3a:ca:fe:e1:8b:c7:5f:81:0a:f0:88:b4:3e:bb:c5:9b:aa:
25:00:65:3e:de:71:6b:e9:56:1c:6f:01:3d:e8:0b:e9:3e:3c:
f7:10:f0:56
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVUKXgDWI5UcmKrbQi51GiZtwdQkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMjEwMDAwMDAwWhcNMjUwMTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BhOTg3YjkzZjQwNDM4MzkzMjhiNzVjMmM1YzljYjZhZGQ5
YjBjZTMyZDJhNTA2MjMyZThkNzczODc5OGJmNTgxMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDZCkrNvojC0b+1Ts5KEKOoH+NYsMCTPmYXnOthZnMRkOrk
ph5tEs4p2MuoEjgJLdsGKX3yRp5BhCH/oirnTHYGtvQPOPe+wJ/K2GyTh1svquEu
53HqF7OFEeI/DRd/NgAH89qPxFLqwMO0QR+qXCB5wyqOs4a9VpwY58ifay9TrrHH
Cpz19fbOgmkn04Viv5NfMCEkCM9fMcEKjZ+B1lxeOBMk/3GLBYdKSydpEwmWwu7E
+TuGfczxXUCGEtQl4u4uYzUn1EAPmMDJYsVWlpqdimQbFCwpRlW/86B7FeZ+TfaD
BZ0CGxs4MZ6OU5Afm2JTr8SrZH5uw2lxwL5aTI4RAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUli1sOi+PIwdydSayKhaEX5ysnyswHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2U0NTk2NmI3LWMwNDUtNDYyZC05NWQ1LTgxYmYzZDA3NWEyYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAP5jswDQYJKoZIhvcNAQELBQADggEBAAAgcoRM579Nq6WuG5lrA02e8dol
mepY2Y6caPrfBcIQKCm0lLdVcTaOrz3np2cdwUiPY9do/inlp15ewULOMVD25/fG
p8NGT9sFB/CiIt8sJFN5uhbJCY+Di7wDbAzn9nhqcTCx+NqFlJSXm7fufmK2RvE9
DalRtCDvlTh9vFA4a2y1vwoW+8lkf7I6Iwo0BltRFyrzMAnHDeh18W696ZBWZbjB
6HbOAjP3Ac2H6L0FJPw5/1ewNFQ4QBYbtLyUuGH4PSXCS+9w1SdR4omWW+nSbKOu
C+HZByI6yv7hi8dfgQrwiLQ+u8WbqiUAZT7ecWvpVhxvAT3oC+k+PPcQ8FY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:07 2025 by rpki-client