Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02179075-025c-49ae-9d72-5db1bf9fdc63.roa
File: 02179075-025c-49ae-9d72-5db1bf9fdc63.roa (raw, json)
Hash identifier: 8lvjouAAsz0nlijBwAIhMmDfJzg0kmIyI462Vs7avEY=
Subject key identifier: 9C:DE:EC:75:DD:62:63:64:D6:55:94:0F:3D:6B:A3:8C:CC:48:CC:3F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 14AC6E141B69812E4E4C44A8389934D36CEFDC5C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02179075-025c-49ae-9d72-5db1bf9fdc63.roa
Signing time: Tue 31 Dec 2024 00:00:00 +0000
ROA not before: Tue 31 Dec 2024 00:00:00 +0000
ROA not after: Tue 04 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 129.223.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:ac:6e:14:1b:69:81:2e:4e:4c:44:a8:38:99:34:d3:6c:ef:dc:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 31 00:00:00 2024 GMT
Not After : Feb 4 23:59:59 2025 GMT
Subject: serialNumber=09844c9617cae0a2baed66d4c86610817620cc9a7fd1a8ac1a66198802f21eb5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a8:05:9e:f5:b8:ed:b3:7b:5e:36:f1:79:8d:
d1:56:67:4a:fc:00:7e:b3:ff:3c:a0:d8:10:fc:2e:
f3:c1:23:fe:65:e9:a8:6f:35:b3:27:4d:53:bc:51:
86:66:00:e4:86:43:fc:85:40:ff:ad:40:af:e1:67:
1c:44:8a:b8:72:93:08:94:73:05:74:50:05:58:ae:
b0:b4:aa:46:de:b9:d3:90:eb:fb:a8:c6:1c:ea:04:
c6:d5:12:4c:46:65:4b:72:63:0e:06:9e:0c:47:ab:
09:e2:e1:8f:f8:0b:c9:db:44:c7:e9:8c:4a:90:92:
3d:93:8c:43:88:e0:33:be:8c:34:13:ee:b8:5c:2d:
56:36:a6:63:5f:a0:45:c5:22:30:e1:68:64:dd:5a:
c9:e0:27:44:99:6f:df:fb:72:56:b2:b9:62:41:14:
c6:db:b9:ea:35:dc:da:22:cf:0c:0c:06:a0:97:eb:
79:16:18:4b:1a:65:2c:93:9e:94:b6:2f:fb:fb:c0:
83:ac:b7:71:32:e5:9f:99:42:80:c1:1e:ac:0a:97:
11:6c:17:ca:70:e2:9a:f3:8b:cf:0e:c0:f0:a6:27:
02:55:2e:5f:88:4c:84:35:d0:99:50:b2:57:0c:6b:
02:a1:ec:b9:2f:41:17:01:6e:bb:eb:7a:8e:22:18:
9d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DE:EC:75:DD:62:63:64:D6:55:94:0F:3D:6B:A3:8C:CC:48:CC:3F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02179075-025c-49ae-9d72-5db1bf9fdc63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.223.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c5:30:a3:e0:70:68:ee:cc:12:6f:02:39:a7:b1:53:5b:7f:4f:
a1:5c:91:36:b2:78:35:ff:cf:45:71:25:54:b5:53:ae:dc:44:
e1:8e:d9:42:0e:2c:7a:58:8c:fe:a8:8a:ac:22:54:88:64:ae:
15:5e:af:aa:3b:bf:8a:aa:bd:3a:96:ec:05:3a:b9:ac:6d:9e:
9f:d3:d0:e0:ad:b6:e6:af:96:a0:ce:30:63:e4:8d:53:d9:32:
cc:a0:03:34:4b:3b:d1:49:6b:a6:4b:ba:13:59:2b:c7:aa:03:
76:52:fe:54:ab:4e:1b:99:cc:9c:a1:ed:7c:80:c9:62:80:48:
b0:f3:bc:dc:02:21:4e:7a:41:41:5f:11:f3:f9:ec:60:d7:ed:
fd:f4:7a:1f:99:48:8b:53:e2:86:06:0a:c0:1d:17:a1:f5:0a:
2d:c0:0e:8d:f4:16:d9:ce:22:ab:31:5c:dd:2d:b4:ad:20:16:
7a:81:7c:17:23:80:fc:db:4a:8f:05:43:7b:4d:99:f7:e9:94:
27:e0:72:3d:c3:ff:ba:e2:ef:f4:d3:8d:be:ae:3e:15:6b:b9:
c8:c3:ab:07:2a:92:96:ee:03:5e:8f:18:cd:e0:e1:aa:65:2d:
72:8c:d4:85:65:b9:da:15:a3:49:b7:9f:cc:6a:e5:50:b3:74:
d8:88:64:28
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUFKxuFBtpgS5OTESoOJk002zv3FwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjMxMDAwMDAwWhcNMjUwMjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0AwOTg0NGM5NjE3Y2FlMGEyYmFlZDY2ZDRjODY2MTA4MTc2
MjBjYzlhN2ZkMWE4YWMxYTY2MTk4ODAyZjIxZWI1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwqAWe9bjts3teNvF5jdFWZ0r8AH6z/zyg2BD8LvPBI/5l
6ahvNbMnTVO8UYZmAOSGQ/yFQP+tQK/hZxxEirhykwiUcwV0UAVYrrC0qkbeudOQ
6/uoxhzqBMbVEkxGZUtyYw4GngxHqwni4Y/4C8nbRMfpjEqQkj2TjEOI4DO+jDQT
7rhcLVY2pmNfoEXFIjDhaGTdWsngJ0SZb9/7clayuWJBFMbbueo13NoizwwMBqCX
63kWGEsaZSyTnpS2L/v7wIOst3Ey5Z+ZQoDBHqwKlxFsF8pw4przi88OwPCmJwJV
Ll+ITIQ10JlQslcMawKh7LkvQRcBbrvreo4iGJ0HAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUnN7sdd1iY2TWVZQPPWujjMxIzD8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzAyMTc5MDc1LTAyNWMtNDlhZS05ZDcyLTVkYjFiZjlmZGM2My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCB3zANBgkqhkiG9w0BAQsFAAOCAQEAxTCj4HBo7swSbwI5p7FTW39PoVyR
NrJ4Nf/PRXElVLVTrtxE4Y7ZQg4seliM/qiKrCJUiGSuFV6vqju/iqq9OpbsBTq5
rG2en9PQ4K225q+WoM4wY+SNU9kyzKADNEs70Ulrpku6E1krx6oDdlL+VKtOG5nM
nKHtfIDJYoBIsPO83AIhTnpBQV8R8/nsYNft/fR6H5lIi1PihgYKwB0XofUKLcAO
jfQW2c4iqzFc3S20rSAWeoF8FyOA/NtKjwVDe02Z9+mUJ+ByPcP/uuLv9NONvq4+
FWu5yMOrByqSlu4DXo8YzeDhqmUtcozUhWW52hWjSbefzGrlULN02IhkKA==
-----END CERTIFICATE-----
Generated at Wed Apr 16 22:06:59 2025 by rpki-client