Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0456c830-e7ad-4aae-810d-af73c259e000.roa
File: 0456c830-e7ad-4aae-810d-af73c259e000.roa (raw, json)
Hash identifier: UXjXm9Ii56YIXhOO/yCYeA6AmFTXgNMGIesaskDDtcw=
Subject key identifier: 30:0E:97:BE:63:29:0D:98:A7:5C:59:CD:59:9B:FA:82:B7:39:AA:46
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3AE9D94BD4ACBDE9E808EC2B52F8D0CCE39819E5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0456c830-e7ad-4aae-810d-af73c259e000.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 134.73.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:e9:d9:4b:d4:ac:bd:e9:e8:08:ec:2b:52:f8:d0:cc:e3:98:19:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: serialNumber=1599561e4f145c2e8906d6e12a765b737672e234a6d4df50391a8e7638ccf04b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a3:31:62:f1:05:40:ce:c8:09:2b:de:f0:8a:
7c:62:9c:57:20:c1:41:25:e9:9f:68:16:31:41:b3:
c6:7d:9d:8a:3c:63:c8:3f:75:1c:7f:b9:cb:7c:08:
22:91:63:30:65:74:e2:a1:4c:83:ba:b8:eb:da:20:
e3:23:be:ba:e0:1c:1c:d5:ab:15:c1:fd:d1:0b:77:
91:94:ef:ab:c4:de:d1:68:87:26:2d:66:99:72:1d:
3c:f1:ad:a1:ad:2d:f7:77:a4:c8:d6:11:e6:71:30:
c6:55:f0:b6:46:d6:51:ed:ae:9f:ef:90:6c:61:56:
0c:a5:c2:4a:62:36:9f:fb:b8:0a:55:0e:2e:f2:5e:
70:a0:24:2b:00:69:e6:ac:7c:6c:8c:fa:6a:e5:14:
56:99:6e:25:ec:8d:e2:4c:e4:fb:91:84:16:25:bc:
80:5e:20:96:20:e4:4d:d6:17:e8:c3:c8:49:ab:18:
ac:24:7b:cf:5a:1c:71:32:7e:e3:2c:10:02:40:d8:
c7:77:fa:6c:62:3a:d0:c7:55:7d:13:93:55:60:f4:
9a:1b:1a:88:e5:eb:a2:d1:9a:a4:ee:e3:9f:e9:d4:
54:31:ec:e5:ad:19:5d:fb:00:b2:6a:7d:b7:ff:a6:
f8:f2:d3:ef:49:44:49:d7:3d:78:9d:7e:7e:b5:a8:
73:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0E:97:BE:63:29:0D:98:A7:5C:59:CD:59:9B:FA:82:B7:39:AA:46
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0456c830-e7ad-4aae-810d-af73c259e000.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.73.0.0/16
Signature Algorithm: sha256WithRSAEncryption
91:9c:70:19:0c:80:21:c8:cf:02:4c:26:9a:65:36:7e:15:f6:
15:9a:56:ca:05:e8:b3:3b:26:f1:91:63:8e:6b:b5:81:f0:68:
14:60:39:a2:26:e8:e9:06:3e:9b:45:20:14:f4:85:2e:e4:f4:
d4:55:19:22:e7:cc:43:b0:e7:1b:40:c5:a4:0a:cf:0f:ba:6d:
f1:be:2c:41:59:14:4f:ef:59:c6:b7:a7:4b:06:7e:08:2b:0b:
ef:ce:b9:99:46:c3:3a:a1:13:39:0b:36:2d:c4:7d:f6:10:1c:
c3:81:06:9c:5e:b0:1b:a0:eb:b9:42:2c:d1:3b:46:b7:30:1a:
35:c2:33:eb:31:1f:34:94:d0:b3:e1:0b:79:c4:2c:aa:9c:4c:
97:12:f4:20:ed:f1:ad:26:2c:f3:1a:b3:b8:1a:48:6d:90:0a:
ac:a9:ef:94:e6:11:0f:97:2f:e0:85:ce:fa:d8:9c:65:79:e7:
c7:60:35:39:9e:7c:58:4e:64:56:a5:2a:79:39:ab:9e:25:55:
a3:89:b2:4e:26:c4:00:e9:64:82:b6:b8:cf:49:3d:01:a5:0e:
d4:5a:57:59:ab:2d:fa:f6:28:92:cf:5b:ed:92:c4:fc:6d:2a:
ec:fb:5e:ca:49:a5:31:91:f7:01:47:90:91:17:9a:f6:43:2c:
be:1f:20:6d
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUOunZS9SsvenoCOwrUvjQzOOYGeUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTA0MDAwMDAwWhcNMjUwMjA4MjM1OTU5
WjB6MUkwRwYDVQQFE0AxNTk5NTYxZTRmMTQ1YzJlODkwNmQ2ZTEyYTc2NWI3Mzc2
NzJlMjM0YTZkNGRmNTAzOTFhOGU3NjM4Y2NmMDRiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCpozFi8QVAzsgJK97winxinFcgwUEl6Z9oFjFBs8Z9nYo8
Y8g/dRx/uct8CCKRYzBldOKhTIO6uOvaIOMjvrrgHBzVqxXB/dELd5GU76vE3tFo
hyYtZplyHTzxraGtLfd3pMjWEeZxMMZV8LZG1lHtrp/vkGxhVgylwkpiNp/7uApV
Di7yXnCgJCsAaeasfGyM+mrlFFaZbiXsjeJM5PuRhBYlvIBeIJYg5E3WF+jDyEmr
GKwke89aHHEyfuMsEAJA2Md3+mxiOtDHVX0Tk1Vg9JobGojl66LRmqTu45/p1FQx
7OWtGV37ALJqfbf/pvjy0+9JREnXPXidfn61qHOPAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUMA6XvmMpDZinXFnNWZv6grc5qkYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA0NTZjODMwLWU3YWQtNGFhZS04MTBkLWFmNzNjMjU5ZTAwMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCGSTANBgkqhkiG9w0BAQsFAAOCAQEAkZxwGQyAIcjPAkwmmmU2fhX2FZpW
ygXoszsm8ZFjjmu1gfBoFGA5oibo6QY+m0UgFPSFLuT01FUZIufMQ7DnG0DFpArP
D7pt8b4sQVkUT+9ZxrenSwZ+CCsL7865mUbDOqETOQs2LcR99hAcw4EGnF6wG6Dr
uUIs0TtGtzAaNcIz6zEfNJTQs+ELecQsqpxMlxL0IO3xrSYs8xqzuBpIbZAKrKnv
lOYRD5cv4IXO+ticZXnnx2A1OZ58WE5kVqUqeTmrniVVo4myTibEAOlkgra4z0k9
AaUO1FpXWast+vYoks9b7ZLE/G0q7PteykmlMZH3AUeQkRea9kMsvh8gbQ==
-----END CERTIFICATE-----
Generated at Wed Apr 16 17:05:54 2025 by rpki-client