Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09c9f1a8-72fd-43d4-8dab-550f1c20cd4b.roa
File: 09c9f1a8-72fd-43d4-8dab-550f1c20cd4b.roa (raw, json)
Hash identifier: ilKqDbJQrJylMPt+Uh+/VOLCvbn3W+i7RDh8klloQD8=
Subject key identifier: 75:94:CD:3C:3C:20:95:72:F0:18:47:CA:B0:63:00:1C:A0:30:8B:AF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3FC36496CE400301547F7DB74E969631DDAE6BBF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09c9f1a8-72fd-43d4-8dab-550f1c20cd4b.roa
Signing time: Fri 20 Dec 2024 00:00:00 +0000
ROA not before: Fri 20 Dec 2024 00:00:00 +0000
ROA not after: Fri 24 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.151.96.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:c3:64:96:ce:40:03:01:54:7f:7d:b7:4e:96:96:31:dd:ae:6b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 20 00:00:00 2024 GMT
Not After : Jan 24 23:59:59 2025 GMT
Subject: serialNumber=69e572ef2c429fe692b74142cf43079566ac94160b1d0eda08f25b8d27185b4f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:48:1b:17:c2:56:cc:16:d7:ab:5d:d9:c5:5f:
2e:23:e0:56:e2:5f:20:b8:55:22:6d:bd:2f:ff:2d:
e3:b3:00:eb:8a:a6:9b:d4:2d:9a:e8:56:b1:c3:7d:
19:83:62:b7:1d:50:00:26:4e:24:b7:1f:06:f1:19:
dd:05:bb:fd:2a:04:c8:35:61:30:6d:ec:d8:f0:77:
5f:e0:e9:cf:97:58:10:c4:5c:6e:93:81:85:18:28:
1e:18:e5:5a:e1:76:3d:6b:12:52:68:c2:f8:23:e2:
43:7f:27:77:4d:12:f6:dd:a3:f4:a8:16:b3:b7:af:
37:a2:ec:cf:2e:89:39:13:07:1d:f0:3f:0a:9b:27:
ef:81:1d:41:19:49:0f:c5:92:37:5e:3a:08:5a:ed:
27:0c:a3:4d:13:73:ec:94:fa:f5:6c:5c:cc:89:49:
d2:f0:68:d1:1f:22:3c:92:6f:71:5e:f3:03:6b:c8:
41:84:60:06:cf:9d:3b:94:75:2a:4f:dd:b9:af:da:
75:30:e4:17:7f:aa:54:e3:f3:d7:4e:6b:f2:7d:fd:
a8:31:47:7d:e8:e0:8c:41:24:5c:58:a8:e6:7a:d4:
df:7c:a5:04:15:ca:4a:ab:1d:07:02:1f:f8:06:75:
4f:ef:98:95:bb:c0:11:b8:da:92:b2:61:04:1c:43:
3b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:94:CD:3C:3C:20:95:72:F0:18:47:CA:B0:63:00:1C:A0:30:8B:AF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09c9f1a8-72fd-43d4-8dab-550f1c20cd4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.96.0/21
Signature Algorithm: sha256WithRSAEncryption
5d:f4:65:b1:ec:f2:6b:df:0c:f4:0f:00:e6:e2:1e:41:82:5a:
20:b7:54:38:b0:6a:86:93:09:62:c3:a3:7c:47:ba:7f:8d:85:
7c:0f:4d:b8:2a:4f:d5:94:f3:eb:f9:1f:27:78:e2:d4:fc:9a:
10:3f:15:3d:4c:2c:b8:85:c6:47:90:d7:86:a2:f1:61:a6:d9:
3b:98:bc:7a:fd:a0:39:59:6c:b4:2e:ca:08:47:c4:b6:43:30:
31:62:0c:a7:d2:50:71:4e:db:1f:18:75:ba:83:b4:81:c6:91:
42:16:04:0c:4d:e8:ca:ea:0c:f2:0a:8b:6c:ba:8a:1a:ad:6d:
12:97:31:a4:76:49:0b:d8:e1:d5:0f:b2:5c:92:38:4a:80:2f:
fd:d9:e9:39:ca:8b:74:52:3c:f3:da:17:df:47:2a:ac:cb:95:
fa:09:6c:e2:30:ec:64:7b:ca:ce:ad:48:ed:7d:e3:1a:3b:c6:
48:7b:d7:95:c9:2a:93:13:e9:8e:c7:65:e8:7d:45:15:d4:39:
6d:b8:bd:d6:ee:50:cf:78:6c:5b:b7:26:1a:3a:92:4b:35:a2:
09:18:81:a2:0a:83:b7:d1:70:76:7f:fb:6a:9c:b0:e5:b2:9b:
b0:a7:2d:03:4a:80:30:a4:de:19:00:4d:25:78:35:5f:3a:60:
ed:eb:b8:f7
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUP8Nkls5AAwFUf323TpaWMd2ua78wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjIwMDAwMDAwWhcNMjUwMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A2OWU1NzJlZjJjNDI5ZmU2OTJiNzQxNDJjZjQzMDc5NTY2
YWM5NDE2MGIxZDBlZGEwOGYyNWI4ZDI3MTg1YjRmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCWSBsXwlbMFterXdnFXy4j4FbiXyC4VSJtvS//LeOzAOuK
ppvULZroVrHDfRmDYrcdUAAmTiS3HwbxGd0Fu/0qBMg1YTBt7Njwd1/g6c+XWBDE
XG6TgYUYKB4Y5Vrhdj1rElJowvgj4kN/J3dNEvbdo/SoFrO3rzei7M8uiTkTBx3w
PwqbJ++BHUEZSQ/FkjdeOgha7ScMo00Tc+yU+vVsXMyJSdLwaNEfIjySb3Fe8wNr
yEGEYAbPnTuUdSpP3bmv2nUw5Bd/qlTj89dOa/J9/agxR33o4IxBJFxYqOZ61N98
pQQVykqrHQcCH/gGdU/vmJW7wBG42pKyYQQcQzs/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUdZTNPDwglXLwGEfKsGMAHKAwi68wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA5YzlmMWE4LTcyZmQtNDNkNC04ZGFiLTU1MGYxYzIwY2Q0Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBANjl2AwDQYJKoZIhvcNAQELBQADggEBAF30ZbHs8mvfDPQPAObiHkGCWiC3
VDiwaoaTCWLDo3xHun+NhXwPTbgqT9WU8+v5Hyd44tT8mhA/FT1MLLiFxkeQ14ai
8WGm2TuYvHr9oDlZbLQuyghHxLZDMDFiDKfSUHFO2x8YdbqDtIHGkUIWBAxN6Mrq
DPIKi2y6ihqtbRKXMaR2SQvY4dUPslySOEqAL/3Z6TnKi3RSPPPaF99HKqzLlfoJ
bOIw7GR7ys6tSO194xo7xkh715XJKpMT6Y7HZeh9RRXUOW24vdbuUM94bFu3Jho6
kks1ogkYgaIKg7fRcHZ/+2qcsOWym7CnLQNKgDCk3hkATSV4NV86YO3ruPc=
-----END CERTIFICATE-----
Generated at Wed Apr 16 16:42:44 2025 by rpki-client