Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/168ff039-d152-4e1c-9769-2848d23797c6.roa
File: 168ff039-d152-4e1c-9769-2848d23797c6.roa (raw, json)
Hash identifier: /Ld2sL1qvOLYreUu2jLEZkipKmKWMWrv54tqgp/KEVY=
Subject key identifier: 56:FA:70:3B:61:E0:62:BE:D3:C4:93:99:F4:F0:63:AE:3B:14:D6:86
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2D3057A82F2165C181F775EC8FECA195F314840A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/168ff039-d152-4e1c-9769-2848d23797c6.roa
Signing time: Tue 03 Dec 2024 00:00:00 +0000
ROA not before: Tue 03 Dec 2024 00:00:00 +0000
ROA not after: Tue 07 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 161.193.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:30:57:a8:2f:21:65:c1:81:f7:75:ec:8f:ec:a1:95:f3:14:84:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 3 00:00:00 2024 GMT
Not After : Jan 7 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:c3:5e:ba:cd:4f:e7:20:ee:fe:63:f0:69:
22:33:ba:08:09:81:af:d1:fb:df:ed:b9:40:1e:29:
49:71:c0:7f:b8:6a:6f:11:73:3d:c9:3d:ff:68:41:
fb:a0:03:62:49:6c:45:23:13:9e:20:79:e5:d7:ed:
cb:c1:9a:de:11:71:ac:80:6a:cf:d0:75:98:67:71:
47:d1:d5:07:6c:4f:3d:99:6f:da:4e:26:d5:ee:19:
46:9b:4f:67:96:b5:e7:0c:4d:f3:5f:56:3f:fe:f1:
1d:b2:e8:be:28:e2:ac:88:4f:f8:4c:52:18:bd:36:
db:fd:1b:6e:32:22:53:ea:c3:52:e6:fa:ef:b0:65:
a3:a5:d3:c2:d7:83:c7:fa:ef:e8:63:3e:e1:af:a7:
e7:fb:b9:15:87:4c:7a:41:51:79:52:ad:76:c7:6c:
e1:22:c7:cd:da:85:af:66:fe:64:f8:3c:f6:df:3d:
33:d3:bb:ba:f2:46:2b:4d:b4:0c:28:5a:3b:04:2d:
04:79:8a:06:cd:aa:b1:b4:98:3d:ca:b1:57:02:4e:
ae:04:b5:af:31:c6:b3:bf:41:73:e2:d3:2d:4b:11:
3e:23:53:6a:16:11:82:14:35:b6:39:f7:03:2d:5d:
45:40:b4:6f:3c:02:45:7a:3a:c6:81:db:6f:48:c6:
97:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FA:70:3B:61:E0:62:BE:D3:C4:93:99:F4:F0:63:AE:3B:14:D6:86
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/168ff039-d152-4e1c-9769-2848d23797c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.193.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:2b:b3:4e:f2:02:a1:4c:ad:5f:d4:d0:21:dc:28:94:a0:61:
64:4f:5b:bc:d3:5b:69:6c:88:39:82:2d:63:46:54:33:ad:8a:
c7:72:84:20:b1:2e:82:00:61:43:99:84:4e:ac:ec:e3:46:01:
3d:94:21:74:81:dd:65:42:ae:88:e5:f6:7d:5d:2a:c8:77:19:
d8:4b:a3:0e:64:9f:18:78:f4:14:ac:cf:d7:d4:6e:84:00:8f:
bd:7f:9c:56:d9:30:ff:d9:a4:a9:ba:70:6f:04:3b:7e:e2:18:
dd:3a:3a:db:55:c0:23:5b:0d:1b:8d:e0:fa:70:ee:75:19:29:
b1:52:ee:58:24:09:31:79:04:98:26:e4:7b:36:5c:f6:b7:8e:
db:51:f2:57:89:b3:45:93:fa:8a:46:f3:68:fe:bb:fd:f5:2a:
24:40:2d:c6:8d:3e:45:41:d3:38:1d:a2:c3:52:22:25:d6:36:
f8:b8:21:53:6e:b1:b5:36:a5:ac:5f:a8:18:86:f1:b4:36:fc:
af:39:a0:e4:a9:05:60:19:8f:e4:b1:64:a7:b5:e7:fa:05:7f:
3b:d2:87:9b:34:8d:62:d1:3f:16:79:c1:da:8f:8f:f2:d1:f4:
92:2d:aa:0b:6c:99:ee:68:df:9c:4d:60:95:13:27:ac:1e:28:
8e:eb:6f:35
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIULTBXqC8hZcGB93Xsj+yhlfMUhAowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjAzMDAwMDAwWhcNMjUwMTA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A3NzM5ZDdjZDIxM2Y3MmM2ODAzYWEzOTFkZDdkODhiYWQ1
ZmE4OGRmMGQzZThmZDRkMTA5ZTk2NTJiYTFlN2VhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC/wcNeus1P5yDu/mPwaSIzuggJga/R+9/tuUAeKUlxwH+4
am8Rcz3JPf9oQfugA2JJbEUjE54geeXX7cvBmt4RcayAas/QdZhncUfR1QdsTz2Z
b9pOJtXuGUabT2eWtecMTfNfVj/+8R2y6L4o4qyIT/hMUhi9Ntv9G24yIlPqw1Lm
+u+wZaOl08LXg8f67+hjPuGvp+f7uRWHTHpBUXlSrXbHbOEix83aha9m/mT4PPbf
PTPTu7ryRitNtAwoWjsELQR5igbNqrG0mD3KsVcCTq4Eta8xxrO/QXPi0y1LET4j
U2oWEYIUNbY59wMtXUVAtG88AkV6OsaB229IxpefAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUVvpwO2HgYr7TxJOZ9PBjrjsU1oYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE2OGZmMDM5LWQxNTItNGUxYy05NzY5LTI4NDhkMjM3OTdjNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwChwTANBgkqhkiG9w0BAQsFAAOCAQEAXiuzTvICoUytX9TQIdwolKBhZE9b
vNNbaWyIOYItY0ZUM62Kx3KEILEuggBhQ5mETqzs40YBPZQhdIHdZUKuiOX2fV0q
yHcZ2EujDmSfGHj0FKzP19RuhACPvX+cVtkw/9mkqbpwbwQ7fuIY3To621XAI1sN
G43g+nDudRkpsVLuWCQJMXkEmCbkezZc9reO21HyV4mzRZP6ikbzaP67/fUqJEAt
xo0+RUHTOB2iw1IiJdY2+LghU26xtTalrF+oGIbxtDb8rzmg5KkFYBmP5LFkp7Xn
+gV/O9KHmzSNYtE/FnnB2o+P8tH0ki2qC2yZ7mjfnE1glRMnrB4ojutvNQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:02 2025 by rpki-client