Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1edd6146-6c89-41b8-8e80-f3499e8fca2e.roa
File: 1edd6146-6c89-41b8-8e80-f3499e8fca2e.roa (raw, json)
Hash identifier: rL5ZLtGuQmGeaHy6J5XSon2R6JxZAwJvkGH7US1mEJM=
Subject key identifier: 6D:04:BD:79:CC:DC:01:4A:02:C5:FE:7D:A2:BC:CE:F6:6F:77:A0:23
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0FD11E690D1378090CEBD85091BC8B17B96ABD27
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1edd6146-6c89-41b8-8e80-f3499e8fca2e.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.25.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:d1:1e:69:0d:13:78:09:0c:eb:d8:50:91:bc:8b:17:b9:6a:bd:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:3a:d0:41:8a:26:44:b6:c6:69:e9:85:49:97:
16:35:a2:9c:f3:55:45:04:04:06:19:66:0e:ae:ab:
01:2a:18:79:20:d8:45:e0:c7:1d:32:44:01:57:8d:
21:cf:27:f9:f0:9e:7e:1e:1d:28:f7:d4:84:c6:f1:
cc:50:e4:6c:f9:05:25:5c:46:7d:af:dd:4f:ba:84:
49:d5:e1:74:3e:68:25:43:eb:17:c6:ba:f4:ed:0e:
78:73:3a:93:65:b5:57:89:96:1b:6f:4f:c8:34:27:
19:09:96:fa:87:c8:c4:2d:96:f8:14:e6:6f:38:9c:
94:8c:25:78:29:95:bb:07:7a:02:90:ea:5b:67:e8:
ae:02:a6:01:aa:94:15:1b:60:07:68:02:ba:e0:87:
1f:9b:43:ad:bf:fc:f1:01:b3:2b:f4:1b:18:47:67:
a5:b1:7d:bb:af:40:10:c3:8d:11:c9:58:4a:6a:e6:
ab:1b:b7:95:0d:b9:4f:76:ed:6b:4c:2c:f7:ac:84:
78:09:0c:34:69:b1:46:d3:db:71:d1:c8:ae:e5:ae:
a1:70:d2:fd:ae:e3:d6:e5:0f:45:ac:d1:22:48:45:
1f:dd:09:f4:6d:15:22:78:31:a6:ca:b1:6d:fb:22:
7e:ba:21:93:57:2f:a2:97:af:51:e7:d4:b9:87:d9:
70:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:04:BD:79:CC:DC:01:4A:02:C5:FE:7D:A2:BC:CE:F6:6F:77:A0:23
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1edd6146-6c89-41b8-8e80-f3499e8fca2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.25.67.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:f7:aa:9b:8d:1c:34:e5:b5:76:8f:e1:1e:88:03:b1:ce:57:
5c:f9:9e:10:d8:91:4f:09:d4:3e:52:b7:d2:89:24:ba:51:85:
20:9b:5d:ca:15:01:cc:64:ca:b9:e3:24:c1:8b:5d:97:7a:0a:
1a:32:2f:41:98:47:e2:43:90:79:58:3e:14:92:a3:23:4f:6f:
2e:63:55:0d:8f:ed:95:53:d5:b7:41:de:f6:e9:ed:74:60:54:
0d:2f:c6:fd:28:80:0c:df:73:10:32:d8:04:4d:43:66:34:21:
42:28:43:e1:b2:a4:a5:0f:16:cf:bb:a3:14:a5:3a:e2:f8:f4:
ad:3a:1e:90:77:6d:32:ad:e9:b8:72:37:76:09:43:68:0b:b5:
80:a5:d7:10:63:9b:ca:d6:18:74:d4:41:7a:62:9b:c5:49:31:
fe:a4:39:cf:c6:bd:ca:ce:47:83:df:1b:29:9a:29:b7:19:ba:
df:79:41:16:f9:37:a0:92:80:e2:1c:79:f9:50:16:11:3f:71:
fc:68:9a:b6:f4:20:87:60:85:d8:99:e0:0b:fb:e5:6b:80:70:
a5:72:c0:90:c0:a4:8b:1e:56:10:63:e4:94:87:51:78:f8:eb:
d0:68:66:ad:16:88:dc:d8:10:6d:7a:03:57:1d:b5:bb:61:c8:
d3:51:a5:48
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUD9EeaQ0TeAkM69hQkbyLF7lqvScwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTA3MDAwMDAwWhcNMjUwMjExMjM1OTU5
WjB6MUkwRwYDVQQFE0A2NDFjY2M3NjZhOTNlYzVjOTk1ZWNkMjk5YTdmOTE0NTRk
YmMyMGY5MTdkODU4MmQxYzQ1NjkyZGM2Y2FlY2ZmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDzOtBBiiZEtsZp6YVJlxY1opzzVUUEBAYZZg6uqwEqGHkg
2EXgxx0yRAFXjSHPJ/nwnn4eHSj31ITG8cxQ5Gz5BSVcRn2v3U+6hEnV4XQ+aCVD
6xfGuvTtDnhzOpNltVeJlhtvT8g0JxkJlvqHyMQtlvgU5m84nJSMJXgplbsHegKQ
6ltn6K4CpgGqlBUbYAdoArrghx+bQ62//PEBsyv0GxhHZ6WxfbuvQBDDjRHJWEpq
5qsbt5UNuU927WtMLPeshHgJDDRpsUbT23HRyK7lrqFw0v2u49blD0Ws0SJIRR/d
CfRtFSJ4MabKsW37In66IZNXL6KXr1Hn1LmH2XCZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUbQS9eczcAUoCxf59orzO9m93oCMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFlZGQ2MTQ2LTZjODktNDFiOC04ZTgwLWYzNDk5ZThmY2EyZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA2GUMwDQYJKoZIhvcNAQELBQADggEBAG33qpuNHDTltXaP4R6IA7HOV1z5
nhDYkU8J1D5St9KJJLpRhSCbXcoVAcxkyrnjJMGLXZd6ChoyL0GYR+JDkHlYPhSS
oyNPby5jVQ2P7ZVT1bdB3vbp7XRgVA0vxv0ogAzfcxAy2ARNQ2Y0IUIoQ+GypKUP
Fs+7oxSlOuL49K06HpB3bTKt6bhyN3YJQ2gLtYCl1xBjm8rWGHTUQXpim8VJMf6k
Oc/GvcrOR4PfGymaKbcZut95QRb5N6CSgOIceflQFhE/cfxomrb0IIdghdiZ4Av7
5WuAcKVywJDApIseVhBj5JSHUXj469BoZq0WiNzYEG16A1cdtbthyNNRpUg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:19 2025 by rpki-client