Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a60a8b2-820f-417d-872f-7b6193e727e8.roa
File: 2a60a8b2-820f-417d-872f-7b6193e727e8.roa (raw, json)
Hash identifier: Ox4X/NILsfSTMlhq/DN/GbuPC5ZaX94YRwVDx6d0uQ4=
Subject key identifier: 50:77:B8:CF:C0:CD:35:74:7E:0E:F9:B8:17:F0:E4:EB:DA:2E:B6:30
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1DBF8BC55A264E0E2283C8D2CAF6A894ED87BB5E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a60a8b2-820f-417d-872f-7b6193e727e8.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.50.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:bf:8b:c5:5a:26:4e:0e:22:83:c8:d2:ca:f6:a8:94:ed:87:bb:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0a:dc:4d:94:f9:f4:62:2e:20:32:88:c5:6d:
1e:07:bd:db:b5:c8:94:c6:e6:f6:b7:bd:1d:7e:9a:
8b:a2:d9:f2:cc:b8:a4:d9:21:68:d9:40:cc:68:0d:
d1:39:70:44:c6:fa:e7:1a:a7:4b:74:38:76:2e:ea:
1a:d5:b6:4b:52:40:e1:0a:fa:0f:c4:6a:25:78:f2:
e6:0a:98:98:31:ff:8e:a2:b6:75:44:4a:a5:ee:8e:
ad:4e:17:8f:67:20:0d:50:47:d3:3d:f3:ce:84:55:
19:2a:f7:2c:9e:10:17:32:6c:10:0e:67:49:64:c6:
93:ad:cd:6d:b3:ce:35:3e:c7:c8:ac:5a:f3:0e:8f:
47:42:79:6f:ef:31:a3:0c:46:f1:74:36:56:32:a6:
f1:a9:d0:a3:45:4b:44:50:2d:61:d2:f2:ad:f4:9c:
df:4d:13:e2:9d:6a:48:77:7f:d1:23:5a:36:77:fe:
b1:0a:b1:70:8e:d8:25:df:50:b2:67:09:3c:77:41:
d9:d3:a2:40:d6:a0:f2:69:da:52:8c:ad:a9:9c:e1:
b6:4f:ca:fe:57:61:3b:6b:4a:63:21:5e:bd:45:ab:
8f:7e:d6:b5:a4:a5:67:0c:b0:81:df:f8:dd:95:83:
34:9f:3c:33:3e:c1:91:8c:1b:a4:28:a5:fe:1e:7f:
43:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:77:B8:CF:C0:CD:35:74:7E:0E:F9:B8:17:F0:E4:EB:DA:2E:B6:30
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a60a8b2-820f-417d-872f-7b6193e727e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.50.137.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:dd:a2:2b:41:a0:d0:ef:44:25:b0:7e:37:63:90:f5:d5:d1:
cb:7d:8d:6c:5e:9f:34:50:0a:03:11:2a:8b:93:d7:d9:58:3b:
aa:db:7a:6f:9b:b2:1f:9a:77:58:15:09:cc:07:58:24:e6:74:
e8:b9:3e:d1:09:f2:e3:87:6b:32:88:9e:9d:1b:34:f1:ae:e6:
cc:0c:b1:da:df:c5:7a:ef:d2:e3:24:76:13:90:57:70:e6:0e:
e7:5d:37:e6:c9:2a:1b:be:e1:c3:01:2f:98:15:d3:b1:2c:41:
33:d6:94:5d:4f:aa:f6:c0:02:b2:be:74:47:2a:d1:d7:9d:16:
61:42:7d:1b:5b:18:29:e4:aa:82:d5:a2:18:fd:58:fe:6b:d7:
00:5e:72:05:46:69:dd:a2:b8:4a:25:de:a5:1c:3b:b3:9b:10:
5b:39:6d:36:eb:59:a4:05:d8:15:1a:d4:bf:29:5a:b8:88:15:
96:d1:12:3f:96:a7:fe:ab:23:d2:2b:5b:78:2a:59:28:d5:d2:
dd:88:82:58:20:04:1e:8c:9c:f7:06:1c:6f:96:09:cd:da:2e:
e9:84:a8:bf:2a:be:21:ac:e1:21:ad:94:17:d4:ff:79:25:5b:
7b:23:b7:1b:76:83:e5:c6:aa:10:b1:21:4f:d5:38:95:bd:eb:
2f:42:67:11
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHb+LxVomTg4ig8jSyvaolO2Hu14wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTAzMDAwMDAwWhcNMjUwMjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A4ZTM1MDgwYTAwMWRlY2FmZTcxMmY2MTU4MmUwZmRkMGY4
MTE3OWIyNDg3MTE3MjRmZDBlNzQxYmZkNWZhMGU4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC7CtxNlPn0Yi4gMojFbR4Hvdu1yJTG5va3vR1+moui2fLM
uKTZIWjZQMxoDdE5cETG+ucap0t0OHYu6hrVtktSQOEK+g/EaiV48uYKmJgx/46i
tnVESqXujq1OF49nIA1QR9M9886EVRkq9yyeEBcybBAOZ0lkxpOtzW2zzjU+x8is
WvMOj0dCeW/vMaMMRvF0NlYypvGp0KNFS0RQLWHS8q30nN9NE+Kdakh3f9EjWjZ3
/rEKsXCO2CXfULJnCTx3QdnTokDWoPJp2lKMramc4bZPyv5XYTtrSmMhXr1Fq49+
1rWkpWcMsIHf+N2VgzSfPDM+wZGMG6Qopf4ef0OzAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUUHe4z8DNNXR+Dvm4F/Dk69outjAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzJhNjBhOGIyLTgyMGYtNDE3ZC04NzJmLTdiNjE5M2U3MjdlOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjMokwDQYJKoZIhvcNAQELBQADggEBAE/doitBoNDvRCWwfjdjkPXV0ct9
jWxenzRQCgMRKouT19lYO6rbem+bsh+ad1gVCcwHWCTmdOi5PtEJ8uOHazKInp0b
NPGu5swMsdrfxXrv0uMkdhOQV3DmDuddN+bJKhu+4cMBL5gV07EsQTPWlF1PqvbA
ArK+dEcq0dedFmFCfRtbGCnkqoLVohj9WP5r1wBecgVGad2iuEol3qUcO7ObEFs5
bTbrWaQF2BUa1L8pWriIFZbREj+Wp/6rI9IrW3gqWSjV0t2IglggBB6MnPcGHG+W
Cc3aLumEqL8qviGs4SGtlBfU/3klW3sjtxt2g+XGqhCxIU/VOJW96y9CZxE=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:35 2025 by rpki-client