Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3007a5a0-075e-49c1-bdf3-0c3a4d1aa5c7.roa
File: 3007a5a0-075e-49c1-bdf3-0c3a4d1aa5c7.roa (raw, json)
Hash identifier: HH7FUDvLa9cgvpUq52YldFtLNTFa1Oqfaho0tLkQkBM=
Subject key identifier: 14:E8:CC:EE:C5:03:5E:6B:3A:F1:69:12:69:20:E0:B0:F0:38:0A:B4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 356A0B91B9122B2CA2F79E205C400CEAE399A49F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3007a5a0-075e-49c1-bdf3-0c3a4d1aa5c7.roa
Signing time: Tue 03 Dec 2024 00:00:00 +0000
ROA not before: Tue 03 Dec 2024 00:00:00 +0000
ROA not after: Tue 07 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 78.12.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:6a:0b:91:b9:12:2b:2c:a2:f7:9e:20:5c:40:0c:ea:e3:99:a4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 3 00:00:00 2024 GMT
Not After : Jan 7 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8a:d2:d1:f6:fd:f9:e8:19:a8:ff:55:e6:05:
da:09:4b:5d:51:44:24:62:07:03:2f:43:8f:f9:7b:
cc:37:ce:a9:ca:16:97:f4:f1:09:60:aa:4d:86:15:
31:b4:81:62:d3:3f:44:e7:77:33:59:9c:92:6d:9c:
e1:a3:5e:bd:a7:5a:94:63:80:35:58:a0:4c:cc:76:
ad:15:b5:37:7e:63:47:5e:0c:4b:00:9d:70:c3:84:
0e:67:30:09:09:db:5d:11:b7:b9:7b:79:db:e0:14:
bd:09:db:0e:87:57:2d:b6:2a:c0:8f:3d:39:20:58:
7b:cc:24:03:a8:61:01:dc:80:51:27:b9:d6:7e:50:
90:47:fc:74:e7:20:13:7c:10:9a:6b:0e:47:36:95:
f1:61:89:77:d6:13:5c:6f:51:a4:64:03:1d:d6:af:
5c:cf:b5:8f:01:c4:55:d4:df:64:7d:29:60:c4:52:
df:12:10:49:f9:40:22:1d:c3:a1:72:d5:44:d6:9f:
db:56:03:6b:e5:ac:70:41:62:0a:55:53:6b:93:7d:
96:4f:63:60:7d:b6:a8:84:b5:38:38:fb:d9:62:0f:
0b:0b:bd:3b:8a:43:cc:27:1b:37:e4:c7:0d:d0:61:
1e:a2:f5:a6:10:e0:be:22:3e:ee:a2:c9:04:e8:da:
c6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E8:CC:EE:C5:03:5E:6B:3A:F1:69:12:69:20:E0:B0:F0:38:0A:B4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3007a5a0-075e-49c1-bdf3-0c3a4d1aa5c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.12.0.0/14
Signature Algorithm: sha256WithRSAEncryption
15:60:b0:29:7e:1b:79:80:d4:fb:4c:31:ee:27:b7:86:63:f1:
33:70:74:ab:26:10:c2:b8:ec:55:5e:bd:55:be:44:f9:36:0f:
a9:48:b4:d3:c9:28:48:2f:aa:f8:bf:42:05:bd:5f:be:93:18:
74:02:a1:cc:e5:7d:10:e1:c1:19:d3:5a:48:f3:4e:3a:33:bd:
dd:14:7c:f5:30:ed:7a:05:83:53:ef:c1:12:f5:ab:23:44:84:
77:21:2e:d7:2b:02:85:a1:d4:23:40:d3:a8:58:40:79:3e:e2:
32:5e:7c:4e:cb:4f:d7:4e:99:30:62:f6:4c:3a:0d:7f:6c:5d:
18:c6:c9:68:ba:1d:55:bb:ba:04:a5:00:a2:db:01:5c:bb:29:
09:bf:c4:d1:b6:81:59:1f:2a:44:5f:9c:f7:a2:90:5a:06:42:
72:04:c6:bf:50:32:33:41:d8:77:5d:32:9e:a7:a5:ca:42:5a:
69:22:8e:7a:22:51:cc:07:a3:aa:99:f4:a2:dd:5d:64:6b:b3:
fc:71:10:0c:37:3b:97:c8:04:84:4b:9e:79:46:c2:74:4b:53:
5e:24:d9:e0:a1:d0:7a:9a:26:2c:1f:ff:e4:73:ec:e9:6b:cc:
43:f2:45:be:6e:12:5e:98:c3:39:eb:65:30:fe:96:11:b9:50:
ef:b5:f0:e6
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUNWoLkbkSKyyi954gXEAM6uOZpJ8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjAzMDAwMDAwWhcNMjUwMTA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A0NDQ2NDQ4NjUzZWNlMTViNGUyYjQ2MzVlOTcyZjdhNjJk
MzQxMTJmN2Q4NzhjMDRjYzZjZjRjODkxMzc5NGQxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCRitLR9v356Bmo/1XmBdoJS11RRCRiBwMvQ4/5e8w3zqnK
Fpf08Qlgqk2GFTG0gWLTP0TndzNZnJJtnOGjXr2nWpRjgDVYoEzMdq0VtTd+Y0de
DEsAnXDDhA5nMAkJ210Rt7l7edvgFL0J2w6HVy22KsCPPTkgWHvMJAOoYQHcgFEn
udZ+UJBH/HTnIBN8EJprDkc2lfFhiXfWE1xvUaRkAx3Wr1zPtY8BxFXU32R9KWDE
Ut8SEEn5QCIdw6Fy1UTWn9tWA2vlrHBBYgpVU2uTfZZPY2B9tqiEtTg4+9liDwsL
vTuKQ8wnGzfkxw3QYR6i9aYQ4L4iPu6iyQTo2sY7AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUFOjM7sUDXms68WkSaSDgsPA4CrQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzMwMDdhNWEwLTA3NWUtNDljMS1iZGYzLTBjM2E0ZDFhYTVjNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwJODDANBgkqhkiG9w0BAQsFAAOCAQEAFWCwKX4beYDU+0wx7ie3hmPxM3B0
qyYQwrjsVV69Vb5E+TYPqUi008koSC+q+L9CBb1fvpMYdAKhzOV9EOHBGdNaSPNO
OjO93RR89TDtegWDU+/BEvWrI0SEdyEu1ysChaHUI0DTqFhAeT7iMl58TstP106Z
MGL2TDoNf2xdGMbJaLodVbu6BKUAotsBXLspCb/E0baBWR8qRF+c96KQWgZCcgTG
v1AyM0HYd10ynqelykJaaSKOeiJRzAejqpn0ot1dZGuz/HEQDDc7l8gEhEueeUbC
dEtTXiTZ4KHQepomLB//5HPs6WvMQ/JFvm4SXpjDOetlMP6WEblQ77Xw5g==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:33 2025 by rpki-client