Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34c4726e-bfe7-44be-8e26-b302bf614ac0.roa
File: 34c4726e-bfe7-44be-8e26-b302bf614ac0.roa (raw, json)
Hash identifier: LGacU95KKD9KA0m9Kio5MT714Q0Zd5K6AlL2TClEgu8=
Subject key identifier: 1D:BC:E3:44:CD:9C:D0:63:1C:BD:D7:0F:63:3C:87:08:73:EC:08:59
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 24C66567D2BD039CAB2F2ECA4811BC787BF56AEA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34c4726e-bfe7-44be-8e26-b302bf614ac0.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 16.52.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:c6:65:67:d2:bd:03:9c:ab:2f:2e:ca:48:11:bc:78:7b:f5:6a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:55:93:9d:a9:a8:96:03:e8:6f:e5:27:59:af:
6f:b5:71:27:e8:11:da:cf:38:0f:24:f6:28:c3:41:
1c:08:ed:6b:0e:a0:09:30:f9:ca:62:23:d4:e2:06:
dc:cd:b4:87:76:e6:85:75:a6:5f:da:0c:00:0b:f0:
7e:52:b6:e4:01:51:e2:b5:84:6b:66:98:52:37:97:
99:c7:96:c0:01:e2:4f:6f:36:62:a3:de:9c:04:3b:
20:d0:cf:db:35:8f:06:e7:66:af:09:83:e8:b2:94:
f6:f2:bb:2b:1b:f0:c9:fb:7a:c8:23:b0:de:67:81:
fb:f9:e5:e4:d3:20:e8:88:5c:b2:06:7d:5c:07:4d:
87:24:c7:cb:e4:4d:7a:0f:3c:93:28:65:d4:a6:ae:
62:a8:87:fe:b2:3b:a5:18:11:d7:84:e6:3b:a6:84:
77:1b:f5:d8:55:21:ce:0b:79:37:6e:f6:21:95:cc:
0d:ea:a3:9b:bc:95:6f:a9:b6:28:be:c0:b1:09:c0:
d6:f1:1e:08:f9:24:f2:11:56:83:7c:38:48:05:bd:
9d:9d:3a:da:68:0d:9a:a7:01:6f:5a:c9:af:9e:3c:
8d:7f:3e:27:6a:d7:06:6b:9c:ec:dc:53:e6:bf:fe:
84:73:fa:fb:b4:04:79:1c:ca:ec:98:71:72:6f:ba:
32:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BC:E3:44:CD:9C:D0:63:1C:BD:D7:0F:63:3C:87:08:73:EC:08:59
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34c4726e-bfe7-44be-8e26-b302bf614ac0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.52.0.0/16
Signature Algorithm: sha256WithRSAEncryption
77:72:08:99:33:75:58:48:8d:54:61:55:e4:6e:da:ec:6d:92:
d5:9f:ee:b2:dd:49:f0:a4:13:54:1b:3f:08:f7:b4:67:83:a8:
3f:bb:ab:a6:ee:97:37:54:8e:d9:2d:69:2e:74:67:d1:44:cd:
98:9e:9e:32:de:37:f5:fb:b0:7b:b2:e6:03:3a:e0:05:c1:47:
f4:d7:e3:63:b7:4c:89:0c:27:b1:b5:3f:b8:49:88:1b:14:a1:
d8:3b:1a:38:e6:cf:4e:dc:0e:1b:13:3a:6e:67:50:83:36:f4:
04:d2:ee:fe:74:08:35:90:4b:31:ab:80:e6:62:26:34:c8:82:
79:7c:ff:42:ba:0d:f3:16:21:5a:0f:00:77:60:45:48:92:3e:
7a:f4:28:67:bc:8e:d7:44:5f:77:42:14:e4:c0:eb:46:d9:96:
91:c2:80:86:a0:d7:29:c9:5b:f6:b6:33:68:a0:17:d1:db:8e:
ce:bd:61:27:09:c6:3b:bf:6f:e1:a3:c6:6e:42:3c:f7:08:d7:
ed:6e:52:f0:c4:b9:7f:d5:ac:a5:0e:81:ca:42:e9:6e:8c:76:
e7:00:12:05:8a:c0:ef:fa:4a:b7:3e:79:81:01:cf:42:e7:d4:
5f:81:8c:e4:0a:77:3d:0d:e8:49:a0:b3:44:d2:7b:53:14:6e:
b6:92:4d:b3
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUJMZlZ9K9A5yrLy7KSBG8eHv1auowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjI3MDAwMDAwWhcNMjUwMTMxMjM1OTU5
WjB6MUkwRwYDVQQFE0AxYTVhZTE2NzAzMmJlNGMwOTIwYzc3MGRiNmI4NjdjNzg0
NjE1MWNhNTAxNzczYjBiZjYwYjdmMzFhM2EyZmM2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDNVZOdqaiWA+hv5SdZr2+1cSfoEdrPOA8k9ijDQRwI7WsO
oAkw+cpiI9TiBtzNtId25oV1pl/aDAAL8H5StuQBUeK1hGtmmFI3l5nHlsAB4k9v
NmKj3pwEOyDQz9s1jwbnZq8Jg+iylPbyuysb8Mn7esgjsN5ngfv55eTTIOiIXLIG
fVwHTYckx8vkTXoPPJMoZdSmrmKoh/6yO6UYEdeE5jumhHcb9dhVIc4LeTdu9iGV
zA3qo5u8lW+ptii+wLEJwNbxHgj5JPIRVoN8OEgFvZ2dOtpoDZqnAW9aya+ePI1/
Pidq1wZrnOzcU+a//oRz+vu0BHkcyuyYcXJvujIJAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUHbzjRM2c0GMcvdcPYzyHCHPsCFkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzM0YzQ3MjZlLWJmZTctNDRiZS04ZTI2LWIzMDJiZjYxNGFjMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQNDANBgkqhkiG9w0BAQsFAAOCAQEAd3IImTN1WEiNVGFV5G7a7G2S1Z/u
st1J8KQTVBs/CPe0Z4OoP7urpu6XN1SO2S1pLnRn0UTNmJ6eMt439fuwe7LmAzrg
BcFH9NfjY7dMiQwnsbU/uEmIGxSh2DsaOObPTtwOGxM6bmdQgzb0BNLu/nQINZBL
MauA5mImNMiCeXz/QroN8xYhWg8Ad2BFSJI+evQoZ7yO10Rfd0IU5MDrRtmWkcKA
hqDXKclb9rYzaKAX0duOzr1hJwnGO79v4aPGbkI89wjX7W5S8MS5f9WspQ6BykLp
box25wASBYrA7/pKtz55gQHPQufUX4GM5Ap3PQ3oSaCzRNJ7UxRutpJNsw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:31 2025 by rpki-client