Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d47fdd0-8f47-4667-b0d8-b71c6b252a1b.roa
File: 4d47fdd0-8f47-4667-b0d8-b71c6b252a1b.roa (raw, json)
Hash identifier: KOHTtumkbtAQbK36ncmPXVKNE6FFBH5e+rGXvC3O+O8=
Subject key identifier: C2:96:ED:DC:E7:ED:5B:80:0E:FF:BD:9E:89:B4:E8:1A:FD:FC:CA:9D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 521A6D27482EC85954E0389F905427F23AC7F130
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d47fdd0-8f47-4667-b0d8-b71c6b252a1b.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 16.22.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:1a:6d:27:48:2e:c8:59:54:e0:38:9f:90:54:27:f2:3a:c7:f1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:17:32:3f:f9:9a:82:49:28:9e:29:dd:a7:4d:
c9:48:13:bb:42:29:5a:fb:42:8a:ef:eb:36:ac:da:
d0:aa:a5:d5:35:d1:b8:17:88:c1:be:33:f4:23:2a:
2f:3a:01:1d:ee:24:28:0e:84:9d:e7:b2:05:42:40:
c9:59:d8:05:78:e2:39:1b:c4:50:63:e1:dd:dd:08:
5b:3a:ba:60:8e:f8:e8:f8:d2:07:b8:9e:d0:dc:65:
51:d2:6d:cf:18:aa:a8:ac:0a:df:39:f0:7c:8f:bf:
70:bc:2e:ea:3b:b1:31:e8:e4:fe:8c:d5:32:fa:a3:
83:13:2e:fc:8b:8f:d4:f7:ce:23:8e:8f:20:6d:a5:
25:3f:e5:74:38:d5:1d:2c:19:86:53:ee:cf:91:b7:
e2:e7:91:b5:5b:d1:44:95:2e:68:55:ca:9a:88:22:
44:64:fb:5e:38:5c:2a:6d:8d:58:12:d8:d2:14:18:
76:15:4e:69:8c:f6:25:07:30:ac:95:63:ce:67:8f:
2c:d5:19:ac:96:1c:60:10:a4:ac:f2:89:f0:22:9d:
dc:06:30:56:5f:97:6c:0a:7a:53:be:e8:f8:26:44:
ae:f8:c4:b1:e6:ab:7d:e9:fa:7a:f5:2e:f8:01:04:
b0:b7:ca:db:1e:4c:f3:9d:e8:79:ae:c2:b8:b0:ca:
21:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:96:ED:DC:E7:ED:5B:80:0E:FF:BD:9E:89:B4:E8:1A:FD:FC:CA:9D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d47fdd0-8f47-4667-b0d8-b71c6b252a1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.22.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2f:73:20:18:5e:d9:94:ea:fe:50:8b:c0:07:96:19:03:9d:0e:
85:5b:98:67:1c:1f:67:18:fa:9e:90:ec:17:a9:6a:63:53:f0:
bc:36:d8:ca:ce:4c:03:54:60:ec:3f:5d:54:7f:cc:f9:93:8f:
31:d9:3c:ef:6d:cf:12:15:5c:00:19:6b:f4:47:2a:9f:00:3e:
2f:2f:65:0d:bb:98:72:04:bc:a7:15:72:aa:f6:4e:f7:40:2c:
9b:bb:be:67:8a:98:6f:35:f4:e7:dc:ef:7e:be:05:60:24:19:
e0:d3:c2:d2:42:f4:76:0c:3d:33:8d:fc:39:2f:5c:6e:62:dd:
c9:e7:04:66:97:50:2c:08:a2:b4:0b:fe:9c:4d:49:2b:41:ba:
94:07:f4:b0:53:fd:de:ab:be:68:cf:61:fe:13:5c:b4:22:9b:
80:39:42:74:be:9d:77:ac:ea:cc:38:82:20:df:8d:5d:d3:2c:
38:a1:ee:d5:02:c8:fb:d0:57:76:3d:ed:a9:88:53:a0:86:cd:
a8:c8:ee:23:7f:3d:c9:6b:33:75:4a:c2:75:7e:71:eb:ea:69:
d5:33:6c:ae:04:46:c9:23:3d:21:c6:d0:e4:a0:67:c5:6d:1e:
48:fe:da:ad:95:80:7d:61:56:0d:e2:77:4c:d2:57:71:40:50:
eb:eb:2c:ff
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUUhptJ0guyFlU4DifkFQn8jrH8TAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjI3MDAwMDAwWhcNMjUwMTMxMjM1OTU5
WjB6MUkwRwYDVQQFE0A5YzM3M2EwMjZkNmIzNmMwMTM5MjVkODZhOGEwMzkyMDQz
MmQyYjU2MmZkZWI3YWQwNTY1ODM5ODJmYzQ1OTFlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCeFzI/+ZqCSSieKd2nTclIE7tCKVr7Qorv6zas2tCqpdU1
0bgXiMG+M/QjKi86AR3uJCgOhJ3nsgVCQMlZ2AV44jkbxFBj4d3dCFs6umCO+Oj4
0ge4ntDcZVHSbc8YqqisCt858HyPv3C8Luo7sTHo5P6M1TL6o4MTLvyLj9T3ziOO
jyBtpSU/5XQ41R0sGYZT7s+Rt+LnkbVb0USVLmhVypqIIkRk+144XCptjVgS2NIU
GHYVTmmM9iUHMKyVY85njyzVGayWHGAQpKzyifAindwGMFZfl2wKelO+6PgmRK74
xLHmq33p+nr1LvgBBLC3ytseTPOd6HmuwriwyiE5AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUwpbt3OftW4AO/72eibToGv38yp0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzRkNDdmZGQwLThmNDctNDY2Ny1iMGQ4LWI3MWM2YjI1MmExYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQFjANBgkqhkiG9w0BAQsFAAOCAQEAL3MgGF7ZlOr+UIvAB5YZA50OhVuY
ZxwfZxj6npDsF6lqY1PwvDbYys5MA1Rg7D9dVH/M+ZOPMdk8723PEhVcABlr9Ecq
nwA+Ly9lDbuYcgS8pxVyqvZO90Asm7u+Z4qYbzX059zvfr4FYCQZ4NPC0kL0dgw9
M438OS9cbmLdyecEZpdQLAiitAv+nE1JK0G6lAf0sFP93qu+aM9h/hNctCKbgDlC
dL6dd6zqzDiCIN+NXdMsOKHu1QLI+9BXdj3tqYhToIbNqMjuI389yWszdUrCdX5x
6+pp1TNsrgRGySM9IcbQ5KBnxW0eSP7arZWAfWFWDeJ3TNJXcUBQ6+ss/w==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:01 2025 by rpki-client