Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53279578-4c1c-4574-8606-6f2febe02986.roa
File: 53279578-4c1c-4574-8606-6f2febe02986.roa (raw, json)
Hash identifier: Xy4o3mFzgnYMOKYwYjXGUkknM/LRYkc3xjhI0YA97uU=
Subject key identifier: 90:D3:02:D3:59:D9:F1:4F:2C:F6:33:1C:E3:6A:BD:45:0D:E4:44:35
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2320825B9FBF11688B868F27F6A36877EB561A4C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53279578-4c1c-4574-8606-6f2febe02986.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 56.9.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:20:82:5b:9f:bf:11:68:8b:86:8f:27:f6:a3:68:77:eb:56:1a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: serialNumber=ddf3291152da6e70e3f70bbd6d27afa4df7b08e81a605cb80d3cc8c970ffbfff, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:47:bd:55:65:bd:10:69:02:26:34:8b:09:bf:
d0:c7:ca:94:cd:9f:c0:5f:ad:44:83:31:25:55:14:
91:67:e2:18:ac:23:56:82:a5:ff:a3:a4:70:c7:80:
db:ab:42:10:47:b4:47:08:c2:44:7f:ba:de:08:23:
92:21:c1:10:b0:14:bd:45:49:0e:51:f6:af:c6:7c:
aa:4e:84:0a:1f:fa:df:e5:5e:e6:ad:50:28:18:32:
30:5b:23:43:09:89:0d:60:d4:16:64:e7:77:01:cb:
6b:78:c2:2e:fb:25:f7:7c:c4:1a:e4:1f:3d:f6:85:
0d:15:a4:a6:cf:00:4c:1b:c1:a7:80:90:9b:c5:2a:
96:c8:11:84:82:19:28:5c:e5:97:5d:3e:7f:45:6d:
51:e6:99:1d:3e:fe:55:21:21:8b:b3:3f:e6:c6:de:
89:06:8b:12:09:86:ad:58:41:37:3a:ff:79:b4:cc:
34:82:a0:40:11:c9:fa:8a:fa:c3:a1:74:44:75:70:
3b:02:77:08:fc:a0:69:db:11:ba:cb:85:64:70:8e:
b0:11:ee:fb:27:5b:d3:84:55:c0:d7:f2:d4:f6:cb:
e3:65:5a:89:c3:4f:78:cf:7d:18:ac:06:e5:b3:44:
ad:64:5a:8b:38:46:f6:36:49:ea:8a:86:87:c9:91:
4f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D3:02:D3:59:D9:F1:4F:2C:F6:33:1C:E3:6A:BD:45:0D:E4:44:35
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53279578-4c1c-4574-8606-6f2febe02986.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.9.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8f:cb:95:5c:2d:cb:fa:4d:2e:33:c3:5d:a9:e9:77:35:04:34:
d8:7b:5b:af:a2:96:58:65:2a:cf:2c:e1:2b:03:1a:cb:f5:90:
9e:7c:45:99:1f:66:68:5e:7a:ce:b7:4e:ac:0d:c5:14:86:99:
b6:0e:ca:d7:df:d0:9c:08:68:e3:a6:f0:7c:a8:fe:b5:67:23:
4c:24:66:ff:f3:3c:3b:0c:6d:bf:81:35:fd:71:e1:37:db:db:
b2:14:8c:eb:70:4d:80:88:65:e7:f4:29:d6:f3:fa:4d:3f:eb:
59:67:b3:44:1c:f9:6e:a8:0e:c8:f4:0e:05:ec:85:c1:8c:6d:
0f:59:92:7a:9c:b4:6f:c2:1a:e6:dd:06:06:33:b6:b2:c1:f0:
88:1c:64:4d:9f:b8:d7:2b:37:4c:57:fa:89:5f:8f:a7:e4:74:
1b:0c:18:5c:2a:2f:cc:2e:42:cf:99:ab:77:2b:12:22:55:1c:
11:78:db:df:cb:e3:28:f9:8e:8e:b3:36:2d:34:ee:89:96:13:
62:9c:14:ef:b1:fb:2f:59:70:12:ac:26:ca:4a:aa:dc:37:78:
9d:1e:8c:26:ee:a2:25:ff:8a:5b:45:90:d2:57:90:af:cd:86:
b0:82:c1:58:28:c0:17:b4:4d:ce:31:3b:88:60:7d:83:d7:e0:
35:57:79:f2
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUIyCCW5+/EWiLho8n9qNod+tWGkwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTA0MDAwMDAwWhcNMjUwMjA4MjM1OTU5
WjB6MUkwRwYDVQQFE0BkZGYzMjkxMTUyZGE2ZTcwZTNmNzBiYmQ2ZDI3YWZhNGRm
N2IwOGU4MWE2MDVjYjgwZDNjYzhjOTcwZmZiZmZmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDYR71VZb0QaQImNIsJv9DHypTNn8BfrUSDMSVVFJFn4his
I1aCpf+jpHDHgNurQhBHtEcIwkR/ut4II5IhwRCwFL1FSQ5R9q/GfKpOhAof+t/l
XuatUCgYMjBbI0MJiQ1g1BZk53cBy2t4wi77Jfd8xBrkHz32hQ0VpKbPAEwbwaeA
kJvFKpbIEYSCGShc5ZddPn9FbVHmmR0+/lUhIYuzP+bG3okGixIJhq1YQTc6/3m0
zDSCoEARyfqK+sOhdER1cDsCdwj8oGnbEbrLhWRwjrAR7vsnW9OEVcDX8tT2y+Nl
WonDT3jPfRisBuWzRK1kWos4RvY2SeqKhofJkU8tAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUkNMC01nZ8U8s9jMc42q9RQ3kRDUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzUzMjc5NTc4LTRjMWMtNDU3NC04NjA2LTZmMmZlYmUwMjk4Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4CTANBgkqhkiG9w0BAQsFAAOCAQEAj8uVXC3L+k0uM8Ndqel3NQQ02Htb
r6KWWGUqzyzhKwMay/WQnnxFmR9maF56zrdOrA3FFIaZtg7K19/QnAho46bwfKj+
tWcjTCRm//M8Owxtv4E1/XHhN9vbshSM63BNgIhl5/Qp1vP6TT/rWWezRBz5bqgO
yPQOBeyFwYxtD1mSepy0b8Ia5t0GBjO2ssHwiBxkTZ+41ys3TFf6iV+Pp+R0GwwY
XCovzC5Cz5mrdysSIlUcEXjb38vjKPmOjrM2LTTuiZYTYpwU77H7L1lwEqwmykqq
3Dd4nR6MJu6iJf+KW0WQ0leQr82GsILBWCjAF7RNzjE7iGB9g9fgNVd58g==
-----END CERTIFICATE-----
Generated at Wed Apr 16 17:17:42 2025 by rpki-client