Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63c2f632-5623-47e1-9419-10a4c2ea7936.roa
File: 63c2f632-5623-47e1-9419-10a4c2ea7936.roa (raw, json)
Hash identifier: BJfTIRXT3z07O1PuuBBQroZNRn1rSGfov3/h8t/f1ZE=
Subject key identifier: 3A:58:2F:4A:A8:23:E0:59:22:3B:18:D7:A9:38:DF:87:5B:2B:24:3D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 40257B0E23CB9B0DB33A3506A907E739DD676056
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63c2f632-5623-47e1-9419-10a4c2ea7936.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 209.114.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:25:7b:0e:23:cb:9b:0d:b3:3a:35:06:a9:07:e7:39:dd:67:60:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: serialNumber=3bb7774d0834b455ee467a4cb04d80c2248ec0b1d334555110f5f738b75f1f28, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:95:73:42:dc:e3:c1:ba:b5:cd:20:93:ea:ad:
be:f6:57:08:f4:4c:ce:d1:06:5c:02:14:1c:cf:89:
10:0d:10:cc:be:f2:2c:7c:73:4e:7e:56:11:34:83:
b1:17:07:1e:89:a6:ed:13:a2:34:65:3e:31:8e:68:
41:cb:17:c8:c1:5c:ae:75:15:cf:71:14:07:00:16:
a0:dc:fb:c7:f8:ce:51:73:39:03:6d:bf:9d:61:f9:
11:06:af:f8:3b:2a:0e:f9:ef:b6:2c:1d:f0:92:ab:
1f:ad:02:72:ef:db:bd:29:68:88:a8:31:94:0f:a8:
5d:25:86:fb:72:88:95:dc:66:9f:34:d0:36:a2:9d:
35:93:b1:0e:1c:c2:5b:f0:f5:bc:e5:25:6f:73:73:
05:fd:0f:e5:6d:3d:48:af:68:f0:be:7b:fe:b4:47:
a8:8f:94:95:63:b0:c0:9e:1a:45:8d:10:d2:2b:f7:
80:8e:a4:fe:d2:bc:e3:dc:e6:80:d9:b3:3f:3c:16:
05:41:b0:c4:5b:68:a9:c0:dc:51:51:30:f9:d6:5e:
8d:dd:6b:ca:42:f5:25:fa:6e:fb:f6:9d:9e:37:e0:
9c:10:2e:de:72:2f:02:e0:b5:ba:39:23:48:2c:28:
0d:e1:80:be:55:e7:17:a7:f2:26:2f:09:85:b9:fe:
14:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:58:2F:4A:A8:23:E0:59:22:3B:18:D7:A9:38:DF:87:5B:2B:24:3D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63c2f632-5623-47e1-9419-10a4c2ea7936.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.114.224.0/19
Signature Algorithm: sha256WithRSAEncryption
9a:4c:4e:08:1e:98:7c:b4:49:e0:46:f1:24:e0:db:e8:38:91:
f5:95:f5:2b:7f:29:c8:69:f1:b5:fc:31:c9:48:31:d9:97:72:
21:54:20:93:8f:8d:d9:b5:53:ac:a2:31:46:5b:4e:c3:f7:f9:
ff:58:48:61:24:63:05:39:5e:ce:0c:b3:8b:8d:14:1b:83:af:
2b:0d:a8:e4:6f:ae:c5:aa:7c:37:b0:df:03:b9:36:81:d8:51:
1e:ad:9a:d7:1f:7b:41:0b:ed:e3:50:0c:24:c9:03:d5:4e:44:
b8:5c:5f:40:10:19:80:a7:64:c1:a6:8d:cb:69:d8:7b:08:c4:
b4:d8:8b:be:67:e9:7d:4b:7f:d7:f2:e2:29:ff:29:89:55:ca:
67:15:e9:a7:0b:c4:65:7b:11:c0:84:d0:cf:5e:25:59:b9:2a:
d2:7f:56:8b:f9:c3:02:66:7b:e5:60:a7:3a:be:8d:fd:99:87:
c1:de:3c:e0:77:5d:ce:96:28:77:32:84:bd:cf:c4:f6:27:e8:
78:ab:73:5b:b9:a5:20:5d:2f:2c:04:77:22:df:d5:ac:3f:24:
55:1a:39:ff:32:7b:e9:9c:7e:53:93:fd:16:70:01:88:1d:5f:
0c:41:39:15:53:69:b9:cf:73:6a:25:45:1c:ec:4b:90:0b:14:
a5:7c:ca:9f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQCV7DiPLmw2zOjUGqQfnOd1nYFYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTAzMDAwMDAwWhcNMjUwMjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0AzYmI3Nzc0ZDA4MzRiNDU1ZWU0NjdhNGNiMDRkODBjMjI0
OGVjMGIxZDMzNDU1NTExMGY1ZjczOGI3NWYxZjI4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDulXNC3OPBurXNIJPqrb72Vwj0TM7RBlwCFBzPiRANEMy+
8ix8c05+VhE0g7EXBx6Jpu0TojRlPjGOaEHLF8jBXK51Fc9xFAcAFqDc+8f4zlFz
OQNtv51h+REGr/g7Kg7577YsHfCSqx+tAnLv270paIioMZQPqF0lhvtyiJXcZp80
0DainTWTsQ4cwlvw9bzlJW9zcwX9D+VtPUivaPC+e/60R6iPlJVjsMCeGkWNENIr
94COpP7SvOPc5oDZsz88FgVBsMRbaKnA3FFRMPnWXo3da8pC9SX6bvv2nZ434JwQ
Lt5yLwLgtbo5I0gsKA3hgL5V5xen8iYvCYW5/hTLAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUOlgvSqgj4FkiOxjXqTjfh1srJD0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzYzYzJmNjMyLTU2MjMtNDdlMS05NDE5LTEwYTRjMmVhNzkzNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXRcuAwDQYJKoZIhvcNAQELBQADggEBAJpMTggemHy0SeBG8STg2+g4kfWV
9St/Kchp8bX8MclIMdmXciFUIJOPjdm1U6yiMUZbTsP3+f9YSGEkYwU5Xs4Ms4uN
FBuDrysNqORvrsWqfDew3wO5NoHYUR6tmtcfe0EL7eNQDCTJA9VORLhcX0AQGYCn
ZMGmjctp2HsIxLTYi75n6X1Lf9fy4in/KYlVymcV6acLxGV7EcCE0M9eJVm5KtJ/
Vov5wwJme+Vgpzq+jf2Zh8HePOB3Xc6WKHcyhL3PxPYn6Hirc1u5pSBdLywEdyLf
1aw/JFUaOf8ye+mcflOT/RZwAYgdXwxBORVTabnPc2olRRzsS5ALFKV8yp8=
-----END CERTIFICATE-----
Generated at Wed Apr 16 17:18:01 2025 by rpki-client