Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/695f9294-36de-4a6b-bb70-b1d67c35944e.roa
File: 695f9294-36de-4a6b-bb70-b1d67c35944e.roa (raw, json)
Hash identifier: Oz4Rf6WaSnuP65CCp4Cy5JgVGyYGYgOU28Y5Xx16VJw=
Subject key identifier: 38:A2:4B:EB:33:49:83:32:E3:A7:10:93:D4:08:8E:81:98:23:12:9E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 55B00B15BE5D05C4CCEE31CA004D717DB68BA09D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/695f9294-36de-4a6b-bb70-b1d67c35944e.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f17:4000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:b0:0b:15:be:5d:05:c4:cc:ee:31:ca:00:4d:71:7d:b6:8b:a0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:83:f7:6a:b4:df:45:24:74:37:72:d7:b5:77:
cd:8a:d8:61:f1:b0:84:01:de:0d:80:9f:f9:7c:3f:
e6:7e:de:3d:42:f7:b0:64:a6:47:fe:a2:e7:6f:14:
86:84:32:60:cd:00:32:4a:34:ca:4d:32:c2:fe:62:
67:3c:85:e4:19:58:5a:00:02:78:18:90:4d:9a:3c:
3d:88:94:81:bb:e1:66:28:8b:72:c4:a3:93:b2:a0:
f6:6e:9c:4d:c6:90:21:f9:36:f3:81:7b:3d:12:53:
ef:6e:9e:4b:14:9a:b4:0c:36:ae:f0:6d:72:15:b5:
c5:cd:5f:1a:a8:4f:dc:73:1e:e2:7f:c9:c0:b7:7e:
e3:10:4c:01:2f:92:7f:15:c3:9d:5f:d7:a6:6f:a5:
a3:43:91:b4:9c:e8:7b:fe:38:30:b9:5e:37:16:9b:
3c:6a:5b:4e:01:17:03:7d:af:87:eb:42:fd:39:e9:
ae:a4:9a:1d:ca:37:c4:b8:02:a8:23:32:48:3d:26:
80:aa:62:21:fd:c5:72:a9:00:53:7a:4e:f4:d9:8b:
d2:d3:51:2f:7c:40:1a:03:5d:e9:22:9d:dc:f9:a7:
76:ea:1a:a8:f6:27:4b:3a:da:6a:85:c4:ae:38:2a:
a7:4e:4e:d4:7b:ab:6b:6e:e9:0b:9c:91:9c:f9:ff:
3e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A2:4B:EB:33:49:83:32:E3:A7:10:93:D4:08:8E:81:98:23:12:9E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/695f9294-36de-4a6b-bb70-b1d67c35944e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f17:4000::/36
Signature Algorithm: sha256WithRSAEncryption
ae:ef:eb:3e:4d:a7:01:6c:44:51:9c:f5:af:c3:cf:4b:32:d7:
e2:42:e4:e6:d4:f3:55:48:d5:90:d5:4e:c8:f1:41:37:eb:75:
5b:19:3d:83:70:68:20:21:d2:fd:03:42:c2:9a:82:66:ce:27:
3d:0c:74:c2:42:26:87:bd:22:00:62:94:6a:47:a2:55:4f:92:
ba:ae:4f:b7:de:42:e2:7a:7f:88:0b:0a:31:28:24:26:e0:f7:
b8:fe:11:ab:a0:7f:a9:3b:d1:6d:3f:bc:12:6c:bc:5b:8d:10:
fa:8f:4f:f2:d4:7b:ce:6d:12:61:1d:84:79:0f:30:ec:e3:d8:
c8:1a:f6:fb:52:af:6b:c8:80:79:24:07:f1:a9:92:4c:cc:3a:
1c:99:d3:5f:20:b3:4c:7c:42:62:74:1d:1d:ab:84:c6:84:56:
8f:e0:9e:88:9f:2e:61:fc:10:b7:69:60:fa:84:20:40:e8:25:
e4:17:64:96:ef:e9:a9:56:4d:8a:46:de:3d:be:8b:52:43:80:
9c:fd:42:fd:14:2b:ce:37:db:34:45:57:2e:11:fb:58:ce:0a:
54:38:f6:8e:81:09:a8:ef:2a:81:d6:db:63:da:56:e6:46:44:
db:73:c8:93:ce:ce:50:e5:15:3f:fe:02:31:a5:20:ae:08:60:
01:69:d2:00
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUVbALFb5dBcTM7jHKAE1xfbaLoJ0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjI3MDAwMDAwWhcNMjUwMTMxMjM1OTU5
WjB6MUkwRwYDVQQFE0BkMTU2ZjhhNTdlNmYzNDg5NTE3ZTliYmZmMjU4NGJjYmNi
OWNhN2EwODllYmQyNDQ5MjAyZmViOGY2ZjMwNzIxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDcg/dqtN9FJHQ3cte1d82K2GHxsIQB3g2An/l8P+Z+3j1C
97Bkpkf+oudvFIaEMmDNADJKNMpNMsL+Ymc8heQZWFoAAngYkE2aPD2IlIG74WYo
i3LEo5OyoPZunE3GkCH5NvOBez0SU+9unksUmrQMNq7wbXIVtcXNXxqoT9xzHuJ/
ycC3fuMQTAEvkn8Vw51f16ZvpaNDkbSc6Hv+ODC5XjcWmzxqW04BFwN9r4frQv05
6a6kmh3KN8S4AqgjMkg9JoCqYiH9xXKpAFN6TvTZi9LTUS98QBoDXekindz5p3bq
Gqj2J0s62mqFxK44KqdOTtR7q2tu6QuckZz5/z5dAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUOKJL6zNJgzLjpxCT1AiOgZgjEp4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzY5NWY5Mjk0LTM2ZGUtNGE2Yi1iYjcwLWIxZDY3YzM1OTQ0ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8XQDANBgkqhkiG9w0BAQsFAAOCAQEAru/rPk2nAWxEUZz1r8PPSzLX
4kLk5tTzVUjVkNVOyPFBN+t1Wxk9g3BoICHS/QNCwpqCZs4nPQx0wkImh70iAGKU
akeiVU+Suq5Pt95C4np/iAsKMSgkJuD3uP4Rq6B/qTvRbT+8Emy8W40Q+o9P8tR7
zm0SYR2EeQ8w7OPYyBr2+1Kva8iAeSQH8amSTMw6HJnTXyCzTHxCYnQdHauExoRW
j+CeiJ8uYfwQt2lg+oQgQOgl5Bdklu/pqVZNikbePb6LUkOAnP1C/RQrzjfbNEVX
LhH7WM4KVDj2joEJqO8qgdbbY9pW5kZE23PIk87OUOUVP/4CMaUgrghgAWnSAA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:20 2025 by rpki-client