Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/790ece99-b2c6-4c63-b076-ad6f5cfc7dff.roa
File: 790ece99-b2c6-4c63-b076-ad6f5cfc7dff.roa (raw, json)
Hash identifier: g800ZwFkJxolAbek5dEXLerATBmoihduziLEBI0Yp5o=
Subject key identifier: 1B:54:49:2A:41:D1:54:21:F4:AF:40:E0:6C:5A:15:0B:68:FB:67:B9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 15FA1F6236E2F7D5CE488CBC71978BD3C1D13CB4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/790ece99-b2c6-4c63-b076-ad6f5cfc7dff.roa
Signing time: Tue 24 Dec 2024 00:00:00 +0000
ROA not before: Tue 24 Dec 2024 00:00:00 +0000
ROA not after: Tue 28 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 45.72.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:fa:1f:62:36:e2:f7:d5:ce:48:8c:bc:71:97:8b:d3:c1:d1:3c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 24 00:00:00 2024 GMT
Not After : Jan 28 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:12:39:1b:50:ed:44:1e:30:c7:5f:07:41:4a:
b0:d7:22:5d:c5:91:55:03:f7:9c:6a:0e:de:d6:f8:
24:21:84:56:a9:b9:28:b6:c8:c4:bf:3a:58:77:67:
b2:ab:5d:c3:d6:04:b9:c1:ff:7d:81:71:42:33:a4:
7f:19:79:51:fa:1d:ec:33:a9:46:f6:d7:c6:89:4c:
b4:47:8a:2a:d2:2f:e7:3b:c2:b4:9b:02:41:13:59:
2e:cb:df:f8:3a:0a:28:ed:a2:9f:80:a6:9f:39:5c:
16:99:12:17:9c:f0:bb:9a:2d:38:2d:01:cd:82:75:
a9:de:f2:a5:d8:66:48:48:5b:78:43:dc:6d:02:40:
7c:f7:52:ab:17:3c:61:8d:e7:bc:72:b1:67:4b:21:
8c:00:e9:2b:a5:ef:03:6b:fb:a8:83:be:8d:d0:0c:
4b:96:f0:59:0a:79:dc:a7:32:0a:fb:bd:af:69:14:
20:40:e9:70:27:9d:22:78:8b:42:60:5d:4d:f2:25:
79:f9:41:1d:0c:a9:bb:6c:95:c0:32:34:7c:19:11:
7f:e6:22:9b:cc:7c:ba:d2:dc:82:7b:c1:b9:92:1b:
aa:ba:8c:4c:15:9a:7d:f8:b1:94:6c:91:cd:1f:33:
1a:76:6d:b1:5d:48:e6:9b:3c:32:ed:0c:c9:8c:23:
69:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:54:49:2A:41:D1:54:21:F4:AF:40:E0:6C:5A:15:0B:68:FB:67:B9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/790ece99-b2c6-4c63-b076-ad6f5cfc7dff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.72.0.0/17
Signature Algorithm: sha256WithRSAEncryption
3a:03:9e:8c:c1:d7:98:fc:78:86:21:21:dc:ba:68:e0:be:7b:
04:05:2f:1c:a0:98:e7:c0:a4:9a:46:bf:8d:66:a4:8b:c5:2e:
89:ce:2e:59:0b:d4:47:d7:71:3d:04:79:dc:db:38:a4:7b:82:
cb:57:47:0d:74:25:87:11:be:91:09:91:67:3d:ae:3f:c0:4c:
bc:de:56:85:7d:6b:64:a6:5a:18:a8:6f:a9:63:bd:1a:25:5b:
b0:19:9d:19:94:5d:eb:5b:0f:c9:3f:48:0e:2c:ef:2f:be:c9:
5e:63:08:3e:1e:fa:ad:6a:08:d0:30:81:1c:be:72:1d:7c:19:
eb:e9:47:40:3d:73:77:94:ff:48:52:af:8f:8d:7b:b3:ed:c4:
de:be:eb:21:a4:c9:9d:d2:60:f3:ae:30:93:4c:28:c1:8e:fb:
52:79:34:09:33:32:5d:56:65:a1:ce:e9:62:ef:3c:6f:9a:8f:
54:ac:a7:16:98:fa:0b:a0:aa:03:d6:1a:7e:9d:64:23:fa:e6:
7e:42:2f:7c:f3:7a:72:d6:35:7c:90:18:ea:aa:97:db:1c:cd:
2f:00:e9:3d:dd:bf:7c:f7:58:3b:b9:b6:65:a2:e6:7e:a0:4a:
c6:3b:aa:42:4f:be:79:3d:00:df:09:8f:31:4a:f5:2b:05:1f:
19:f4:76:ac
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFfofYjbi99XOSIy8cZeL08HRPLQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjI0MDAwMDAwWhcNMjUwMTI4MjM1OTU5
WjB6MUkwRwYDVQQFE0A2Yzg5MGNiZTM5NDYyNWNjZTA2YTI3YzNhNDc4MGZmZjMx
MjFmZWJkZGQyOTc1ODVjZDc1YTg3NDQzMDkyMWQyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCeEjkbUO1EHjDHXwdBSrDXIl3FkVUD95xqDt7W+CQhhFap
uSi2yMS/Olh3Z7KrXcPWBLnB/32BcUIzpH8ZeVH6HewzqUb218aJTLRHiirSL+c7
wrSbAkETWS7L3/g6Cijtop+App85XBaZEhec8LuaLTgtAc2Cdane8qXYZkhIW3hD
3G0CQHz3UqsXPGGN57xysWdLIYwA6Sul7wNr+6iDvo3QDEuW8FkKedynMgr7va9p
FCBA6XAnnSJ4i0JgXU3yJXn5QR0MqbtslcAyNHwZEX/mIpvMfLrS3IJ7wbmSG6q6
jEwVmn34sZRskc0fMxp2bbFdSOabPDLtDMmMI2kZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUG1RJKkHRVCH0r0DgbFoVC2j7Z7kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzc5MGVjZTk5LWIyYzYtNGM2My1iMDc2LWFkNmY1Y2ZjN2RmZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBActSAAwDQYJKoZIhvcNAQELBQADggEBADoDnozB15j8eIYhIdy6aOC+ewQF
LxygmOfApJpGv41mpIvFLonOLlkL1EfXcT0EedzbOKR7gstXRw10JYcRvpEJkWc9
rj/ATLzeVoV9a2SmWhiob6ljvRolW7AZnRmUXetbD8k/SA4s7y++yV5jCD4e+q1q
CNAwgRy+ch18GevpR0A9c3eU/0hSr4+Ne7PtxN6+6yGkyZ3SYPOuMJNMKMGO+1J5
NAkzMl1WZaHO6WLvPG+aj1SspxaY+gugqgPWGn6dZCP65n5CL3zzenLWNXyQGOqq
l9sczS8A6T3dv3z3WDu5tmWi5n6gSsY7qkJPvnk9AN8JjzFK9SsFHxn0dqw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:12 2025 by rpki-client