Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ca5c676-955f-4cdc-af1d-78346b35c8bd.roa
File: 7ca5c676-955f-4cdc-af1d-78346b35c8bd.roa (raw, json)
Hash identifier: Ks+ZjvDuyZZLYOs4KGm/18rt2F8DdmTONmQ3U6CwVRA=
Subject key identifier: CE:DF:45:B7:AA:23:2F:B5:2D:10:0C:B6:66:1E:71:B6:87:DF:2D:FC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 038AC82167E38CC5B7B9AE41D8F5D8E67B3950D7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ca5c676-955f-4cdc-af1d-78346b35c8bd.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 54.25.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:8a:c8:21:67:e3:8c:c5:b7:b9:ae:41:d8:f5:d8:e6:7b:39:50:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: serialNumber=49f6e6eab89e88afbfab8a41ce1d8e18b94f89f324671c4b8b98786ad3393ed8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:db:1d:32:1e:7a:b3:b7:4f:23:c3:c8:41:94:
ba:09:c3:ca:83:14:07:15:05:57:b9:d7:08:22:ea:
49:9d:51:06:8d:ea:10:0b:19:45:aa:ed:50:a8:58:
d7:0f:a7:22:e4:e5:f8:17:c7:79:10:8d:32:1d:40:
d3:92:9d:e4:76:f9:85:3d:e3:32:3f:de:43:e6:8c:
43:4a:6d:3c:cb:f6:bf:5f:d5:47:eb:1f:d9:ab:01:
df:8e:c3:f6:1d:80:6c:c7:e7:10:cb:45:e1:de:fe:
68:77:c1:af:25:1b:75:f8:42:3f:2e:05:c6:9c:ca:
42:9d:2a:30:85:96:4b:e8:6b:b3:e8:8a:26:2f:04:
c1:98:26:49:a3:7d:45:f1:22:8a:82:bd:d8:46:e5:
31:42:03:25:49:e6:08:6e:0b:d8:f0:9d:84:0d:f6:
28:6e:6e:a0:92:79:c4:95:2a:a9:7a:09:02:ef:af:
16:df:24:3a:f7:11:c9:90:ae:9e:a7:78:ea:78:9d:
a7:ad:21:8e:fc:d4:8d:6f:2b:c4:fe:68:52:19:c1:
31:7e:ca:a1:97:66:f4:62:00:5f:35:60:ca:01:83:
5f:49:56:8b:22:4e:22:cf:5f:e6:d7:f5:4f:49:2c:
da:77:34:c0:37:39:45:9c:e5:ab:d6:ff:17:e8:ff:
7a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DF:45:B7:AA:23:2F:B5:2D:10:0C:B6:66:1E:71:B6:87:DF:2D:FC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ca5c676-955f-4cdc-af1d-78346b35c8bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.25.68.0/24
Signature Algorithm: sha256WithRSAEncryption
00:b5:c5:51:8f:32:e8:e7:f3:fa:ea:1a:91:c8:f7:cb:65:c3:
33:d1:1c:ab:93:3c:5d:cb:4d:35:ae:d5:3a:00:7c:02:8a:e0:
4e:e0:cb:ab:3b:cc:60:a7:f6:05:cd:04:17:44:30:43:ce:e2:
54:fd:7e:7d:76:82:f3:42:66:3e:c8:5f:fc:6c:90:09:2d:9b:
84:75:d6:bd:1e:16:24:4a:77:ec:e1:89:36:6f:1f:c6:8b:f1:
81:b7:08:73:92:71:a6:f8:52:a0:7a:49:2c:12:88:b8:dc:64:
76:f2:42:6a:d4:9d:d3:9e:c2:38:21:5e:1b:47:5d:9b:78:2d:
c1:d4:76:da:c0:3c:2c:dc:57:cf:42:18:d2:ee:ad:6b:17:42:
f8:c2:1c:68:5d:af:03:ae:0a:0a:1f:7d:d9:b2:d4:a6:86:b1:
63:e4:a0:9f:bf:2d:d5:28:f1:ea:d4:d7:aa:6a:d9:a5:a3:cf:
9a:8d:a5:b5:1b:39:fb:b2:5e:36:dc:36:ee:18:02:e6:7c:e0:
70:d4:51:2c:ec:de:db:b3:e6:b3:c8:1f:d7:e4:2f:4a:6e:7e:
95:6d:05:8f:1a:44:20:75:d0:2a:c7:c3:22:4d:c0:4d:06:16:
93:60:59:1d:a9:55:12:1b:5a:6a:b0:bd:67:aa:fb:19:11:4d:
e0:9c:26:85
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUA4rIIWfjjMW3ua5B2PXY5ns5UNcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTEwMDAwMDAwWhcNMjUwMjE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A0OWY2ZTZlYWI4OWU4OGFmYmZhYjhhNDFjZTFkOGUxOGI5
NGY4OWYzMjQ2NzFjNGI4Yjk4Nzg2YWQzMzkzZWQ4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDC2x0yHnqzt08jw8hBlLoJw8qDFAcVBVe51wgi6kmdUQaN
6hALGUWq7VCoWNcPpyLk5fgXx3kQjTIdQNOSneR2+YU94zI/3kPmjENKbTzL9r9f
1UfrH9mrAd+Ow/YdgGzH5xDLReHe/mh3wa8lG3X4Qj8uBcacykKdKjCFlkvoa7Po
iiYvBMGYJkmjfUXxIoqCvdhG5TFCAyVJ5ghuC9jwnYQN9ihubqCSecSVKql6CQLv
rxbfJDr3EcmQrp6neOp4naetIY781I1vK8T+aFIZwTF+yqGXZvRiAF81YMoBg19J
VosiTiLPX+bX9U9JLNp3NMA3OUWc5avW/xfo/3rxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUzt9Ft6ojL7UtEAy2Zh5xtoffLfwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdjYTVjNjc2LTk1NWYtNGNkYy1hZjFkLTc4MzQ2YjM1YzhiZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA2GUQwDQYJKoZIhvcNAQELBQADggEBAAC1xVGPMujn8/rqGpHI98tlwzPR
HKuTPF3LTTWu1ToAfAKK4E7gy6s7zGCn9gXNBBdEMEPO4lT9fn12gvNCZj7IX/xs
kAktm4R11r0eFiRKd+zhiTZvH8aL8YG3CHOScab4UqB6SSwSiLjcZHbyQmrUndOe
wjghXhtHXZt4LcHUdtrAPCzcV89CGNLurWsXQvjCHGhdrwOuCgoffdmy1KaGsWPk
oJ+/LdUo8erU16pq2aWjz5qNpbUbOfuyXjbcNu4YAuZ84HDUUSzs3tuz5rPIH9fk
L0pufpVtBY8aRCB10CrHwyJNwE0GFpNgWR2pVRIbWmqwvWeq+xkRTeCcJoU=
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:36:44 2025 by rpki-client