Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86dea2f6-9cc6-4bd8-b1c0-cdd2b60ecf01.roa
File: 86dea2f6-9cc6-4bd8-b1c0-cdd2b60ecf01.roa (raw, json)
Hash identifier: hCwjzx0tTAJ7LfdKEM4R/3OXBgXfsnOAEz297rS0fvA=
Subject key identifier: 2A:5B:31:95:BB:EC:5B:69:4C:48:BD:5B:42:C1:BF:3B:91:21:20:DA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 58187594F5E17DB95AED3E43671E848308B3914B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86dea2f6-9cc6-4bd8-b1c0-cdd2b60ecf01.roa
Signing time: Thu 02 Jan 2025 00:00:00 +0000
ROA not before: Thu 02 Jan 2025 00:00:00 +0000
ROA not after: Thu 06 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 24.110.0.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:18:75:94:f5:e1:7d:b9:5a:ed:3e:43:67:1e:84:83:08:b3:91:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 2 00:00:00 2025 GMT
Not After : Feb 6 23:59:59 2025 GMT
Subject: serialNumber=42a1ecada8dbb31a23cde560c394a2070466b948db841226f078f9472063f38f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:30:84:39:ec:47:7a:b3:6f:b2:8f:73:c2:4b:
eb:eb:86:17:65:f9:c7:11:ca:0a:94:16:9a:37:ec:
fb:31:37:54:ab:4a:e0:1b:26:58:b8:da:96:66:7e:
c9:e9:36:7f:68:b4:09:a9:73:4a:0a:27:f0:4a:be:
8a:b4:35:7d:14:41:9e:63:85:dc:8a:f1:2e:53:2d:
1d:a2:6a:14:2a:68:29:41:3b:1d:27:3d:3f:df:b4:
15:2c:d5:bb:e3:62:49:b5:d2:f5:da:fc:68:ee:c5:
fc:c0:9b:28:dd:e6:ab:68:df:d4:a0:15:87:03:76:
b4:55:a7:7d:2c:8a:09:29:8c:95:e7:11:81:47:f3:
30:07:0e:22:49:f7:f1:4e:43:3e:31:72:f6:81:9c:
91:1d:1e:7b:aa:9e:92:2f:b6:61:b2:b9:95:cf:17:
28:a9:40:e4:d7:4d:df:a7:a3:d3:7d:03:39:3d:04:
8f:d2:80:ed:1f:b8:31:14:5a:93:a2:71:41:eb:3f:
31:b7:f9:23:d5:ff:b7:ed:f7:53:eb:22:83:16:06:
cb:64:5c:13:85:b5:37:7a:32:8d:df:ed:bd:48:b7:
8c:f9:c9:16:43:47:05:c8:fb:cb:11:0f:36:b6:4f:
66:9a:b1:0d:88:ba:13:a2:28:f8:37:ad:37:b9:f6:
59:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5B:31:95:BB:EC:5B:69:4C:48:BD:5B:42:C1:BF:3B:91:21:20:DA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86dea2f6-9cc6-4bd8-b1c0-cdd2b60ecf01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.110.0.0/21
Signature Algorithm: sha256WithRSAEncryption
13:fe:49:57:af:f7:32:d2:f2:d4:7b:67:ca:79:d1:47:24:ca:
0a:b5:fd:cf:8f:44:9d:ae:8e:a1:d5:5c:e7:db:78:eb:69:b9:
f5:03:2a:4b:42:96:93:5a:fb:62:c1:d1:bf:18:a0:dd:5d:dc:
97:cd:dc:8f:ed:64:29:00:ae:ea:79:b9:2d:38:1a:5b:a1:91:
75:78:0e:e8:28:4d:40:f4:5b:8c:80:45:38:44:bf:10:fc:31:
32:c7:8a:52:b2:50:f8:c3:9a:f0:46:3f:e9:83:37:6b:94:1b:
b4:12:1b:9a:d5:cd:9a:f8:46:31:c6:d8:60:9a:0b:1c:30:0f:
e2:83:5f:4b:b1:b8:49:9b:31:2b:ca:a5:81:63:38:70:78:49:
8c:cf:66:7c:35:91:55:5b:e5:e9:b4:a4:5a:c2:b9:fe:0f:50:
fc:7e:28:4e:18:09:87:f7:9c:3e:6c:09:16:46:f0:bb:ca:a8:
d8:8e:f5:c5:5d:af:fe:a6:67:14:dc:cd:58:a3:94:bc:dc:0b:
8a:a5:fb:33:28:72:1f:51:44:ab:8c:59:70:2d:bd:e9:05:2f:
35:70:88:37:02:24:06:56:1e:bc:29:ff:91:dc:7b:a4:e8:63:
9e:fa:f0:ff:71:40:9d:11:ce:cb:ee:89:11:21:be:c0:9e:88:
fd:2f:32:5f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWBh1lPXhfbla7T5DZx6EgwizkUswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTAyMDAwMDAwWhcNMjUwMjA2MjM1OTU5
WjB6MUkwRwYDVQQFE0A0MmExZWNhZGE4ZGJiMzFhMjNjZGU1NjBjMzk0YTIwNzA0
NjZiOTQ4ZGI4NDEyMjZmMDc4Zjk0NzIwNjNmMzhmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDMMIQ57Ed6s2+yj3PCS+vrhhdl+ccRygqUFpo37PsxN1Sr
SuAbJli42pZmfsnpNn9otAmpc0oKJ/BKvoq0NX0UQZ5jhdyK8S5TLR2iahQqaClB
Ox0nPT/ftBUs1bvjYkm10vXa/GjuxfzAmyjd5qto39SgFYcDdrRVp30sigkpjJXn
EYFH8zAHDiJJ9/FOQz4xcvaBnJEdHnuqnpIvtmGyuZXPFyipQOTXTd+no9N9Azk9
BI/SgO0fuDEUWpOicUHrPzG3+SPV/7ft91PrIoMWBstkXBOFtTd6Mo3f7b1It4z5
yRZDRwXI+8sRDza2T2aasQ2IuhOiKPg3rTe59lnnAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUKlsxlbvsW2lMSL1bQsG/O5EhINowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzg2ZGVhMmY2LTljYzYtNGJkOC1iMWMwLWNkZDJiNjBlY2YwMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMYbgAwDQYJKoZIhvcNAQELBQADggEBABP+SVev9zLS8tR7Z8p50Uckygq1
/c+PRJ2ujqHVXOfbeOtpufUDKktClpNa+2LB0b8YoN1d3JfN3I/tZCkArup5uS04
GluhkXV4DugoTUD0W4yARThEvxD8MTLHilKyUPjDmvBGP+mDN2uUG7QSG5rVzZr4
RjHG2GCaCxwwD+KDX0uxuEmbMSvKpYFjOHB4SYzPZnw1kVVb5em0pFrCuf4PUPx+
KE4YCYf3nD5sCRZG8LvKqNiO9cVdr/6mZxTczVijlLzcC4ql+zMoch9RRKuMWXAt
vekFLzVwiDcCJAZWHrwp/5Hce6ToY5768P9xQJ0RzsvuiREhvsCeiP0vMl8=
-----END CERTIFICATE-----
Generated at Wed Apr 16 16:54:35 2025 by rpki-client