Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2df11f0-6dc2-4920-aaee-958d145d2cf2.roa
File: a2df11f0-6dc2-4920-aaee-958d145d2cf2.roa (raw, json)
Hash identifier: ut56QPQG2mmChZzXz7YTc7LUiPSi9xJwufiuoUvHoUE=
Subject key identifier: ED:F8:0E:76:2E:81:21:BC:B6:E7:4F:4B:A0:98:89:14:F6:5D:34:70
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 34FCDD097DAAAB63479CE216AD932D9780DC1ED2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2df11f0-6dc2-4920-aaee-958d145d2cf2.roa
Signing time: Tue 24 Dec 2024 00:00:00 +0000
ROA not before: Tue 24 Dec 2024 00:00:00 +0000
ROA not after: Tue 28 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1ff2:5000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:fc:dd:09:7d:aa:ab:63:47:9c:e2:16:ad:93:2d:97:80:dc:1e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 24 00:00:00 2024 GMT
Not After : Jan 28 23:59:59 2025 GMT
Subject: serialNumber=91281c400f85006d1ca81dfeab72c17a861559502d6f0f0fafb0e5bcf1104d12, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:18:68:90:22:81:60:b9:15:1f:4f:73:68:14:
a7:d1:d5:8b:6c:cf:71:cf:0d:a7:31:59:06:6f:fa:
96:2d:1f:4f:47:f0:a9:53:3f:66:eb:e9:a6:a5:b3:
7e:3a:7c:70:c2:ff:42:fd:69:53:78:8b:43:21:d1:
a5:7c:3d:aa:84:71:47:32:e9:e9:32:18:35:01:10:
d2:a0:ff:7a:82:17:66:b4:d1:af:5e:a7:b2:ab:49:
cb:78:b0:66:23:cf:17:72:12:a1:62:ae:78:0f:2d:
42:fb:1e:8a:e0:18:85:8f:b6:d0:6d:0c:73:36:97:
d2:d8:af:c7:14:8b:57:a5:ce:4c:af:15:2f:63:63:
c3:b6:50:15:a8:80:27:82:d8:b7:ae:53:5f:9a:f6:
e3:04:55:cb:07:a9:cc:a6:46:46:ca:e6:c3:03:b4:
b7:0a:86:82:36:6c:f1:e1:7a:82:2d:f9:6b:f7:e0:
3f:fd:f2:3a:e2:77:e0:85:78:3e:a4:b7:6c:cb:bc:
81:c4:f9:58:d6:0f:53:e1:95:41:a3:1a:e1:82:a7:
1b:b7:0e:28:60:eb:53:8a:8a:78:40:94:43:72:a9:
04:4a:1e:97:42:42:02:8f:5d:ad:d8:28:5f:40:07:
cf:fb:a0:a1:02:ee:40:04:84:f7:b3:78:9a:75:45:
11:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F8:0E:76:2E:81:21:BC:B6:E7:4F:4B:A0:98:89:14:F6:5D:34:70
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2df11f0-6dc2-4920-aaee-958d145d2cf2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff2:5000::/40
Signature Algorithm: sha256WithRSAEncryption
88:3c:8b:60:8a:84:f6:59:b1:30:f2:9d:af:0e:2a:48:31:1d:
11:49:1f:69:0b:00:27:ac:2b:aa:dd:ef:4a:e7:b4:85:70:ce:
1d:3f:b9:33:a3:90:3f:59:2e:b1:9b:5a:54:d7:ec:a4:e8:c0:
72:8e:57:96:e7:b5:24:75:fd:9f:b1:ed:34:ba:81:0f:5c:ef:
a7:d0:4f:4e:69:da:ef:e1:c8:91:00:b1:62:a6:a4:c5:45:cf:
24:4f:1e:c7:6f:92:89:65:db:3c:bb:9f:5c:88:14:36:76:bf:
ab:c2:d0:cb:dd:8b:e7:8b:c5:71:19:30:67:b4:d8:bf:aa:55:
60:7d:f8:44:f1:37:6d:0a:a7:10:7b:b0:ad:e6:e8:ed:71:fc:
9b:88:98:11:c6:7b:d8:78:6c:3d:31:58:88:06:a5:d9:0e:f0:
e7:cd:cf:8e:f2:41:83:1d:2b:c3:3c:1a:9f:0f:62:29:e4:ac:
fb:e4:b4:be:ab:e0:02:c5:94:aa:ed:f8:1f:5e:e6:28:50:4e:
a6:1d:db:8e:d4:b8:78:21:0a:85:4a:24:27:7b:e5:88:33:aa:
3f:25:f9:38:0c:c8:a5:f2:80:91:12:e5:58:ee:f1:f5:36:7e:
cb:4d:4d:b0:0d:23:fe:e4:d8:ad:0a:89:e6:4c:f7:39:74:23:
d0:ac:7c:52
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUNPzdCX2qq2NHnOIWrZMtl4DcHtIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjI0MDAwMDAwWhcNMjUwMTI4MjM1OTU5
WjB6MUkwRwYDVQQFE0A5MTI4MWM0MDBmODUwMDZkMWNhODFkZmVhYjcyYzE3YTg2
MTU1OTUwMmQ2ZjBmMGZhZmIwZTViY2YxMTA0ZDEyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCtGGiQIoFguRUfT3NoFKfR1Ytsz3HPDacxWQZv+pYtH09H
8KlTP2br6aals346fHDC/0L9aVN4i0Mh0aV8PaqEcUcy6ekyGDUBENKg/3qCF2a0
0a9ep7KrSct4sGYjzxdyEqFirngPLUL7HorgGIWPttBtDHM2l9LYr8cUi1elzkyv
FS9jY8O2UBWogCeC2LeuU1+a9uMEVcsHqcymRkbK5sMDtLcKhoI2bPHheoIt+Wv3
4D/98jrid+CFeD6kt2zLvIHE+VjWD1PhlUGjGuGCpxu3Dihg61OKinhAlENyqQRK
HpdCQgKPXa3YKF9AB8/7oKEC7kAEhPezeJp1RRG/AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU7fgOdi6BIby2509LoJiJFPZdNHAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2EyZGYxMWYwLTZkYzItNDkyMC1hYWVlLTk1OGQxNDVkMmNmMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/yUDANBgkqhkiG9w0BAQsFAAOCAQEAiDyLYIqE9lmxMPKdrw4qSDEd
EUkfaQsAJ6wrqt3vSue0hXDOHT+5M6OQP1kusZtaVNfspOjAco5Xlue1JHX9n7Ht
NLqBD1zvp9BPTmna7+HIkQCxYqakxUXPJE8ex2+SiWXbPLufXIgUNna/q8LQy92L
54vFcRkwZ7TYv6pVYH34RPE3bQqnEHuwrebo7XH8m4iYEcZ72HhsPTFYiAal2Q7w
583PjvJBgx0rwzwanw9iKeSs++S0vqvgAsWUqu34H17mKFBOph3bjtS4eCEKhUok
J3vliDOqPyX5OAzIpfKAkRLlWO7x9TZ+y01NsA0j/uTYrQqJ5kz3OXQj0Kx8Ug==
-----END CERTIFICATE-----
Generated at Wed Apr 16 16:39:59 2025 by rpki-client