Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac7af11f-6adc-4923-a012-1626247a9b5b.roa
File: ac7af11f-6adc-4923-a012-1626247a9b5b.roa (raw, json)
Hash identifier: kI4YaCKms3GZN+Cg3WPYdRxeAXGUq/fF+d4hqy88/J8=
Subject key identifier: A6:B1:6F:06:54:62:81:2C:E4:F3:6F:D9:B8:A1:19:5A:7C:86:2B:A3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6DC0D718BC8F03D3ED26887B22D43FED233921C6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac7af11f-6adc-4923-a012-1626247a9b5b.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 56.254.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:c0:d7:18:bc:8f:03:d3:ed:26:88:7b:22:d4:3f:ed:23:39:21:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:29:26:1d:d7:34:b5:d2:be:9a:81:8b:d6:55:
9a:aa:04:9c:9c:3b:00:b8:81:49:90:05:d0:a0:66:
d9:ee:36:88:17:20:8a:9c:98:2b:13:c3:de:17:28:
29:cb:15:a2:4c:5b:06:e8:6d:1a:8f:f0:e3:11:de:
0c:9c:a6:73:92:27:b9:d7:03:16:78:82:2e:99:72:
c4:95:9f:6a:c8:92:cf:de:2d:ad:08:33:bb:af:63:
47:92:71:35:6b:6e:7c:5e:82:9d:06:5f:45:60:34:
85:45:7b:5d:bd:75:35:bc:4b:2d:67:28:79:b0:60:
24:51:9a:43:14:9a:22:f5:0d:2a:2c:24:33:6e:0f:
b8:e1:3b:10:59:7c:71:6b:c3:19:98:81:b8:38:63:
a1:12:2f:66:81:99:f7:24:19:65:94:a5:f1:5b:ed:
68:fe:b9:5e:31:00:93:d2:24:a0:f2:38:60:9b:e9:
76:1c:1f:1c:7c:90:4b:98:64:12:5c:5c:b9:e3:db:
af:9d:e3:28:97:5d:3c:3a:15:cc:44:d1:b1:1d:bf:
57:96:ab:76:b4:23:b9:70:ee:73:d3:4b:b2:7e:3a:
04:98:7e:71:a6:07:8a:a0:61:9c:d6:fa:80:40:27:
84:13:4c:cf:dc:03:e7:d2:39:ed:f3:18:b6:4d:dc:
17:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B1:6F:06:54:62:81:2C:E4:F3:6F:D9:B8:A1:19:5A:7C:86:2B:A3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac7af11f-6adc-4923-a012-1626247a9b5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.254.0.0/16
Signature Algorithm: sha256WithRSAEncryption
88:c5:6d:22:fd:c8:ca:5c:4a:8d:6f:4d:03:75:29:08:b0:45:
c4:75:03:ea:54:3f:9a:77:9e:5a:f8:ce:4a:99:6a:0d:95:db:
fc:a3:a6:32:ec:2b:b4:dd:15:d1:a5:c3:4f:66:11:9a:2a:65:
45:14:41:79:42:9d:bd:fa:02:86:09:1a:ac:ea:8a:e4:fd:e3:
1b:1a:c6:dd:83:28:c4:94:ce:1f:09:62:64:e8:20:d4:a1:51:
21:58:b0:f1:6a:f9:ec:12:0b:fe:c6:42:80:eb:fb:e9:89:7b:
91:1b:97:6a:2b:dc:ae:71:3a:bf:fe:3f:15:bf:e4:f2:79:19:
7c:7d:3d:8f:7a:35:69:27:f3:0a:a4:6c:1c:b6:43:64:45:5d:
6d:37:bf:e2:3d:94:cb:c3:84:9e:43:2e:ca:c0:37:80:c5:ea:
1e:c9:00:99:d6:a6:a8:58:77:cf:d4:db:4a:fd:aa:e3:cc:51:
65:9b:fc:73:6a:50:6b:8d:06:de:ff:8a:44:b4:46:23:7f:5d:
d3:a5:42:e9:a8:9e:c2:ca:29:19:fa:99:f4:54:52:1d:0e:af:
6a:34:52:5a:77:fb:d7:f5:9c:c6:6e:91:7a:67:dd:ba:eb:24:
1e:f7:40:c7:b8:77:05:6a:d3:63:0e:fc:81:a2:f8:73:95:13:
b8:56:75:b1
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUbcDXGLyPA9PtJoh7ItQ/7SM5IcYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjI3MDAwMDAwWhcNMjUwMTMxMjM1OTU5
WjB6MUkwRwYDVQQFE0BlOGRiYzcyYjM4OGZjNzkyYjU1OTVkNTNmNTZhMmUwM2E5
ZDEwNGRjMWU3NDIzYWNmNDZkNGY1NTgyMjEzZjU4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCkKSYd1zS10r6agYvWVZqqBJycOwC4gUmQBdCgZtnuNogX
IIqcmCsTw94XKCnLFaJMWwbobRqP8OMR3gycpnOSJ7nXAxZ4gi6ZcsSVn2rIks/e
La0IM7uvY0eScTVrbnxegp0GX0VgNIVFe129dTW8Sy1nKHmwYCRRmkMUmiL1DSos
JDNuD7jhOxBZfHFrwxmYgbg4Y6ESL2aBmfckGWWUpfFb7Wj+uV4xAJPSJKDyOGCb
6XYcHxx8kEuYZBJcXLnj26+d4yiXXTw6FcxE0bEdv1eWq3a0I7lw7nPTS7J+OgSY
fnGmB4qgYZzW+oBAJ4QTTM/cA+fSOe3zGLZN3BePAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUprFvBlRigSzk82/ZuKEZWnyGK6MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FjN2FmMTFmLTZhZGMtNDkyMy1hMDEyLTE2MjYyNDdhOWI1Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4/jANBgkqhkiG9w0BAQsFAAOCAQEAiMVtIv3IylxKjW9NA3UpCLBFxHUD
6lQ/mneeWvjOSplqDZXb/KOmMuwrtN0V0aXDT2YRmiplRRRBeUKdvfoChgkarOqK
5P3jGxrG3YMoxJTOHwliZOgg1KFRIViw8Wr57BIL/sZCgOv76Yl7kRuXaivcrnE6
v/4/Fb/k8nkZfH09j3o1aSfzCqRsHLZDZEVdbTe/4j2Uy8OEnkMuysA3gMXqHskA
mdamqFh3z9TbSv2q48xRZZv8c2pQa40G3v+KRLRGI39d06VC6aiewsopGfqZ9FRS
HQ6vajRSWnf71/Wcxm6RemfduuskHvdAx7h3BWrTYw78gaL4c5UTuFZ1sQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:40 2025 by rpki-client