Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac7daf4f-7ec3-4cd4-a857-76066a06c79b.roa
File: ac7daf4f-7ec3-4cd4-a857-76066a06c79b.roa (raw, json)
Hash identifier: ei35d2EE6ytQDvF8YQLIFjroZekmHriU2ymPLge1cYU=
Subject key identifier: 8B:8E:B1:2F:60:BC:87:60:43:2F:B4:A2:D1:07:80:41:E0:F3:DB:6C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 350284554522A76B52E1DA049A8BB7C91E35B494
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac7daf4f-7ec3-4cd4-a857-76066a06c79b.roa
Signing time: Sat 30 Nov 2024 00:00:00 +0000
ROA not before: Sat 30 Nov 2024 00:00:00 +0000
ROA not after: Sat 04 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 100.24.0.0/13 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:02:84:55:45:22:a7:6b:52:e1:da:04:9a:8b:b7:c9:1e:35:b4:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 30 00:00:00 2024 GMT
Not After : Jan 4 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c7:24:e9:32:54:25:80:17:05:69:6e:3f:13:
2a:8b:b2:a4:ab:bf:5e:7c:81:f6:eb:f9:31:1e:d8:
e0:5c:b4:47:c7:3b:ed:18:8c:e5:5a:79:0a:5f:75:
d0:6a:a5:81:36:8d:0b:9a:da:d2:5d:cd:23:e7:22:
78:49:a0:02:32:93:48:e3:2b:59:f0:61:f4:4f:57:
a6:d5:e2:08:14:93:96:1f:76:56:cf:1f:56:68:b0:
4c:fb:2e:4d:aa:59:a0:d2:45:a6:63:ac:00:2b:e6:
9d:79:d9:97:75:01:b8:e4:67:f3:61:50:95:ae:56:
66:62:49:1e:af:5a:6b:3b:13:e1:95:30:b7:0d:17:
a3:e0:f6:b9:86:73:0d:28:f5:73:a7:4e:f7:07:70:
a0:95:7d:61:01:ad:47:c1:3d:31:fa:a8:4f:2c:b5:
99:e0:16:31:7c:f3:a3:33:af:79:4b:ee:2f:da:92:
7c:5e:d9:d7:5d:2e:d1:07:0c:0b:b8:f0:c2:ce:6e:
c4:72:bd:3d:80:95:e0:81:fe:ba:a9:06:6b:7d:d3:
c2:e7:db:f2:65:99:f7:7a:5d:99:a1:08:8c:8b:cd:
95:12:9b:a0:48:d8:8b:14:7c:32:5c:3f:0c:26:8a:
fe:50:c0:f1:5c:b4:c6:97:55:d0:86:e8:9d:6c:2c:
2d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8E:B1:2F:60:BC:87:60:43:2F:B4:A2:D1:07:80:41:E0:F3:DB:6C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac7daf4f-7ec3-4cd4-a857-76066a06c79b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
100.24.0.0/13
Signature Algorithm: sha256WithRSAEncryption
50:ac:42:15:93:b9:d7:03:fe:99:a4:b9:d8:54:39:bc:3f:59:
58:a1:e5:6f:33:6e:93:c4:b5:50:22:15:2c:49:e0:ae:bb:c4:
d9:b3:75:5a:39:5b:11:4c:c0:f3:ad:55:88:32:54:3c:44:08:
8e:7b:db:a4:95:0e:ae:e8:b2:ca:82:bf:70:f2:1a:dd:4e:6e:
11:97:76:9c:5c:5f:d5:a9:3e:a9:6b:c1:11:3d:28:45:0f:25:
e3:6d:c5:9a:01:26:0a:84:bf:b7:ed:da:85:0a:e4:c7:3e:c0:
9c:6d:4d:76:ba:d2:72:00:52:4a:1f:7e:f0:25:9b:95:09:5f:
59:59:df:99:cf:2b:5f:1d:33:54:31:7a:5b:6d:1b:08:c7:72:
91:41:5c:ab:ab:4e:fe:9a:ea:15:39:39:a0:b7:e0:10:66:ae:
55:43:d0:73:f3:cd:8a:3e:2a:75:e5:a8:7c:bc:5e:c8:b2:84:
ee:3e:a7:9c:6b:a3:f7:29:2c:ce:05:f9:43:0c:7b:2d:fc:69:
94:40:37:99:78:de:89:57:bb:80:02:72:14:df:75:58:54:89:
f1:4c:58:f5:7f:8c:3e:fd:c8:c4:92:8e:11:cb:e7:73:23:c8:
ea:e0:03:b7:bf:c1:e3:4f:65:3f:38:84:58:2a:29:5b:7e:d0:
83:b4:cd:38
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUNQKEVUUip2tS4doEmou3yR41tJQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTMwMDAwMDAwWhcNMjUwMTA0MjM1OTU5
WjB6MUkwRwYDVQQFE0BhYzg4ZGQ2ODAxMDEyYTA1N2JlMmQ2Mzg4OTM1MTlmYjQy
OWM2OWJmMWRmNjgzNDNiZGFiMzJlNzA3YWViNDlkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDuxyTpMlQlgBcFaW4/EyqLsqSrv158gfbr+TEe2OBctEfH
O+0YjOVaeQpfddBqpYE2jQua2tJdzSPnInhJoAIyk0jjK1nwYfRPV6bV4ggUk5Yf
dlbPH1ZosEz7Lk2qWaDSRaZjrAAr5p152Zd1AbjkZ/NhUJWuVmZiSR6vWms7E+GV
MLcNF6Pg9rmGcw0o9XOnTvcHcKCVfWEBrUfBPTH6qE8stZngFjF886Mzr3lL7i/a
knxe2dddLtEHDAu48MLObsRyvT2AleCB/rqpBmt908Ln2/Jlmfd6XZmhCIyLzZUS
m6BI2IsUfDJcPwwmiv5QwPFctMaXVdCG6J1sLC1JAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUi46xL2C8h2BDL7Si0QeAQeDz22wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FjN2RhZjRmLTdlYzMtNGNkNC1hODU3LTc2MDY2YTA2Yzc5Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwNkGDANBgkqhkiG9w0BAQsFAAOCAQEAUKxCFZO51wP+maS52FQ5vD9ZWKHl
bzNuk8S1UCIVLEngrrvE2bN1WjlbEUzA861ViDJUPEQIjnvbpJUOruiyyoK/cPIa
3U5uEZd2nFxf1ak+qWvBET0oRQ8l423FmgEmCoS/t+3ahQrkxz7AnG1NdrrScgBS
Sh9+8CWblQlfWVnfmc8rXx0zVDF6W20bCMdykUFcq6tO/prqFTk5oLfgEGauVUPQ
c/PNij4qdeWofLxeyLKE7j6nnGuj9ykszgX5Qwx7LfxplEA3mXjeiVe7gAJyFN91
WFSJ8UxY9X+MPv3IxJKOEcvncyPI6uADt7/B409lPziEWCopW37Qg7TNOA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 23:46:38 2025 by rpki-client