Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b001d6ed-75de-4bea-9e3c-c76a0c3d507b.roa
File: b001d6ed-75de-4bea-9e3c-c76a0c3d507b.roa (raw, json)
Hash identifier: sAgL+zS1A5YtQje5oPn64LjS40v8/2K8mpYqkaVsePs=
Subject key identifier: 3B:45:7E:16:BF:CD:AC:70:CF:11:63:09:71:90:B0:23:D2:96:98:97
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 735A3035956BF7426921B427F1436CAD2FA885E8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b001d6ed-75de-4bea-9e3c-c76a0c3d507b.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 150.247.0.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:5a:30:35:95:6b:f7:42:69:21:b4:27:f1:43:6c:ad:2f:a8:85:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: serialNumber=f52c9feac94a59e735b7cb88280dfbf94b46642653b5243caf15b487a8b34c61, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:45:8c:fb:02:86:66:8f:04:83:0d:81:a9:c6:
c5:cb:7a:46:b6:f1:31:61:e2:59:b5:2b:85:32:e5:
84:24:73:64:f5:62:78:e7:b3:02:ba:a7:0b:db:57:
0b:54:45:37:c9:e7:6a:b9:2e:60:59:1a:3e:51:92:
93:8e:08:6e:bb:06:04:77:ba:5a:bf:41:02:3f:80:
ba:35:25:45:25:94:b2:1e:41:9d:ef:22:b9:6f:3e:
da:e4:f0:7f:2b:c4:17:36:50:3e:03:cf:11:05:15:
01:ff:dc:a8:63:7c:f4:d9:e3:11:33:0d:8c:83:72:
85:bc:a0:a5:29:ab:52:08:8d:97:ee:c8:f7:2c:fc:
45:fc:15:b2:5b:ee:06:a8:aa:7f:12:7e:1b:5d:9e:
a5:bb:89:4f:40:a4:33:18:8d:4a:1e:2a:fd:be:e4:
3a:f5:3e:33:98:19:a1:20:02:01:01:79:23:0f:85:
d3:66:2b:0b:7c:58:30:01:bd:89:55:e0:ec:71:26:
b3:09:4c:16:f5:17:5d:1b:1a:00:89:dd:a9:ac:43:
d5:13:49:a2:45:c7:54:3f:a4:a3:90:55:02:be:a5:
2d:0a:ee:1d:e5:71:01:8a:83:44:c8:fb:85:21:bc:
cd:b8:87:54:77:ba:96:02:22:82:cc:8e:7c:66:7e:
60:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:45:7E:16:BF:CD:AC:70:CF:11:63:09:71:90:B0:23:D2:96:98:97
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b001d6ed-75de-4bea-9e3c-c76a0c3d507b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.247.0.0/19
Signature Algorithm: sha256WithRSAEncryption
22:ad:81:ef:58:8d:3f:78:0b:b6:8c:28:14:76:d2:89:fb:bb:
9b:a8:2c:93:45:f8:9d:cd:c5:68:15:52:a3:52:b7:cd:97:d7:
ff:e8:30:b5:33:92:41:06:bd:1d:d8:eb:66:c6:60:87:66:70:
f7:52:3c:e8:5d:3f:90:97:5d:5f:55:c8:39:9a:08:c7:a5:ce:
08:41:2b:88:24:85:05:a7:8a:70:b2:a1:2a:2c:f8:2c:da:79:
81:b7:76:e1:8a:98:d4:20:7a:b4:31:7c:d0:55:6b:93:c7:e8:
ca:3a:9d:e3:0d:81:66:53:52:86:f2:85:55:10:98:ad:91:59:
5b:2c:71:f7:5c:db:45:90:de:89:41:ba:fa:e1:8d:25:0c:4a:
11:1f:08:9b:ec:60:4f:0d:85:d8:f1:f5:51:5c:ad:14:bf:17:
70:a2:48:1c:5d:89:fc:07:34:5b:bf:2f:5a:20:1d:84:ca:9f:
19:ff:b8:6c:cc:3e:f8:fc:1f:d2:57:3b:bb:78:6b:0e:4e:68:
35:32:7a:7c:af:cf:d8:fd:e2:de:d0:75:95:99:34:59:bf:59:
7b:b3:13:91:17:97:71:13:45:c9:5c:a8:19:66:5f:27:9a:79:
46:d1:b6:5d:61:f6:28:d4:64:cd:75:7a:48:63:07:db:82:6c:
c2:1a:3f:e4
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUc1owNZVr90JpIbQn8UNsrS+ohegwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTAzMDAwMDAwWhcNMjUwMjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BmNTJjOWZlYWM5NGE1OWU3MzViN2NiODgyODBkZmJmOTRi
NDY2NDI2NTNiNTI0M2NhZjE1YjQ4N2E4YjM0YzYxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCjRYz7AoZmjwSDDYGpxsXLeka28TFh4lm1K4Uy5YQkc2T1
YnjnswK6pwvbVwtURTfJ52q5LmBZGj5RkpOOCG67BgR3ulq/QQI/gLo1JUUllLIe
QZ3vIrlvPtrk8H8rxBc2UD4DzxEFFQH/3KhjfPTZ4xEzDYyDcoW8oKUpq1IIjZfu
yPcs/EX8FbJb7gaoqn8SfhtdnqW7iU9ApDMYjUoeKv2+5Dr1PjOYGaEgAgEBeSMP
hdNmKwt8WDABvYlV4OxxJrMJTBb1F10bGgCJ3amsQ9UTSaJFx1Q/pKOQVQK+pS0K
7h3lcQGKg0TI+4UhvM24h1R3upYCIoLMjnxmfmDPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUO0V+Fr/NrHDPEWMJcZCwI9KWmJcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2IwMDFkNmVkLTc1ZGUtNGJlYS05ZTNjLWM3NmEwYzNkNTA3Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAWW9wAwDQYJKoZIhvcNAQELBQADggEBACKtge9YjT94C7aMKBR20on7u5uo
LJNF+J3NxWgVUqNSt82X1//oMLUzkkEGvR3Y62bGYIdmcPdSPOhdP5CXXV9VyDma
CMelzghBK4gkhQWninCyoSos+CzaeYG3duGKmNQgerQxfNBVa5PH6Mo6neMNgWZT
UobyhVUQmK2RWVsscfdc20WQ3olBuvrhjSUMShEfCJvsYE8Nhdjx9VFcrRS/F3Ci
SBxdifwHNFu/L1ogHYTKnxn/uGzMPvj8H9JXO7t4aw5OaDUyenyvz9j94t7QdZWZ
NFm/WXuzE5EXl3ETRclcqBlmXyeaeUbRtl1h9ijUZM11ekhjB9uCbMIaP+Q=
-----END CERTIFICATE-----
Generated at Wed Apr 16 16:48:39 2025 by rpki-client