Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4625ae3-e450-4a58-ae35-e44c0a61510b.roa
File: c4625ae3-e450-4a58-ae35-e44c0a61510b.roa (raw, json)
Hash identifier: ZsEPfuNmYLIG7bMTla9B1RaDAxyuQGvGwGSkw8RKhGc=
Subject key identifier: 1F:6C:BF:28:4A:3A:23:6C:86:CB:D8:74:22:61:F9:27:1F:1D:46:24
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 153582693DF586E11C7F2EE3706CE444AC4F2E78
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4625ae3-e450-4a58-ae35-e44c0a61510b.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 96.0.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:35:82:69:3d:f5:86:e1:1c:7f:2e:e3:70:6c:e4:44:ac:4f:2e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:db:8e:6e:58:11:fe:c3:6e:84:15:67:78:dc:
59:bb:fe:a7:1d:45:aa:7d:12:2d:31:7d:b3:b5:1f:
42:98:b6:0f:4f:14:3a:54:60:c1:d8:f1:16:3d:35:
51:be:4d:9a:fd:93:0d:18:26:11:1e:cd:0a:91:66:
33:e2:c6:ad:ac:c1:9f:cf:f4:bf:65:e8:89:d2:bf:
35:8b:57:70:38:e0:c0:72:f8:93:ce:5e:9a:0a:dd:
df:da:ca:09:26:49:b5:87:84:d6:9b:66:8b:25:60:
60:92:ee:81:4c:dc:e9:c4:6c:13:b6:ef:15:da:fc:
ec:da:00:fe:67:b2:00:21:39:17:43:0e:a6:09:aa:
c3:89:f6:b1:43:7e:b0:a5:fa:ac:98:c0:59:c6:2c:
a6:0e:ca:25:b9:ee:e0:c1:02:9c:9b:65:bf:b3:e2:
06:91:b3:67:80:29:55:f5:34:43:05:ea:c5:d4:78:
78:30:7b:18:27:15:09:b9:c6:9e:6d:33:aa:06:14:
ef:ef:8c:cc:22:f6:89:2c:8f:4d:af:f6:ac:7a:0f:
0b:a5:04:34:a4:ad:9f:08:48:30:35:ac:03:c0:86:
fd:e0:6a:b5:5d:5a:b2:b2:79:44:5c:a7:54:eb:90:
78:ac:58:08:b4:2b:cf:47:db:54:52:f5:1c:99:a1:
8f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6C:BF:28:4A:3A:23:6C:86:CB:D8:74:22:61:F9:27:1F:1D:46:24
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4625ae3-e450-4a58-ae35-e44c0a61510b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.0.32.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:7c:33:7f:60:1f:c5:52:ae:fa:64:a6:28:9e:5e:8a:98:61:
f4:2e:21:25:6a:01:59:41:30:fb:2d:0b:7e:15:29:8d:02:ca:
2b:7b:06:97:34:0e:7b:f6:67:ab:d8:fd:e3:26:91:56:e3:bf:
11:41:c5:d5:8f:2e:38:90:22:18:71:5d:b5:46:e3:a4:ca:02:
2c:fe:84:91:89:f9:08:21:39:24:e2:5a:4a:6e:e4:eb:7c:ec:
3b:cb:19:55:83:c7:53:8d:d5:a5:b8:ab:76:e4:65:a0:55:6d:
9b:47:d8:6e:57:75:f5:cd:98:02:7a:3a:ed:92:69:13:0a:2f:
84:80:17:64:e6:0b:17:01:4a:02:5a:80:88:32:4e:d1:ed:07:
91:1f:6c:34:03:cd:ad:60:49:bc:c6:5e:69:fb:d4:78:51:ba:
15:a3:91:3c:9e:a9:0f:ad:5e:be:97:47:af:81:c1:1c:b8:c0:
19:ae:11:92:51:ac:f0:42:b4:c4:c9:e9:f0:6a:a6:e8:1d:b7:
23:2a:ed:da:0f:21:f4:dd:52:2c:f5:bc:4c:e7:12:55:50:f2:
54:55:76:8c:17:9b:2a:55:cf:e6:cd:a4:25:09:fe:a6:49:4c:
ab:b2:40:cb:bf:fb:15:ba:35:66:6b:8b:c6:74:a7:db:54:e4:
45:c8:d7:ec
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFTWCaT31huEcfy7jcGzkRKxPLngwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjI3MDAwMDAwWhcNMjUwMTMxMjM1OTU5
WjB6MUkwRwYDVQQFE0A3NmYxNGNjNjZhNzc5MjJiYWI4ZjI0ODdhOGYyNTdhYzJj
ZDI3ZGIzNzE4YmRkMTEwZGY5YTUwMzY0ZDQxNTUyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCt245uWBH+w26EFWd43Fm7/qcdRap9Ei0xfbO1H0KYtg9P
FDpUYMHY8RY9NVG+TZr9kw0YJhEezQqRZjPixq2swZ/P9L9l6InSvzWLV3A44MBy
+JPOXpoK3d/aygkmSbWHhNabZoslYGCS7oFM3OnEbBO27xXa/OzaAP5nsgAhORdD
DqYJqsOJ9rFDfrCl+qyYwFnGLKYOyiW57uDBApybZb+z4gaRs2eAKVX1NEMF6sXU
eHgwexgnFQm5xp5tM6oGFO/vjMwi9oksj02v9qx6DwulBDSkrZ8ISDA1rAPAhv3g
arVdWrKyeURcp1TrkHisWAi0K89H21RS9RyZoY9fAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUH2y/KEo6I2yGy9h0ImH5Jx8dRiQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M0NjI1YWUzLWU0NTAtNGE1OC1hZTM1LWU0NGMwYTYxNTEwYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJgACAwDQYJKoZIhvcNAQELBQADggEBAD98M39gH8VSrvpkpiieXoqYYfQu
ISVqAVlBMPstC34VKY0Cyit7Bpc0Dnv2Z6vY/eMmkVbjvxFBxdWPLjiQIhhxXbVG
46TKAiz+hJGJ+QghOSTiWkpu5Ot87DvLGVWDx1ON1aW4q3bkZaBVbZtH2G5XdfXN
mAJ6Ou2SaRMKL4SAF2TmCxcBSgJagIgyTtHtB5EfbDQDza1gSbzGXmn71HhRuhWj
kTyeqQ+tXr6XR6+BwRy4wBmuEZJRrPBCtMTJ6fBqpugdtyMq7doPIfTdUiz1vEzn
ElVQ8lRVdowXmypVz+bNpCUJ/qZJTKuyQMu/+xW6NWZri8Z0p9tU5EXI1+w=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:47 2025 by rpki-client