Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d01b026e-ec8c-44d3-896c-6492c2fa8445.roa
File: d01b026e-ec8c-44d3-896c-6492c2fa8445.roa (raw, json)
Hash identifier: wDxNrU32f5MZYb9WpzCk7pVbnH8MdoGl/EsKQF/vt6Y=
Subject key identifier: C2:CB:5D:88:31:91:D0:BA:A6:52:9D:C9:E2:42:50:74:9A:94:7A:50
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6A58677276206E35FD13A5D228F264D4A6DF05DA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d01b026e-ec8c-44d3-896c-6492c2fa8445.roa
Signing time: Sat 11 Jan 2025 00:00:00 +0000
ROA not before: Sat 11 Jan 2025 00:00:00 +0000
ROA not after: Sat 15 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 185.169.196.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:58:67:72:76:20:6e:35:fd:13:a5:d2:28:f2:64:d4:a6:df:05:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 11 00:00:00 2025 GMT
Not After : Feb 15 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fc:cd:c8:e3:3d:4d:81:c5:77:c2:bc:32:8c:
c0:09:94:23:ab:ab:e2:18:d7:85:49:f8:7c:83:b6:
38:4c:ca:d5:37:e7:82:13:14:9e:36:bc:6d:a1:8f:
60:38:46:de:d8:76:47:9e:30:67:bb:5d:eb:96:b5:
5c:58:b5:17:8d:9a:bb:9a:94:77:4f:61:dc:f6:2c:
9d:8e:07:f3:4c:6f:4a:38:6e:7d:78:48:e3:04:5c:
91:7e:25:c3:eb:92:9a:1b:3b:e3:f8:3a:a3:45:14:
a4:6d:3a:48:cc:d3:ba:46:3a:fb:df:98:0a:ea:1e:
ad:75:bb:46:6f:b8:74:43:35:de:78:68:02:19:c3:
5c:52:91:27:17:c1:8b:96:68:59:57:80:bb:32:2a:
e3:2f:a0:cf:01:a2:07:d1:ff:7f:99:db:0e:59:71:
b1:92:4d:95:00:ae:9f:48:bc:1b:dc:a7:d8:f7:5b:
ba:3f:33:92:d4:6a:09:93:a7:a2:c2:42:0f:fe:74:
08:64:2c:55:91:02:d8:f2:48:f5:4b:5f:c3:f0:ff:
4a:c2:3e:7f:da:96:f5:0e:95:b0:38:40:e8:6b:a7:
37:98:e8:fa:fe:5c:f2:a8:c0:af:33:35:2c:61:cb:
5e:79:b9:64:af:dd:29:eb:0b:54:1c:9d:cc:9e:65:
f5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CB:5D:88:31:91:D0:BA:A6:52:9D:C9:E2:42:50:74:9A:94:7A:50
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d01b026e-ec8c-44d3-896c-6492c2fa8445.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.196.0/22
Signature Algorithm: sha256WithRSAEncryption
36:97:7d:23:89:39:ac:24:c7:7e:33:8f:1e:97:b6:d8:ec:fc:
6d:5e:89:37:22:79:b2:f3:44:ba:d5:8f:98:9a:0f:ba:4d:aa:
49:f9:55:12:8b:3f:b7:25:0f:26:84:ec:d8:fe:50:71:b9:2f:
93:f7:f7:1d:cd:33:ea:2e:8e:3e:d1:98:c6:de:c3:62:57:27:
b9:d2:c8:04:1f:40:35:70:38:2e:47:a0:7e:3b:91:cb:b4:ba:
7e:b0:cc:b7:64:aa:4f:cc:fd:af:21:01:ce:3b:09:9e:ed:34:
26:15:a0:bd:19:bc:d9:63:86:41:b4:da:d1:58:24:08:35:be:
0d:87:cd:f6:0e:03:1c:e8:5b:27:48:5e:c3:f2:43:60:5c:5d:
f5:f5:cb:a7:ee:27:07:75:bd:e8:e0:cb:b8:b1:30:f0:e4:03:
1a:ee:2d:ca:d8:09:f0:85:2e:1f:e9:bc:5e:ef:ee:85:2b:f6:
58:93:73:76:1b:48:b9:13:d4:d5:6e:fe:03:e9:a7:ac:07:cb:
54:b5:8e:4b:cf:c6:72:be:e6:57:11:fe:4f:92:5f:fd:2e:ad:
12:d6:d7:16:d7:ec:99:e9:24:df:35:71:ca:38:e9:9d:9e:97:
a2:91:1c:df:a8:68:bc:58:78:dd:28:a3:b2:cb:3f:08:32:e7:
70:c2:db:75
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUalhncnYgbjX9E6XSKPJk1KbfBdowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTExMDAwMDAwWhcNMjUwMjE1MjM1OTU5
WjB6MUkwRwYDVQQFE0BhZjBiOTRmZGU5ZjM3Y2RlNTNjOGRlZGVmZTJkMDA4ZTMz
NzM5ZjllZWYyZGMxZWMxMjg2ZDkwMDMyMWJmN2NjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDh/M3I4z1NgcV3wrwyjMAJlCOrq+IY14VJ+HyDtjhMytU3
54ITFJ42vG2hj2A4Rt7YdkeeMGe7XeuWtVxYtReNmrualHdPYdz2LJ2OB/NMb0o4
bn14SOMEXJF+JcPrkpobO+P4OqNFFKRtOkjM07pGOvvfmArqHq11u0ZvuHRDNd54
aAIZw1xSkScXwYuWaFlXgLsyKuMvoM8BogfR/3+Z2w5ZcbGSTZUArp9IvBvcp9j3
W7o/M5LUagmTp6LCQg/+dAhkLFWRAtjySPVLX8Pw/0rCPn/alvUOlbA4QOhrpzeY
6Pr+XPKowK8zNSxhy155uWSv3SnrC1QcncyeZfWRAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUwstdiDGR0LqmUp3J4kJQdJqUelAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2QwMWIwMjZlLWVjOGMtNDRkMy04OTZjLTY0OTJjMmZhODQ0NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAK5qcQwDQYJKoZIhvcNAQELBQADggEBADaXfSOJOawkx34zjx6Xttjs/G1e
iTciebLzRLrVj5iaD7pNqkn5VRKLP7clDyaE7Nj+UHG5L5P39x3NM+oujj7RmMbe
w2JXJ7nSyAQfQDVwOC5HoH47kcu0un6wzLdkqk/M/a8hAc47CZ7tNCYVoL0ZvNlj
hkG02tFYJAg1vg2HzfYOAxzoWydIXsPyQ2BcXfX1y6fuJwd1vejgy7ixMPDkAxru
LcrYCfCFLh/pvF7v7oUr9liTc3YbSLkT1NVu/gPpp6wHy1S1jkvPxnK+5lcR/k+S
X/0urRLW1xbX7JnpJN81cco46Z2el6KRHN+oaLxYeN0oo7LLPwgy53DC23U=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:19 2025 by rpki-client