Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed4eda9d-8a4e-4b26-81a3-0c96d6ab2f7e.roa
File: ed4eda9d-8a4e-4b26-81a3-0c96d6ab2f7e.roa (raw, json)
Hash identifier: DdJhUJcrLTDp/zD/nLk3xROi5X1qBrY8g7jA/re+xnQ=
Subject key identifier: E9:5E:B8:07:5F:DD:C2:5C:89:F8:AF:1E:B0:FF:E0:80:E4:54:57:CF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 04B384ABE4278212DBF117F1AE38B781D2BCF66C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed4eda9d-8a4e-4b26-81a3-0c96d6ab2f7e.roa
Signing time: Sat 11 Jan 2025 00:00:00 +0000
ROA not before: Sat 11 Jan 2025 00:00:00 +0000
ROA not after: Sat 15 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.25.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:b3:84:ab:e4:27:82:12:db:f1:17:f1:ae:38:b7:81:d2:bc:f6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 11 00:00:00 2025 GMT
Not After : Feb 15 23:59:59 2025 GMT
Subject: serialNumber=866e9f262d7592d5f8bdae3caad493e2f825cff42b18202a24ebf8081bc54206, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c2:c5:fc:a4:74:6c:29:61:a0:0c:80:cb:4e:
a7:8e:85:54:33:26:8f:13:bc:79:3c:c3:d0:8c:b4:
2e:18:ed:41:ab:35:c3:03:c7:94:3b:80:99:de:54:
82:f9:b7:94:db:7e:bc:6d:a5:51:5e:71:da:b7:83:
5e:17:32:4e:8e:17:92:62:15:65:41:09:ce:bf:a6:
4d:5e:7a:6e:20:6f:36:86:58:d7:5c:e9:66:9a:8a:
07:63:c3:aa:42:5b:64:0a:a2:86:7b:70:53:76:d0:
42:fa:5b:8f:c4:ec:4d:76:d1:1d:b3:8a:00:c9:3a:
51:6e:2f:18:20:67:3c:f3:49:ab:7b:83:39:2a:83:
ce:51:02:24:fb:be:fe:33:78:e1:f1:28:f6:99:1b:
8a:31:48:c2:21:ff:13:ea:f2:b6:ae:24:33:72:b1:
d5:64:b6:d0:9c:f9:d4:aa:17:24:c9:3c:4c:8f:e8:
b7:62:68:4c:df:7c:d8:b0:dd:81:58:98:60:cd:fb:
38:1e:81:ed:7b:0c:58:3f:70:10:2c:2c:9c:f6:2f:
be:03:a6:24:48:cb:b5:50:2f:b7:63:a9:d4:65:9e:
64:f6:db:c6:53:d3:68:38:2f:3b:82:18:34:38:6e:
ef:66:4f:db:c4:11:b1:aa:77:4b:d4:27:42:99:9a:
43:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5E:B8:07:5F:DD:C2:5C:89:F8:AF:1E:B0:FF:E0:80:E4:54:57:CF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed4eda9d-8a4e-4b26-81a3-0c96d6ab2f7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.25.69.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:1a:f2:d7:a2:38:a6:02:f9:5a:93:25:a2:d1:92:23:ec:cd:
61:29:b1:63:a0:63:43:94:89:f6:ed:02:71:72:8a:60:6d:b1:
e4:4d:6f:63:79:75:98:aa:92:37:7b:55:01:2f:ce:50:d3:ed:
68:cd:ce:00:d2:3a:4f:f3:85:17:8b:ec:d2:7a:6c:57:16:12:
fd:48:81:94:31:70:3f:c2:d2:b3:bd:57:57:c4:84:06:1f:ac:
81:39:51:1a:3d:15:e6:29:76:9c:ee:dd:d5:9f:ba:b5:0e:78:
91:1c:93:de:fb:9d:2e:ab:59:bc:ab:d9:a7:13:24:94:4b:0f:
99:86:8c:0e:65:b0:d9:68:8d:f9:64:75:e6:87:b1:93:a3:78:
c9:ea:e3:aa:8c:1d:03:94:a7:46:b1:65:df:7a:32:0f:ec:20:
8c:2a:55:6e:79:ac:8a:f4:a7:c4:58:4b:32:aa:2e:e7:7e:35:
37:e3:85:62:9f:93:5a:a5:f9:ca:8f:c4:6b:cd:23:3d:28:2a:
85:bf:46:5d:2c:d6:96:f2:f9:4d:16:7e:c9:08:b8:2d:dd:c1:
e9:87:b3:60:1e:72:63:65:af:6d:17:16:52:23:f9:0f:92:58:
76:fe:4e:6a:b8:2c:55:e6:47:66:db:5a:2d:a9:4a:ed:a6:44:
ac:d8:8b:38
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUBLOEq+QnghLb8Rfxrji3gdK89mwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTExMDAwMDAwWhcNMjUwMjE1MjM1OTU5
WjB6MUkwRwYDVQQFE0A4NjZlOWYyNjJkNzU5MmQ1ZjhiZGFlM2NhYWQ0OTNlMmY4
MjVjZmY0MmIxODIwMmEyNGViZjgwODFiYzU0MjA2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCkwsX8pHRsKWGgDIDLTqeOhVQzJo8TvHk8w9CMtC4Y7UGr
NcMDx5Q7gJneVIL5t5TbfrxtpVFecdq3g14XMk6OF5JiFWVBCc6/pk1eem4gbzaG
WNdc6Waaigdjw6pCW2QKooZ7cFN20EL6W4/E7E120R2zigDJOlFuLxggZzzzSat7
gzkqg85RAiT7vv4zeOHxKPaZG4oxSMIh/xPq8rauJDNysdVkttCc+dSqFyTJPEyP
6LdiaEzffNiw3YFYmGDN+zgege17DFg/cBAsLJz2L74DpiRIy7VQL7djqdRlnmT2
28ZT02g4LzuCGDQ4bu9mT9vEEbGqd0vUJ0KZmkPBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU6V64B1/dwlyJ+K8esP/ggORUV88wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2VkNGVkYTlkLThhNGUtNGIyNi04MWEzLTBjOTZkNmFiMmY3ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA2GUUwDQYJKoZIhvcNAQELBQADggEBALka8teiOKYC+VqTJaLRkiPszWEp
sWOgY0OUifbtAnFyimBtseRNb2N5dZiqkjd7VQEvzlDT7WjNzgDSOk/zhReL7NJ6
bFcWEv1IgZQxcD/C0rO9V1fEhAYfrIE5URo9FeYpdpzu3dWfurUOeJEck977nS6r
Wbyr2acTJJRLD5mGjA5lsNlojflkdeaHsZOjeMnq46qMHQOUp0axZd96Mg/sIIwq
VW55rIr0p8RYSzKqLud+NTfjhWKfk1ql+cqPxGvNIz0oKoW/Rl0s1pby+U0WfskI
uC3dwemHs2AecmNlr20XFlIj+Q+SWHb+Tmq4LFXmR2bbWi2pSu2mRKzYizg=
-----END CERTIFICATE-----
Generated at Wed Apr 16 16:42:33 2025 by rpki-client