Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc2ff487-a0a6-4944-870d-ab6b6aea8b64.roa
File: fc2ff487-a0a6-4944-870d-ab6b6aea8b64.roa (raw, json)
Hash identifier: zc1XE+3U0s3aBKK+02cQCH+VusAx30Oc2YOzCFtJOsE=
Subject key identifier: EC:2F:AF:DF:A7:A7:4B:1F:C9:13:8F:0F:BA:84:20:41:C1:52:D6:38
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 35A7FF2A098C775A4FFA4EEAD4EA1FDE87066424
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc2ff487-a0a6-4944-870d-ab6b6aea8b64.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 64.52.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:a7:ff:2a:09:8c:77:5a:4f:fa:4e:ea:d4:ea:1f:de:87:06:64:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: serialNumber=947ba2d0d4362ee5a0bb5e0004e767aa5253ca001758b0a1f867a9a1d17611db, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f1:a3:27:63:71:0e:ba:52:4b:7c:f4:a0:75:
3f:0c:e1:67:3b:39:ec:1b:e3:7e:e7:d7:d0:01:02:
80:19:ce:a0:ef:73:42:48:44:d6:22:33:19:c0:82:
21:c5:9a:aa:a6:a9:5f:5e:43:7f:8d:56:c8:bf:0f:
25:f6:78:6d:15:7a:8f:96:5c:f8:cc:db:e7:89:f3:
b3:62:42:de:91:09:cc:c4:89:b2:61:50:2a:55:aa:
b1:2c:71:05:20:7c:a1:2a:09:ba:19:ce:d3:2f:97:
3d:c6:8a:07:d3:4e:68:40:a8:25:eb:0d:54:b5:0b:
94:c9:a7:18:0d:18:42:5d:ad:f0:40:eb:62:24:f3:
a4:d8:5b:07:7f:03:32:90:ff:cf:58:99:b4:be:4c:
d8:65:55:15:e5:11:4c:3c:6d:e9:5b:87:9b:73:29:
f9:54:68:01:fc:68:2e:99:2c:b3:71:a9:15:43:01:
e5:92:5f:ac:ac:ed:75:50:5c:bc:52:d4:f4:a8:71:
c4:24:a6:a3:ca:08:af:bc:a0:5e:e7:f8:f4:0a:57:
2d:93:a1:4b:72:58:d9:73:1d:83:f6:89:4b:f8:30:
5d:75:fb:3e:c4:04:ef:02:80:d2:35:82:39:b9:a0:
2f:1a:0d:05:a8:b9:6a:a7:8d:71:0d:57:a7:30:bc:
e6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2F:AF:DF:A7:A7:4B:1F:C9:13:8F:0F:BA:84:20:41:C1:52:D6:38
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc2ff487-a0a6-4944-870d-ab6b6aea8b64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.52.144.0/20
Signature Algorithm: sha256WithRSAEncryption
0f:ad:a7:b8:aa:71:9d:32:32:8e:5c:86:4e:a8:4d:ad:69:2e:
7c:d7:86:12:e7:18:5c:0f:fc:9c:a9:94:07:38:94:13:02:5b:
c2:d7:91:aa:c8:94:c5:22:c5:48:ab:f4:a2:d1:6c:78:6e:8a:
f9:73:e4:e4:bf:f8:b6:7f:c5:3c:b8:5f:5d:37:49:07:92:2c:
f6:b7:34:b9:57:b7:4d:b8:36:2b:3f:09:3a:1f:03:65:53:66:
e4:4f:d3:96:ad:69:05:37:a4:e2:9b:f6:1e:98:89:ca:6e:44:
fc:c8:dd:75:d5:96:06:27:3d:ec:f8:59:b9:e9:59:49:ce:66:
bd:2c:26:45:02:19:f8:51:dd:2c:ce:dc:66:0f:e0:a5:c9:f4:
3a:dc:bd:3e:76:f5:aa:0e:8b:ec:68:bb:57:5f:4c:ed:c1:dc:
cf:e8:cb:4d:65:b7:eb:26:9c:a8:5f:00:61:d8:13:0d:94:1b:
73:46:fc:19:46:e9:ef:0b:11:97:79:31:ef:5d:e7:15:50:5e:
f7:9a:1b:fc:02:54:52:8d:45:2b:49:4d:6c:3b:03:70:c6:cf:
c2:48:2e:3d:46:1c:6f:e6:3a:66:8a:77:b1:42:09:e4:02:f4:
ce:dc:1c:3d:73:30:17:0c:1c:28:0f:fe:49:08:2b:a7:61:14:
24:c1:8e:b4
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUNaf/KgmMd1pP+k7q1Oof3ocGZCQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTAzMDAwMDAwWhcNMjUwMjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A5NDdiYTJkMGQ0MzYyZWU1YTBiYjVlMDAwNGU3NjdhYTUy
NTNjYTAwMTc1OGIwYTFmODY3YTlhMWQxNzYxMWRiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDC8aMnY3EOulJLfPSgdT8M4Wc7Oewb437n19ABAoAZzqDv
c0JIRNYiMxnAgiHFmqqmqV9eQ3+NVsi/DyX2eG0Veo+WXPjM2+eJ87NiQt6RCczE
ibJhUCpVqrEscQUgfKEqCboZztMvlz3GigfTTmhAqCXrDVS1C5TJpxgNGEJdrfBA
62Ik86TYWwd/AzKQ/89YmbS+TNhlVRXlEUw8belbh5tzKflUaAH8aC6ZLLNxqRVD
AeWSX6ys7XVQXLxS1PSoccQkpqPKCK+8oF7n+PQKVy2ToUtyWNlzHYP2iUv4MF11
+z7EBO8CgNI1gjm5oC8aDQWouWqnjXENV6cwvObdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU7C+v36enSx/JE48PuoQgQcFS1jgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2ZjMmZmNDg3LWEwYTYtNDk0NC04NzBkLWFiNmI2YWVhOGI2NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARANJAwDQYJKoZIhvcNAQELBQADggEBAA+tp7iqcZ0yMo5chk6oTa1pLnzX
hhLnGFwP/JyplAc4lBMCW8LXkarIlMUixUir9KLRbHhuivlz5OS/+LZ/xTy4X103
SQeSLPa3NLlXt024Nis/CTofA2VTZuRP05ataQU3pOKb9h6YicpuRPzI3XXVlgYn
Pez4WbnpWUnOZr0sJkUCGfhR3SzO3GYP4KXJ9DrcvT529aoOi+xou1dfTO3B3M/o
y01lt+smnKhfAGHYEw2UG3NG/BlG6e8LEZd5Me9d5xVQXveaG/wCVFKNRStJTWw7
A3DGz8JILj1GHG/mOmaKd7FCCeQC9M7cHD1zMBcMHCgP/kkIK6dhFCTBjrQ=
-----END CERTIFICATE-----
Generated at Wed Apr 16 16:58:29 2025 by rpki-client