Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c60f310d-0c43-4d07-8125-da5e69321e3c.roa
File: c60f310d-0c43-4d07-8125-da5e69321e3c.roa (raw, json)
Hash identifier: GLa/0RU03I3icG3Cx1onJFPp6JUuRl2zWMqTY4P456k=
Subject key identifier: 2C:5D:01:7B:4F:3A:75:B5:E8:B9:B6:8E:AC:8E:A1:76:B6:39:0E:26
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 628437903FE91C4BB26C1DDBF931482671ABD8A5
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c60f310d-0c43-4d07-8125-da5e69321e3c.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 206.55.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:84:37:90:3f:e9:1c:4b:b2:6c:1d:db:f9:31:48:26:71:ab:d8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:29:66:3e:c6:30:b2:92:d8:45:bd:68:54:
94:a1:74:f7:b8:e3:04:ce:f2:de:c7:d4:8f:0b:bb:
80:ff:93:40:34:73:c2:3f:3e:44:dd:f6:db:f1:af:
2f:1d:4b:63:a1:d6:3e:17:cf:c8:d9:7b:29:a6:9c:
f1:9f:fd:9c:b3:1d:76:cf:4a:1d:1f:88:dc:83:ef:
08:4a:31:38:c3:d6:c0:a0:55:ce:cb:f6:8e:f7:a5:
bb:c8:23:6f:bd:4a:08:8b:1e:63:75:1f:1d:65:1b:
9a:d3:dc:09:52:64:c6:74:27:a4:01:47:f9:91:1e:
5d:a7:d7:47:04:4a:77:f4:0a:e8:11:1c:b4:a0:19:
db:ef:9e:a1:6c:08:7a:60:40:20:b1:93:ab:be:c7:
dd:fc:60:03:23:00:0f:d7:ee:d9:6c:dc:b7:67:bb:
62:ae:c6:86:04:87:dd:b9:39:64:df:48:e9:b9:f0:
ca:fd:cf:0a:da:a7:54:c2:84:ec:d6:c4:3c:ef:96:
70:61:19:27:58:e9:8c:08:15:94:2d:0a:e5:74:d1:
ac:21:85:27:81:3a:99:82:30:9f:f1:ce:00:62:37:
2f:56:76:95:b6:90:91:c9:58:35:31:fa:39:34:fd:
43:6a:8b:2f:8d:06:43:72:96:47:77:c2:6d:e1:1e:
4f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5D:01:7B:4F:3A:75:B5:E8:B9:B6:8E:AC:8E:A1:76:B6:39:0E:26
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c60f310d-0c43-4d07-8125-da5e69321e3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.55.130.0/24
Signature Algorithm: sha256WithRSAEncryption
59:eb:ce:e1:1a:a5:a2:ff:4c:03:4b:7b:df:13:3b:fc:c2:ce:
cc:b2:a3:f3:59:e4:ea:93:1b:a0:44:1b:38:25:19:f7:75:88:
87:ef:12:3c:de:44:55:86:18:35:1c:25:be:90:7d:a7:4d:07:
ef:bf:93:0a:7e:bf:ac:95:94:21:0f:fe:26:eb:b7:02:e6:25:
6e:dc:99:e9:03:c3:e0:a5:1b:21:b9:09:c0:77:65:40:a1:c4:
9f:73:65:53:3b:f8:b8:c0:36:be:f5:f2:31:e7:0a:1a:5c:2c:
a6:68:6a:cd:3d:e3:28:69:1d:2b:e8:c1:87:24:6c:ff:22:93:
5c:bc:a5:66:9d:b0:be:cc:23:4a:82:8a:50:64:55:df:8b:2e:
34:cb:d1:63:a8:eb:26:74:90:14:2f:2d:ad:19:18:a9:72:ea:
a9:81:5b:f4:68:01:d2:4b:58:7a:38:07:ee:e2:03:a6:62:b1:
0c:9c:07:e9:02:5b:5c:50:23:dc:d0:80:23:88:68:09:26:b6:
7a:db:1a:9d:8d:9c:3f:8c:20:15:45:81:a6:a9:9f:e7:c3:e1:
df:f0:37:77:f6:0f:ec:0c:91:4b:2b:5a:4f:d2:9c:00:db:92:
f9:42:6d:a0:12:49:1e:43:b9:58:cf:88:7f:c8:03:7a:57:0a:
c0:ec:9c:09
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYoQ3kD/pHEuybB3b+TFIJnGr2KUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjQxMjMwMDAwMDAwWhcNMjUwMjAzMjM1OTU5
WjB6MUkwRwYDVQQFE0A1MGJlZGIyNjEyNTQ4NDkwZGNhYmI4ZWIxNTU1MmZmNDNi
M2NmZmQ3MzA1MzZlYmU1ZjhlMjhiNWEwYzljMTY3MS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCryilmPsYwspLYRb1oVJShdPe44wTO8t7H1I8Lu4D/k0A0
c8I/PkTd9tvxry8dS2Oh1j4Xz8jZeymmnPGf/ZyzHXbPSh0fiNyD7whKMTjD1sCg
Vc7L9o73pbvII2+9SgiLHmN1Hx1lG5rT3AlSZMZ0J6QBR/mRHl2n10cESnf0CugR
HLSgGdvvnqFsCHpgQCCxk6u+x938YAMjAA/X7tls3Ldnu2KuxoYEh925OWTfSOm5
8Mr9zwrap1TChOzWxDzvlnBhGSdY6YwIFZQtCuV00awhhSeBOpmCMJ/xzgBiNy9W
dpW2kJHJWDUx+jk0/UNqiy+NBkNylkd3wm3hHk95AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQULF0Be086dbXoubaOrI6hdrY5DiYwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkL2M2MGYzMTBkLTBjNDMtNGQwNy04MTI1LWRhNWU2OTMyMWUzYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADON4IwDQYJKoZIhvcNAQELBQADggEBAFnrzuEapaL/TANLe98TO/zCzsyy
o/NZ5OqTG6BEGzglGfd1iIfvEjzeRFWGGDUcJb6QfadNB++/kwp+v6yVlCEP/ibr
twLmJW7cmekDw+ClGyG5CcB3ZUChxJ9zZVM7+LjANr718jHnChpcLKZoas094yhp
HSvowYckbP8ik1y8pWadsL7MI0qCilBkVd+LLjTL0WOo6yZ0kBQvLa0ZGKly6qmB
W/RoAdJLWHo4B+7iA6ZisQycB+kCW1xQI9zQgCOIaAkmtnrbGp2NnD+MIBVFgaap
n+fD4d/wN3f2D+wMkUsrWk/SnADbkvlCbaASSR5DuVjPiH/IA3pXCsDsnAk=
-----END CERTIFICATE-----
Generated at Thu Mar 13 23:54:33 2025 by rpki-client