Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/045d1b5f-a0f2-4f5d-8148-0e3f11c96343.roa
File: 045d1b5f-a0f2-4f5d-8148-0e3f11c96343.roa (raw, json)
Hash identifier: 1xH//Kh1LxjpEUyxc4oONJpwz7xNF5q4D9hrEEr1tvg=
Subject key identifier: 8E:6E:07:EC:44:9B:B3:4B:B6:87:DB:F4:5D:AE:41:50:98:2C:92:73
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 1417542E45D492B0A4DCB4DC40B2B699D2A2549B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/045d1b5f-a0f2-4f5d-8148-0e3f11c96343.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 52.2.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:17:54:2e:45:d4:92:b0:a4:dc:b4:dc:40:b2:b6:99:d2:a2:54:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:09:5d:70:0f:4b:b6:7a:4e:92:06:78:7f:56:
94:52:af:0b:ed:87:df:b3:6b:b5:73:b6:71:d2:a7:
ac:de:dc:76:f6:f2:2d:b6:a7:a4:fd:51:b2:0d:7d:
4f:a5:02:fe:70:5f:1e:ee:e0:35:83:15:f0:7b:66:
92:50:e5:72:ff:80:04:a1:ee:45:84:19:15:60:c2:
2c:f7:2a:2c:65:7a:fe:b7:93:88:d8:05:1a:48:59:
2d:03:80:9d:87:11:70:29:69:b3:f4:a2:d4:57:ad:
75:c2:35:06:68:4a:18:bb:38:d2:f1:4e:83:92:6c:
95:f8:b4:8a:c8:96:92:0f:89:32:d7:6b:72:7b:fc:
13:b7:e0:14:80:a8:a2:79:00:39:23:21:ac:97:a2:
6a:0a:18:6e:b1:2a:f0:32:e5:6c:3f:79:44:16:1c:
d5:e2:cc:1b:22:37:e7:1d:5a:4d:99:b5:ba:ad:5c:
89:98:57:09:e1:58:eb:b4:5e:53:49:cf:9b:7c:56:
b1:81:e9:81:6b:4c:0d:ab:db:89:f6:86:02:05:dd:
d0:4b:67:fb:b9:1c:37:a3:78:ca:ce:46:08:11:82:
27:0d:83:5c:e6:22:2b:f5:f2:f6:43:b7:8e:36:1d:
ce:84:5c:cc:0b:9e:89:0a:dc:af:59:89:11:1f:63:
a5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6E:07:EC:44:9B:B3:4B:B6:87:DB:F4:5D:AE:41:50:98:2C:92:73
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/045d1b5f-a0f2-4f5d-8148-0e3f11c96343.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.2.0.0/15
Signature Algorithm: sha256WithRSAEncryption
ae:54:fb:d6:d7:df:73:c1:e7:07:bb:17:94:af:a2:dd:b1:2d:
90:e2:d0:88:4f:f6:ca:dd:8c:07:38:38:85:91:dd:86:22:7a:
60:75:ea:ea:ef:4d:22:77:ad:67:64:1a:49:f0:9a:9b:d4:94:
28:e5:7d:f1:77:5d:1d:0d:16:47:73:e3:81:92:05:42:b3:7a:
e4:05:be:a2:cc:66:a6:bf:62:39:68:92:37:04:52:8c:76:aa:
44:b6:db:b7:35:6a:e7:3a:d9:96:78:44:c1:f5:6f:3c:68:3d:
7e:22:39:db:cb:3d:d1:41:ec:77:ea:b0:0f:6f:b5:6c:c2:cc:
56:05:a1:cb:fd:62:a5:24:f4:4d:16:bd:09:67:c6:32:4a:ae:
ef:da:c0:e6:da:e5:f9:e5:e2:d7:4f:86:e0:5c:29:ae:c0:03:
64:56:02:fd:ef:27:57:1d:ea:1b:ae:6d:a7:ac:b5:8a:f4:c2:
c9:65:08:8a:93:cc:8a:87:2d:2c:f5:64:40:5d:f3:9b:79:da:
a7:b2:86:97:2f:f9:80:c0:4b:35:2d:6c:47:c6:f3:64:94:b3:
7f:44:7e:8a:e0:67:23:cb:7d:91:54:9f:d1:30:53:c7:b0:8c:
9b:7e:c2:83:9d:9a:b8:98:04:6a:fb:8e:95:51:41:96:ae:f5:
12:6e:87:35
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUFBdULkXUkrCk3LTcQLK2mdKiVJswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMjE3MDAwMDAwWhcNMjUwMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BkNTVhNGQzMjU4ODJiMGQ4YjIxZjA0YjNhZGRmNjA2OGM4
MmEwZTI5YjRiY2YwYmQ1NmU5OWJjMDg5NjNhOWM0MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCgCV1wD0u2ek6SBnh/VpRSrwvth9+za7VztnHSp6ze3Hb2
8i22p6T9UbINfU+lAv5wXx7u4DWDFfB7ZpJQ5XL/gASh7kWEGRVgwiz3Kixlev63
k4jYBRpIWS0DgJ2HEXApabP0otRXrXXCNQZoShi7ONLxToOSbJX4tIrIlpIPiTLX
a3J7/BO34BSAqKJ5ADkjIayXomoKGG6xKvAy5Ww/eUQWHNXizBsiN+cdWk2Ztbqt
XImYVwnhWOu0XlNJz5t8VrGB6YFrTA2r24n2hgIF3dBLZ/u5HDejeMrORggRgicN
g1zmIiv18vZDt442Hc6EXMwLnokK3K9ZiREfY6VlAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUjm4H7ESbs0u2h9v0Xa5BUJgsknMwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzA0NWQxYjVmLWEwZjItNGY1ZC04MTQ4LTBlM2YxMWM5NjM0My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwE0AjANBgkqhkiG9w0BAQsFAAOCAQEArlT71tffc8HnB7sXlK+i3bEtkOLQ
iE/2yt2MBzg4hZHdhiJ6YHXq6u9NInetZ2QaSfCam9SUKOV98XddHQ0WR3PjgZIF
QrN65AW+osxmpr9iOWiSNwRSjHaqRLbbtzVq5zrZlnhEwfVvPGg9fiI528s90UHs
d+qwD2+1bMLMVgWhy/1ipST0TRa9CWfGMkqu79rA5trl+eXi10+G4FwprsADZFYC
/e8nVx3qG65tp6y1ivTCyWUIipPMioctLPVkQF3zm3nap7KGly/5gMBLNS1sR8bz
ZJSzf0R+iuBnI8t9kVSf0TBTx7CMm37Cg52auJgEavuOlVFBlq71Em6HNQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:42 2025 by rpki-client