Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c4b0723-78f8-449a-adb3-fd4e9d6f390b.roa
File: 5c4b0723-78f8-449a-adb3-fd4e9d6f390b.roa (raw, json)
Hash identifier: E6BmhIFAt60cpth+qO2OJc1Wv1oAPgxjA6/TsRuxMOQ=
Subject key identifier: AA:AD:FD:92:7E:95:ED:A2:80:2F:D1:80:EC:66:AB:08:8C:A5:C0:B5
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 6E189FB45D5154C22551017397C44911C477C3CE
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c4b0723-78f8-449a-adb3-fd4e9d6f390b.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 3.136.0.0/13 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:18:9f:b4:5d:51:54:c2:25:51:01:73:97:c4:49:11:c4:77:c3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0e:00:98:06:90:13:fd:a6:1b:04:79:e6:b3:
ac:56:21:1f:f9:59:32:5f:31:02:85:11:36:da:79:
e1:31:ba:08:ad:6b:e1:78:f5:83:8d:d9:f5:c0:31:
e9:cc:db:dd:2a:61:e0:cd:81:7d:fd:b9:74:4a:d8:
ba:51:4f:88:32:1d:99:c2:9c:cf:1b:66:35:42:22:
2f:5c:5b:43:01:67:24:f9:4f:a8:6f:64:2e:4b:0e:
c7:0c:e8:72:76:59:3e:ea:4b:c4:23:c7:2a:b4:ae:
83:f1:88:21:a6:5d:e2:23:41:a0:c6:d4:78:e7:60:
6c:fc:ab:6f:af:37:1c:00:fa:41:2f:d4:7b:9a:cd:
22:c0:a2:57:e4:c5:4f:31:b8:26:c0:ea:bf:e0:9d:
31:20:c1:bc:19:09:e4:fa:cd:79:c1:58:55:53:65:
28:e7:b2:3a:81:50:87:67:d2:68:3c:60:2b:0e:36:
32:fc:5d:b9:9c:58:24:56:1d:47:2b:cd:21:3a:7f:
c0:44:c6:9c:14:f8:57:6d:44:39:6d:30:7d:83:5f:
c4:9e:62:07:01:65:71:38:ad:32:e8:92:bc:2a:8d:
2b:b8:95:83:b7:b0:1a:c2:0a:8a:e2:c4:d0:ce:0a:
9d:4d:17:de:7d:7a:ba:42:02:d0:71:33:42:95:48:
9c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AD:FD:92:7E:95:ED:A2:80:2F:D1:80:EC:66:AB:08:8C:A5:C0:B5
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c4b0723-78f8-449a-adb3-fd4e9d6f390b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.136.0.0/13
Signature Algorithm: sha256WithRSAEncryption
8c:ca:06:e5:47:d5:50:09:49:11:5b:c6:fa:34:22:c5:1d:ce:
e2:d1:8c:e1:e4:12:3e:4f:f0:09:99:5f:d8:65:1b:a1:29:22:
97:d7:93:1c:28:5a:10:a3:c3:57:53:91:e5:57:b3:11:11:00:
4f:55:ce:4f:bc:47:2b:3d:62:cd:f5:85:36:22:d6:a7:66:ba:
1e:2a:e3:8c:c1:69:7c:83:55:66:3d:94:41:52:5f:b7:fc:32:
09:e3:64:1b:48:0e:31:a7:ba:8c:08:25:ef:a8:2b:dd:1c:9a:
62:ac:98:ff:e4:2c:06:34:60:8a:c6:56:bc:06:70:17:a8:66:
6d:40:12:0b:47:90:58:96:ec:ef:83:fd:75:a4:71:40:6e:cf:
a4:3c:05:f1:12:e0:a6:d5:29:8c:94:a8:65:94:86:86:70:b9:
7d:4a:9b:8b:68:b7:c3:a3:62:75:92:94:85:2c:e5:f6:e4:ec:
1e:9b:ef:79:63:1b:9b:79:c6:f9:95:eb:4d:30:2d:92:7d:74:
0b:a3:a8:d6:59:f4:99:69:a8:32:e5:f0:88:cc:fb:98:4f:e7:
66:3c:27:e1:5f:8d:d2:0b:d5:4e:45:9b:05:7e:9c:5c:07:4f:
04:17:57:b2:84:d3:7d:3a:bb:e1:ac:0b:f6:4e:a4:55:dd:17:
f1:7a:e2:b6
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUbhiftF1RVMIlUQFzl8RJEcR3w84wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMjEzMDAwMDAwWhcNMjUwMTE3MjM1OTU5
WjB6MUkwRwYDVQQFE0BiMjZkODY2YWNlZjNmZDk3MDIwOTczNzBmNmI3OWMxNDk4
ZjliYjIyNWEyMzFmN2E1Y2QxODdjZGM4ZGM0NzJiMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDBDgCYBpAT/aYbBHnms6xWIR/5WTJfMQKFETbaeeExugit
a+F49YON2fXAMenM290qYeDNgX39uXRK2LpRT4gyHZnCnM8bZjVCIi9cW0MBZyT5
T6hvZC5LDscM6HJ2WT7qS8Qjxyq0roPxiCGmXeIjQaDG1HjnYGz8q2+vNxwA+kEv
1HuazSLAolfkxU8xuCbA6r/gnTEgwbwZCeT6zXnBWFVTZSjnsjqBUIdn0mg8YCsO
NjL8XbmcWCRWHUcrzSE6f8BExpwU+FdtRDltMH2DX8SeYgcBZXE4rTLokrwqjSu4
lYO3sBrCCorixNDOCp1NF959erpCAtBxM0KVSJzpAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUqq39kn6V7aKAL9GA7GarCIylwLUwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzVjNGIwNzIzLTc4ZjgtNDQ5YS1hZGIzLWZkNGU5ZDZmMzkwYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwMDiDANBgkqhkiG9w0BAQsFAAOCAQEAjMoG5UfVUAlJEVvG+jQixR3O4tGM
4eQSPk/wCZlf2GUboSkil9eTHChaEKPDV1OR5VezEREAT1XOT7xHKz1izfWFNiLW
p2a6HirjjMFpfINVZj2UQVJft/wyCeNkG0gOMae6jAgl76gr3RyaYqyY/+QsBjRg
isZWvAZwF6hmbUASC0eQWJbs74P9daRxQG7PpDwF8RLgptUpjJSoZZSGhnC5fUqb
i2i3w6NidZKUhSzl9uTsHpvveWMbm3nG+ZXrTTAtkn10C6Oo1ln0mWmoMuXwiMz7
mE/nZjwn4V+N0gvVTkWbBX6cXAdPBBdXsoTTfTq74awL9k6kVd0X8Xritg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:51 2025 by rpki-client