Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/676d75ad-b59d-4df9-9d7b-7c2f8e5da4b8.roa
File: 676d75ad-b59d-4df9-9d7b-7c2f8e5da4b8.roa (raw, json)
Hash identifier: E22DTOJxozNnqGo2DzYRr5JveWB3Y8stFhGRyzO4r/k=
Subject key identifier: 38:C5:2C:35:DC:C0:84:1B:AF:97:F6:C4:39:11:BB:4C:A5:05:BF:2C
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 63A26D57948A911E6728EEFAEB945EAB97127415
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/676d75ad-b59d-4df9-9d7b-7c2f8e5da4b8.roa
Signing time: Fri 20 Dec 2024 00:00:00 +0000
ROA not before: Fri 20 Dec 2024 00:00:00 +0000
ROA not after: Fri 24 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 52.222.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:a2:6d:57:94:8a:91:1e:67:28:ee:fa:eb:94:5e:ab:97:12:74:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 20 00:00:00 2024 GMT
Not After : Jan 24 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:24:2b:3a:fa:70:19:52:9f:66:37:3a:0b:23:
d5:52:71:f2:36:49:b7:a7:b5:ce:dd:97:23:8e:7c:
7f:fd:c9:5f:6a:59:7c:0b:1a:c3:6d:77:3e:96:a9:
dc:7f:0d:83:2e:97:49:39:5b:9d:c7:09:0b:ec:1e:
b5:4f:ce:6e:ad:9c:62:53:09:12:fa:0f:82:d7:0d:
e8:61:a2:20:f9:73:f1:1d:a4:fd:29:fa:41:29:e2:
66:98:81:9a:11:54:23:2b:87:21:a6:59:51:d1:13:
bc:cc:30:af:ce:1a:85:06:ed:29:13:3d:bc:a5:3f:
b2:e8:c9:c6:5c:f8:bf:dd:a8:53:d8:f0:94:7c:f3:
06:fc:b6:1c:16:ee:a9:a7:02:03:ef:79:89:04:5e:
8e:2f:59:aa:0e:30:54:71:dc:29:88:64:22:81:2a:
69:36:cb:d5:0b:b4:ce:03:02:05:9e:55:92:27:cc:
f8:02:f9:8f:34:ab:1b:07:ae:88:21:dd:52:75:9a:
64:7b:71:1c:1a:64:4a:c3:83:3b:5f:0c:80:86:6b:
5d:0f:0a:96:79:87:7e:79:7d:68:2d:d6:63:26:7e:
02:48:f8:35:9a:d3:54:7c:c5:0a:c9:1c:2c:db:2e:
6a:33:99:58:e4:f1:c8:a4:2c:67:12:ca:2d:66:14:
87:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C5:2C:35:DC:C0:84:1B:AF:97:F6:C4:39:11:BB:4C:A5:05:BF:2C
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/676d75ad-b59d-4df9-9d7b-7c2f8e5da4b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.222.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3f:29:2d:4d:4c:d4:a9:92:d4:5d:bd:cd:2d:a9:2a:79:61:52:
ab:b8:81:11:90:6a:2b:97:e0:52:7f:ae:90:7e:78:dc:17:f4:
8d:d7:e1:38:49:63:d9:40:e6:f6:89:ae:13:60:9c:7d:96:8e:
55:b6:71:4e:b7:14:02:63:6b:4f:44:b5:cd:ff:80:18:dd:f5:
b6:41:82:14:10:2d:be:6b:e4:07:56:28:82:61:d3:1a:61:86:
09:70:1c:17:ba:95:86:d8:5a:82:52:5b:fc:ad:90:61:20:cb:
e0:fc:17:4b:b3:c8:60:e1:a8:f6:59:77:07:50:7d:e4:71:9d:
64:16:e2:b7:fb:70:cd:87:78:c4:db:45:9e:ce:0b:c1:7d:6a:
b4:91:f3:1b:5e:f3:2a:b6:b5:30:aa:58:87:61:34:2a:77:14:
47:02:ea:e0:70:4c:3c:29:7d:f6:84:b2:f2:8f:52:9e:1b:1f:
9c:3b:51:33:3f:ac:55:bd:35:1b:a9:ce:74:54:3e:e7:5e:0f:
38:f9:e5:51:cb:ad:c8:17:a9:8d:f1:c4:28:72:64:9b:b5:a9:
6c:71:36:dc:02:c5:0e:a5:43:2d:e2:e9:e0:70:23:c8:79:68:
66:96:d2:6e:89:cb:a1:39:78:21:6d:73:eb:83:1d:b4:89:e1:
8a:e0:99:eb
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUY6JtV5SKkR5nKO7665Req5cSdBUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMjIwMDAwMDAwWhcNMjUwMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0AxNmRkNWRkZjNmOTA1YTQzYTcwZDNiMzY1YmViZTg0YzE5
MDliMjVhMjI3NDE4ZWNjNDM3NTU3ZjgzNTRjMDViMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4JCs6+nAZUp9mNzoLI9VScfI2Sbentc7dlyOOfH/9yV9q
WXwLGsNtdz6Wqdx/DYMul0k5W53HCQvsHrVPzm6tnGJTCRL6D4LXDehhoiD5c/Ed
pP0p+kEp4maYgZoRVCMrhyGmWVHRE7zMMK/OGoUG7SkTPbylP7LoycZc+L/dqFPY
8JR88wb8thwW7qmnAgPveYkEXo4vWaoOMFRx3CmIZCKBKmk2y9ULtM4DAgWeVZIn
zPgC+Y80qxsHrogh3VJ1mmR7cRwaZErDgztfDICGa10PCpZ5h355fWgt1mMmfgJI
+DWa01R8xQrJHCzbLmozmVjk8cikLGcSyi1mFIe7AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUOMUsNdzAhBuvl/bEORG7TKUFvywwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzY3NmQ3NWFkLWI1OWQtNGRmOS05ZDdiLTdjMmY4ZTVkYTRiOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA03jANBgkqhkiG9w0BAQsFAAOCAQEAPyktTUzUqZLUXb3NLakqeWFSq7iB
EZBqK5fgUn+ukH543Bf0jdfhOElj2UDm9omuE2CcfZaOVbZxTrcUAmNrT0S1zf+A
GN31tkGCFBAtvmvkB1YogmHTGmGGCXAcF7qVhthaglJb/K2QYSDL4PwXS7PIYOGo
9ll3B1B95HGdZBbit/twzYd4xNtFns4LwX1qtJHzG17zKra1MKpYh2E0KncURwLq
4HBMPCl99oSy8o9SnhsfnDtRMz+sVb01G6nOdFQ+514POPnlUcutyBepjfHEKHJk
m7WpbHE23ALFDqVDLeLp4HAjyHloZpbSbonLoTl4IW1z64MdtInhiuCZ6w==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:54 2025 by rpki-client