Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8e2d7f16-925d-4725-98c0-ebeb08d8b2d7.roa
File: 8e2d7f16-925d-4725-98c0-ebeb08d8b2d7.roa (raw, json)
Hash identifier: AuZF4DNY2TCDRe2rvND9qINAuya2rx9n8nhAi4urQb8=
Subject key identifier: 18:3B:2B:95:A3:16:23:F4:ED:1A:31:B2:F4:1A:8A:69:41:4B:09:A9
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 480B2F033DA238B2615D0524835B104B2BB0A98E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8e2d7f16-925d-4725-98c0-ebeb08d8b2d7.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.144.0.0/12 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:0b:2f:03:3d:a2:38:b2:61:5d:05:24:83:5b:10:4b:2b:b0:a9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b8:fd:34:47:4d:39:c9:32:3c:ea:f4:ca:2e:
0d:9b:f8:bb:1a:80:b6:b2:9a:66:11:a8:cd:2e:bf:
df:62:25:62:a2:47:e8:f0:c6:8c:68:21:33:ae:ca:
99:51:bd:30:5e:10:6a:7d:1f:b0:18:0f:96:84:47:
8f:89:cd:eb:81:15:cf:6d:c7:65:2f:01:a7:aa:9e:
49:4d:5a:6f:d0:06:05:f5:24:55:fb:48:b9:47:07:
08:f8:0f:49:71:85:f8:0c:3a:02:e4:da:ea:87:8f:
7c:96:fd:cc:ec:d6:68:71:f9:30:3c:f1:33:c0:96:
ca:bd:62:4e:15:af:c7:ab:28:6c:17:7b:7a:98:94:
45:48:4b:8c:11:06:9d:e6:1d:a6:3d:3d:a4:39:9f:
98:46:ef:35:85:a4:c8:11:ba:22:c5:e7:ae:59:6c:
0d:6f:a5:2a:d6:7e:8e:bd:bb:70:05:4a:23:8e:9b:
a1:a5:ef:cd:96:e2:15:70:32:b4:35:f7:ca:d3:eb:
ab:ae:93:34:ce:2b:28:64:6e:0d:6b:eb:c2:ac:ca:
58:12:28:c6:95:b8:15:81:24:42:11:f0:ec:3f:05:
9a:4c:51:48:10:a3:0b:c6:75:7c:46:b0:09:d2:0a:
8a:e3:3c:4a:9d:9a:f8:9f:c8:1d:26:22:38:6d:ff:
f8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3B:2B:95:A3:16:23:F4:ED:1A:31:B2:F4:1A:8A:69:41:4B:09:A9
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8e2d7f16-925d-4725-98c0-ebeb08d8b2d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.144.0.0/12
Signature Algorithm: sha256WithRSAEncryption
42:e4:b4:fd:6a:ba:ba:0c:ff:78:a0:97:36:9b:4c:aa:db:56:
6d:28:a2:83:aa:b0:e0:a8:8c:3b:af:8a:b2:51:5d:df:35:0a:
d5:09:4f:ef:64:85:4d:8b:7c:55:0c:05:63:fe:5b:41:8f:0a:
4b:78:4a:a1:b1:bd:ad:8a:f0:60:3b:57:74:2c:f4:83:1f:e8:
bf:b5:e0:70:15:3c:ac:b7:72:63:41:81:4c:3c:7c:48:3b:ff:
64:93:5b:cb:ec:5f:23:e5:c9:24:2a:4e:58:df:4c:6f:79:68:
0a:46:a5:c7:83:61:90:3d:a5:67:7d:74:7a:86:67:27:0d:2f:
fb:06:23:d3:8f:c7:1c:58:7b:60:2a:47:22:73:7b:e2:de:7c:
d3:1c:f3:8f:b7:f9:9e:d9:0f:77:ec:55:7b:23:5b:6e:23:e9:
5d:7f:5e:5a:67:b4:9f:20:07:cb:c5:b2:b2:01:a3:e3:00:4b:
82:88:5a:5b:e5:ae:64:cc:41:79:41:8d:5e:48:42:50:4d:59:
c0:3b:d7:64:0a:d3:5a:4e:a5:98:9e:7b:24:90:13:9b:74:ad:
1e:24:5d:b6:53:6d:22:95:1f:fa:a2:07:fd:57:03:c9:90:fa:
28:53:d8:73:a0:fa:98:e6:a9:b2:7c:c6:3f:77:01:ce:b7:1e:
bc:87:c0:d5
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUSAsvAz2iOLJhXQUkg1sQSyuwqY4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTA2MDAwMDAwWhcNMjUwMjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BhZDY1NzUxNjg0OGVhMzBlZmFmZTJhZWM5N2UyY2U2NWEy
MTNiYmQ1ODA5NTUyZjY3YzNkMjhhZDAzZTA2ZjE5MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwuP00R005yTI86vTKLg2b+LsagLaymmYRqM0uv99iJWKi
R+jwxoxoITOuyplRvTBeEGp9H7AYD5aER4+JzeuBFc9tx2UvAaeqnklNWm/QBgX1
JFX7SLlHBwj4D0lxhfgMOgLk2uqHj3yW/czs1mhx+TA88TPAlsq9Yk4Vr8erKGwX
e3qYlEVIS4wRBp3mHaY9PaQ5n5hG7zWFpMgRuiLF565ZbA1vpSrWfo69u3AFSiOO
m6Gl782W4hVwMrQ198rT66uukzTOKyhkbg1r68KsylgSKMaVuBWBJEIR8Ow/BZpM
UUgQowvGdXxGsAnSCorjPEqdmvifyB0mIjht//jZAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUGDsrlaMWI/TtGjGy9BqKaUFLCakwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzhlMmQ3ZjE2LTkyNWQtNDcyNS05OGMwLWViZWIwOGQ4YjJkNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwQ2kDANBgkqhkiG9w0BAQsFAAOCAQEAQuS0/Wq6ugz/eKCXNptMqttWbSii
g6qw4KiMO6+KslFd3zUK1QlP72SFTYt8VQwFY/5bQY8KS3hKobG9rYrwYDtXdCz0
gx/ov7XgcBU8rLdyY0GBTDx8SDv/ZJNby+xfI+XJJCpOWN9Mb3loCkalx4NhkD2l
Z310eoZnJw0v+wYj04/HHFh7YCpHInN74t580xzzj7f5ntkPd+xVeyNbbiPpXX9e
Wme0nyAHy8WysgGj4wBLgohaW+WuZMxBeUGNXkhCUE1ZwDvXZArTWk6lmJ57JJAT
m3StHiRdtlNtIpUf+qIH/VcDyZD6KFPYc6D6mOapsnzGP3cBzrcevIfA1Q==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:19 2025 by rpki-client