Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a19f6493-68b5-43a3-84ed-a957c3459214.roa
File: a19f6493-68b5-43a3-84ed-a957c3459214.roa (raw, json)
Hash identifier: IZNkepOL+VgtFjWj1+9JkI2+LHeXSdEi3h+lzrH+Kek=
Subject key identifier: F7:C8:BD:53:9B:4E:A7:4A:DF:C2:D3:54:4B:6C:90:F1:7A:57:84:B0
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 56B6DBE8A75A53484B56A2AFC880E44B72D3BF5E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a19f6493-68b5-43a3-84ed-a957c3459214.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 18.96.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:b6:db:e8:a7:5a:53:48:4b:56:a2:af:c8:80:e4:4b:72:d3:bf:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:25:34:1e:7f:6b:f8:20:af:e4:3f:d8:11:35:
41:3a:99:67:db:a6:8b:9f:b1:34:fc:03:05:8e:a5:
3f:52:2e:f9:40:89:3b:ac:06:dc:aa:c9:cf:89:34:
d7:5c:dc:ff:fc:60:4d:20:b8:85:da:71:16:73:61:
62:c4:3a:1d:3a:e5:5b:1b:86:e5:53:56:5e:53:cc:
cf:e7:0b:b4:70:8e:31:4d:fa:f3:17:2e:03:12:12:
b3:2b:87:44:d0:1e:f7:a8:a5:03:5e:37:d6:4d:4e:
9f:68:f2:48:d7:bc:62:62:8e:c3:14:9f:b7:ba:99:
ad:46:50:95:bd:b7:c0:9a:1d:de:89:7f:51:93:72:
58:60:62:71:a8:ea:9d:93:12:0e:89:49:24:0e:94:
9b:8b:b7:4e:94:58:aa:f4:dc:6e:ca:85:28:4b:77:
6d:4d:ef:62:1a:d2:24:a4:b7:89:91:89:ef:68:a5:
50:e1:28:7d:1a:9c:e2:2d:ec:e6:b0:cb:cd:8a:87:
26:da:da:23:aa:f8:e3:d5:b6:80:79:7c:77:de:93:
0e:cc:5c:f8:30:12:8f:ba:6c:c0:00:f7:ef:8e:06:
5a:47:d2:83:9b:0c:d2:88:30:00:c5:61:bc:b7:cd:
91:40:95:69:50:4f:0d:ef:8e:2f:80:70:88:41:fd:
97:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C8:BD:53:9B:4E:A7:4A:DF:C2:D3:54:4B:6C:90:F1:7A:57:84:B0
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a19f6493-68b5-43a3-84ed-a957c3459214.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.96.160.0/19
Signature Algorithm: sha256WithRSAEncryption
4f:ba:dd:06:14:13:44:05:83:17:64:d8:3a:50:b1:c4:25:a9:
c0:9d:87:8b:8d:2c:9b:b0:d2:0c:a7:96:5c:ee:fd:84:a3:52:
ff:fb:13:9d:ff:15:ca:dc:3e:54:f9:98:76:08:9b:f6:a3:f1:
cf:b4:5f:90:b8:73:a2:92:89:93:9c:25:b5:fb:14:f8:26:98:
56:51:3e:e9:2f:20:1c:8a:69:3e:db:e5:0a:da:a8:a3:00:ad:
26:09:5f:4c:12:4f:90:62:11:6a:0a:89:29:aa:ed:f4:fe:63:
09:e7:32:3a:7c:d8:f9:a6:a9:ea:a7:5f:fc:65:42:64:da:8d:
4e:00:ac:68:21:37:92:1d:d8:51:88:cb:72:dd:71:f6:e9:f8:
52:24:1f:bb:67:5f:bf:48:b6:2f:76:b0:be:6e:57:4c:8e:69:
45:34:7e:b6:a8:6d:68:f9:92:55:7e:32:b2:6a:dc:3f:c4:9c:
b9:23:41:6f:e5:3b:30:14:a2:0d:d7:65:cf:ec:ba:e4:ff:80:
b1:28:4b:08:42:06:6b:7d:40:f1:1e:e0:23:e3:f7:59:b5:a6:
92:31:7c:68:2b:d8:1f:19:30:b7:1f:50:9d:1f:41:d2:97:dd:
a3:6d:94:bd:24:8a:76:2a:34:89:8e:4f:cc:1b:7d:b8:e3:0c:
e3:a4:9b:30
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVrbb6KdaU0hLVqKvyIDkS3LTv14wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMjMwMDAwMDAwWhcNMjUwMjAzMjM1OTU5
WjB6MUkwRwYDVQQFE0BjNmQ4MjQzMzY4NTcwOTM1MWU1YjQ5OTA0ZDc3MTM3NDlj
NDIwNmEwY2Q1ZmY0MTM5MzNkM2FjOGExMTRiOGIxMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDEJTQef2v4IK/kP9gRNUE6mWfbpoufsTT8AwWOpT9SLvlA
iTusBtyqyc+JNNdc3P/8YE0guIXacRZzYWLEOh065VsbhuVTVl5TzM/nC7RwjjFN
+vMXLgMSErMrh0TQHveopQNeN9ZNTp9o8kjXvGJijsMUn7e6ma1GUJW9t8CaHd6J
f1GTclhgYnGo6p2TEg6JSSQOlJuLt06UWKr03G7KhShLd21N72Ia0iSkt4mRie9o
pVDhKH0anOIt7Oawy82Khyba2iOq+OPVtoB5fHfekw7MXPgwEo+6bMAA9++OBlpH
0oObDNKIMADFYby3zZFAlWlQTw3vji+AcIhB/ZdtAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU98i9U5tOp0rfwtNUS2yQ8XpXhLAwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2ExOWY2NDkzLTY4YjUtNDNhMy04NGVkLWE5NTdjMzQ1OTIxNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUSYKAwDQYJKoZIhvcNAQELBQADggEBAE+63QYUE0QFgxdk2DpQscQlqcCd
h4uNLJuw0gynllzu/YSjUv/7E53/FcrcPlT5mHYIm/aj8c+0X5C4c6KSiZOcJbX7
FPgmmFZRPukvIByKaT7b5QraqKMArSYJX0wST5BiEWoKiSmq7fT+YwnnMjp82Pmm
qeqnX/xlQmTajU4ArGghN5Id2FGIy3Ldcfbp+FIkH7tnX79Iti92sL5uV0yOaUU0
fraobWj5klV+MrJq3D/EnLkjQW/lOzAUog3XZc/suuT/gLEoSwhCBmt9QPEe4CPj
91m1ppIxfGgr2B8ZMLcfUJ0fQdKX3aNtlL0kinYqNImOT8wbfbjjDOOkmzA=
-----END CERTIFICATE-----
Generated at Thu Mar 13 23:49:16 2025 by rpki-client