Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b7e9aa31-9c4d-4f9d-a459-1796c0827c81.roa
File: b7e9aa31-9c4d-4f9d-a459-1796c0827c81.roa (raw, json)
Hash identifier: 3ZNSCxg/s09gVS/7Ij2yX4l5xOh50S3xlBGqDJF0Y4M=
Subject key identifier: B9:38:49:10:9E:E6:6F:29:F0:A2:36:CE:41:2C:D5:60:A7:A7:8B:EC
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5DB67BC5D62F97AE4706488E7BF667B65C7DB582
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b7e9aa31-9c4d-4f9d-a459-1796c0827c81.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.152.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:b6:7b:c5:d6:2f:97:ae:47:06:48:8e:7b:f6:67:b6:5c:7d:b5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7a:d8:47:d5:4e:39:61:bf:f6:71:fe:d4:62:
ce:ea:eb:0d:2e:74:06:40:2f:b3:b7:c6:0a:db:e3:
4a:8b:9b:6f:ab:e9:9f:64:9c:68:8b:84:3d:d2:0d:
b0:4e:d8:74:10:5e:be:61:da:75:40:8f:d1:4b:3f:
ec:42:9d:35:f4:bf:15:96:42:45:01:d6:d8:d3:9a:
5a:70:5a:65:e7:00:dc:8e:b0:08:83:b6:86:79:fb:
42:75:4d:fb:6b:cb:b5:d2:0b:f1:17:da:a2:d2:1b:
42:38:40:d6:3b:04:74:a8:c7:25:86:ff:65:07:4c:
b8:7b:5b:81:c5:44:b2:67:bb:a1:24:ff:47:2b:14:
e2:98:c5:68:78:f0:05:63:b6:03:b2:6e:57:ae:97:
45:a9:07:5c:f8:33:af:6d:f5:c1:19:5e:37:41:75:
c5:19:80:51:a7:c2:51:a5:62:5f:7a:50:34:b6:6b:
62:1d:5a:0d:b9:3d:92:f4:19:60:b8:44:68:46:36:
18:0d:70:0a:61:66:a1:89:92:10:00:1c:c9:51:0f:
94:b4:d3:30:10:4a:e9:57:86:67:1b:df:a8:6a:7f:
a8:1c:a4:0a:e8:71:ff:47:d7:8e:c4:43:40:7d:7f:
e9:65:96:36:09:68:25:1a:3b:78:cd:1c:d7:d9:38:
a9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:38:49:10:9E:E6:6F:29:F0:A2:36:CE:41:2C:D5:60:A7:A7:8B:EC
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b7e9aa31-9c4d-4f9d-a459-1796c0827c81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.152.0.0/16
Signature Algorithm: sha256WithRSAEncryption
68:8f:5e:8a:f5:e9:cc:e0:f1:19:20:d3:a8:dc:47:fc:c7:3d:
d1:1c:3d:ba:a4:31:fc:09:d3:d6:f5:d7:1c:84:02:0d:82:5c:
74:e0:c9:9c:5a:3b:b3:9a:1f:6e:63:35:5a:c8:f0:6f:bc:7f:
98:7f:66:d7:0d:ca:3d:9a:00:2a:f8:12:60:53:0c:c9:ff:8d:
13:f6:36:51:ff:47:eb:54:f8:4b:71:d1:e8:ad:67:1b:08:3b:
db:b6:a6:3a:02:f5:95:db:59:50:75:aa:80:68:2c:f2:4f:a2:
fb:3a:50:63:07:0c:53:93:23:3f:30:15:1d:e4:b6:f4:85:d2:
d4:e0:13:bf:0a:fb:43:e4:3c:05:c9:4c:36:66:29:07:03:24:
5d:a3:4f:4b:28:31:2f:3a:2c:63:22:48:e0:02:94:6d:34:37:
10:da:91:0b:f6:e1:f2:5a:fd:03:1c:f5:71:f9:48:3c:75:33:
27:59:87:b8:01:9f:a8:ec:16:eb:08:fc:34:40:8f:0d:88:9e:
35:5d:76:b9:ea:ef:a2:68:43:75:81:07:94:03:c8:e1:cf:9f:
b9:94:35:f4:ea:a5:a2:98:2c:36:c7:77:5f:91:c4:5a:6b:55:
5a:2d:6a:fc:24:3e:db:e5:a5:55:08:bb:58:cc:f5:c8:45:f4:
95:16:8a:1f
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUXbZ7xdYvl65HBkiOe/Zntlx9tYIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMjE3MDAwMDAwWhcNMjUwMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AxMGJjOTI2ODA3ZGE2MmYwZWUwNGFmYzU4MzcxNjdjNGNm
Y2VlODk3Y2E0MzZhNmIxZDVmYjA4MWNkMWY0NjgzMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDTethH1U45Yb/2cf7UYs7q6w0udAZAL7O3xgrb40qLm2+r
6Z9knGiLhD3SDbBO2HQQXr5h2nVAj9FLP+xCnTX0vxWWQkUB1tjTmlpwWmXnANyO
sAiDtoZ5+0J1Tftry7XSC/EX2qLSG0I4QNY7BHSoxyWG/2UHTLh7W4HFRLJnu6Ek
/0crFOKYxWh48AVjtgOybleul0WpB1z4M69t9cEZXjdBdcUZgFGnwlGlYl96UDS2
a2IdWg25PZL0GWC4RGhGNhgNcAphZqGJkhAAHMlRD5S00zAQSulXhmcb36hqf6gc
pArocf9H147EQ0B9f+llljYJaCUaO3jNHNfZOKnfAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUuThJEJ7mbynwojbOQSzVYKeni+wwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2I3ZTlhYTMxLTljNGQtNGY5ZC1hNDU5LTE3OTZjMDgyN2M4MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAjmDANBgkqhkiG9w0BAQsFAAOCAQEAaI9eivXpzODxGSDTqNxH/Mc90Rw9
uqQx/AnT1vXXHIQCDYJcdODJnFo7s5ofbmM1Wsjwb7x/mH9m1w3KPZoAKvgSYFMM
yf+NE/Y2Uf9H61T4S3HR6K1nGwg727amOgL1ldtZUHWqgGgs8k+i+zpQYwcMU5Mj
PzAVHeS29IXS1OATvwr7Q+Q8BclMNmYpBwMkXaNPSygxLzosYyJI4AKUbTQ3ENqR
C/bh8lr9Axz1cflIPHUzJ1mHuAGfqOwW6wj8NECPDYieNV12uervomhDdYEHlAPI
4c+fuZQ19OqlopgsNsd3X5HEWmtVWi1q/CQ+2+WlVQi7WMz1yEX0lRaKHw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:00 2025 by rpki-client