Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ca6cbc40-ca2c-47e0-80d8-162e04b41ac0.roa
File: ca6cbc40-ca2c-47e0-80d8-162e04b41ac0.roa (raw, json)
Hash identifier: T7MFbMiy5M/SOVAW4DggGCZGT60SnY8cbbJ2qbOf6wY=
Subject key identifier: 73:55:26:09:BA:1E:E7:30:28:8F:15:DF:6E:49:80:37:EA:0D:2C:73
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 51FEF7432D171F7BAC956AF20A50F51464113144
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ca6cbc40-ca2c-47e0-80d8-162e04b41ac0.roa
Signing time: Fri 20 Dec 2024 00:00:00 +0000
ROA not before: Fri 20 Dec 2024 00:00:00 +0000
ROA not after: Fri 24 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.153.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:fe:f7:43:2d:17:1f:7b:ac:95:6a:f2:0a:50:f5:14:64:11:31:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 20 00:00:00 2024 GMT
Not After : Jan 24 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:11:37:ef:01:29:87:3d:fa:b7:a4:4d:62:61:
80:01:a0:e6:4a:63:db:3c:aa:72:fc:6a:b8:25:9b:
f0:36:ba:e4:9d:40:e8:3f:42:9e:23:6d:d2:63:75:
65:da:cd:e7:e8:7e:be:bd:5c:87:72:90:b5:d3:cf:
32:54:d5:e1:84:cd:f4:74:44:f1:90:4c:7b:7e:30:
d0:4a:42:75:a4:38:10:01:92:e4:a8:6f:03:41:fe:
5b:a8:be:98:19:c8:dc:8e:22:f6:92:4e:4f:f3:00:
e0:5d:55:39:16:bf:a4:92:27:bf:37:6a:27:e5:f8:
07:b1:de:60:b8:d7:92:02:41:82:f6:ee:19:1f:8f:
7b:27:78:06:61:80:e6:f0:45:85:a5:0a:5f:0a:9f:
94:18:b9:40:67:6a:dd:8d:04:b2:57:63:4d:e4:59:
cd:8c:85:7f:e1:47:48:36:d2:3b:42:1b:87:06:a6:
fc:bd:83:ae:9b:9a:c1:01:5e:b5:c0:45:31:5d:ae:
ca:bc:b2:80:ef:2d:5d:4e:d5:d4:7d:6e:d2:35:9d:
ab:98:22:76:6d:7c:75:48:67:b3:01:cc:47:e5:e0:
c1:8e:fd:20:88:3c:54:15:9f:d5:80:45:f6:d5:1c:
5f:3a:d1:23:28:8c:9f:d3:f8:2e:1b:63:a0:db:ef:
74:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:55:26:09:BA:1E:E7:30:28:8F:15:DF:6E:49:80:37:EA:0D:2C:73
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ca6cbc40-ca2c-47e0-80d8-162e04b41ac0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.153.0.0/17
Signature Algorithm: sha256WithRSAEncryption
85:85:b0:8a:0e:b4:f4:d3:e0:99:f5:16:b3:f4:16:17:15:4e:
40:ce:7b:7b:cc:37:e9:6d:28:5e:a6:56:ec:80:19:55:98:93:
38:a4:b2:b1:b6:ae:a8:7b:d5:ae:c2:19:92:de:8a:e6:19:ad:
39:a2:de:bb:ab:02:c2:32:b8:36:10:5d:f2:77:2c:e1:9d:26:
49:24:a9:0c:52:1c:fb:bc:87:2b:69:00:ea:19:86:18:bd:ad:
26:f1:11:05:97:65:bc:33:56:9d:01:ef:3a:da:b7:83:4e:72:
ca:56:62:87:ef:30:98:18:8f:76:e2:1f:be:5c:7a:7a:20:5a:
eb:de:a8:ab:0f:82:26:91:ec:4a:ca:d4:15:9d:dd:bb:bf:1d:
54:15:1c:99:66:1f:77:e0:e2:11:cf:bd:64:54:65:c1:26:95:
5a:e5:7b:49:be:53:59:1b:d5:cc:e3:b9:c4:07:f1:bc:c9:a5:
81:7e:ea:e2:24:a6:ca:a2:f5:cd:e6:22:6b:68:2f:71:8d:ed:
57:8c:04:a6:51:8c:04:7e:4d:87:6d:93:f5:2a:96:82:21:38:
97:15:d6:be:c2:5a:fb:a2:b2:a7:30:d1:ac:09:66:40:5d:47:
56:2e:73:f4:cd:c6:fd:ab:bb:84:39:b9:b0:8f:b6:69:e7:f4:
b5:ca:5d:0c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUUf73Qy0XH3uslWryClD1FGQRMUQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMjIwMDAwMDAwWhcNMjUwMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BhZTQyM2IxNmI5MmY3OWQ4YzYyOGU5OTgxMzQwODMyNjgx
YTkzYzBlYTcxNTE3NTQ3N2U3NWZjNzVkMmUzZTJiMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4ETfvASmHPfq3pE1iYYABoOZKY9s8qnL8arglm/A2uuSd
QOg/Qp4jbdJjdWXazefofr69XIdykLXTzzJU1eGEzfR0RPGQTHt+MNBKQnWkOBAB
kuSobwNB/luovpgZyNyOIvaSTk/zAOBdVTkWv6SSJ783aifl+Aex3mC415ICQYL2
7hkfj3sneAZhgObwRYWlCl8Kn5QYuUBnat2NBLJXY03kWc2MhX/hR0g20jtCG4cG
pvy9g66bmsEBXrXARTFdrsq8soDvLV1O1dR9btI1nauYInZtfHVIZ7MBzEfl4MGO
/SCIPFQVn9WARfbVHF860SMojJ/T+C4bY6Db73ThAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUc1UmCboe5zAojxXfbkmAN+oNLHMwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2NhNmNiYzQwLWNhMmMtNDdlMC04MGQ4LTE2MmUwNGI0MWFjMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAc2mQAwDQYJKoZIhvcNAQELBQADggEBAIWFsIoOtPTT4Jn1FrP0FhcVTkDO
e3vMN+ltKF6mVuyAGVWYkziksrG2rqh71a7CGZLeiuYZrTmi3rurAsIyuDYQXfJ3
LOGdJkkkqQxSHPu8hytpAOoZhhi9rSbxEQWXZbwzVp0B7zrat4NOcspWYofvMJgY
j3biH75cenogWuveqKsPgiaR7ErK1BWd3bu/HVQVHJlmH3fg4hHPvWRUZcEmlVrl
e0m+U1kb1czjucQH8bzJpYF+6uIkpsqi9c3mImtoL3GN7VeMBKZRjAR+TYdtk/Uq
loIhOJcV1r7CWvuisqcw0awJZkBdR1Yuc/TNxv2ru4Q5ubCPtmnn9LXKXQw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:24 2025 by rpki-client