Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/da61f5fd-f77d-4492-b823-78a22b00a76d.roa
File: da61f5fd-f77d-4492-b823-78a22b00a76d.roa (raw, json)
Hash identifier: rFGr18vWa31L0f/+SRzHu6Dznym8oEx6OBsat0w/geI=
Subject key identifier: 0B:D3:EB:32:76:0A:55:4B:7A:26:D3:EA:B8:AF:C1:84:8F:33:01:33
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 24408057323D615195F98E3872629A0E373F78F0
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/da61f5fd-f77d-4492-b823-78a22b00a76d.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.176.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:40:80:57:32:3d:61:51:95:f9:8e:38:72:62:9a:0e:37:3f:78:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c0:c8:86:63:06:22:f6:80:a4:bd:8a:2d:72:
15:35:00:6e:de:b4:14:5e:97:6b:56:f8:72:87:66:
dc:9a:cc:4c:b6:0d:54:b9:70:bc:5d:bb:a3:b0:6c:
7c:f6:4d:48:97:37:b6:25:85:a6:b7:e4:ce:81:4b:
e3:bf:8c:be:ca:93:2e:e2:1b:6d:f3:1b:77:01:49:
a7:16:45:fe:a2:0b:c3:37:2d:06:f6:be:d5:32:43:
c6:be:37:af:21:f9:ca:46:88:43:2a:05:69:10:87:
47:a6:60:01:27:a3:fb:87:50:97:0e:9b:64:12:f1:
d0:36:aa:2a:94:ef:39:6e:bf:a7:c7:b9:c5:30:55:
26:f1:1f:9e:c1:38:b1:6a:b7:62:8e:b1:a6:93:7f:
8e:b5:8e:46:16:a2:e8:ac:16:2b:1a:f9:2f:37:96:
5a:ed:18:78:5b:27:a3:38:d5:3c:d6:15:39:09:d6:
77:cc:61:3d:28:4e:9d:14:b7:ab:37:0f:d9:b8:7e:
c4:a1:f8:e6:79:42:78:01:5b:84:f8:1c:83:a5:b9:
66:48:fc:35:22:73:f8:0b:d4:e8:42:b9:70:63:af:
63:32:55:8d:32:15:87:fc:fc:4b:18:80:c7:d6:a7:
cc:d5:02:d1:cb:56:df:76:18:df:d3:39:9e:fa:f2:
db:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D3:EB:32:76:0A:55:4B:7A:26:D3:EA:B8:AF:C1:84:8F:33:01:33
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/da61f5fd-f77d-4492-b823-78a22b00a76d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.176.0.0/15
Signature Algorithm: sha256WithRSAEncryption
92:81:d5:41:d5:27:00:6f:f1:75:62:8f:3c:1d:dc:60:5a:51:
61:23:fe:ed:6c:a1:29:a8:01:54:3b:14:22:4a:2a:13:6b:e4:
1c:3e:c3:9f:14:7d:c6:8f:a9:25:a1:6d:5f:32:38:58:48:09:
d5:fd:01:8b:ac:1b:69:6c:1f:17:f1:cd:f9:bf:48:d9:67:d9:
ec:c1:99:5e:e0:6e:bd:54:42:44:06:80:c1:59:4e:c8:a4:78:
76:09:4f:60:f9:1c:ea:9e:32:38:04:bf:79:94:15:c3:f7:06:
c2:cc:08:36:5b:e4:dd:a7:23:f9:17:1b:71:8a:9c:20:0c:de:
ab:55:60:2e:0d:bb:d9:a6:0a:f8:b5:94:db:15:44:6b:00:3d:
ff:5e:3f:90:98:c2:67:70:04:00:04:b1:32:95:81:68:1f:41:
ce:15:9b:4d:bc:30:8a:1b:2c:48:d1:97:aa:fa:90:db:a0:b0:
2c:79:75:ac:89:05:8b:d5:e8:0a:07:3f:5b:3b:1a:35:79:2c:
f5:ed:63:47:34:0a:ba:9b:43:b0:5d:61:1a:b2:4c:f8:54:e6:
2e:d0:51:9c:18:f2:c0:49:ba:c5:b0:58:12:18:91:69:97:f1:
66:11:f7:42:c5:9a:9e:3b:98:43:f7:c9:02:c1:5b:ff:f0:35:
74:74:c4:24
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUJECAVzI9YVGV+Y44cmKaDjc/ePAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMjEwMDAwMDAwWhcNMjUwMTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BjZjQyZTBjNzkyYTM1NTQxYTI1ODJmMmViYTIyZDc5ZWE2
MjkxMmE2ZDJkNWYzYzM3Zjk0MDUwNzQwYjk1MWUxMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQClwMiGYwYi9oCkvYotchU1AG7etBRel2tW+HKHZtyazEy2
DVS5cLxdu6OwbHz2TUiXN7Ylhaa35M6BS+O/jL7Kky7iG23zG3cBSacWRf6iC8M3
LQb2vtUyQ8a+N68h+cpGiEMqBWkQh0emYAEno/uHUJcOm2QS8dA2qiqU7zluv6fH
ucUwVSbxH57BOLFqt2KOsaaTf461jkYWouisFisa+S83llrtGHhbJ6M41TzWFTkJ
1nfMYT0oTp0Ut6s3D9m4fsSh+OZ5QngBW4T4HIOluWZI/DUic/gL1OhCuXBjr2My
VY0yFYf8/EsYgMfWp8zVAtHLVt92GN/TOZ768tuPAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUC9PrMnYKVUt6JtPquK/BhI8zATMwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2RhNjFmNWZkLWY3N2QtNDQ5Mi1iODIzLTc4YTIyYjAwYTc2ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwE2sDANBgkqhkiG9w0BAQsFAAOCAQEAkoHVQdUnAG/xdWKPPB3cYFpRYSP+
7WyhKagBVDsUIkoqE2vkHD7DnxR9xo+pJaFtXzI4WEgJ1f0Bi6wbaWwfF/HN+b9I
2WfZ7MGZXuBuvVRCRAaAwVlOyKR4dglPYPkc6p4yOAS/eZQVw/cGwswINlvk3acj
+RcbcYqcIAzeq1VgLg272aYK+LWU2xVEawA9/14/kJjCZ3AEAASxMpWBaB9BzhWb
TbwwihssSNGXqvqQ26CwLHl1rIkFi9XoCgc/WzsaNXks9e1jRzQKuptDsF1hGrJM
+FTmLtBRnBjywEm6xbBYEhiRaZfxZhH3QsWanjuYQ/fJAsFb//A1dHTEJA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:24 2025 by rpki-client