Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fac65241-fbb8-4cde-a9ec-bf9aaa2bb8fd.roa
File: fac65241-fbb8-4cde-a9ec-bf9aaa2bb8fd.roa (raw, json)
Hash identifier: plTIl+eghGricLFK8DbvBsirg3dVD/OWGv18Gm0GynM=
Subject key identifier: 4C:BA:79:30:FF:DD:81:E0:1A:C4:61:4B:5D:19:93:A7:5D:5D:A6:A4
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 276D0AEA6B6CD88A96981661D51BC33447A165AF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fac65241-fbb8-4cde-a9ec-bf9aaa2bb8fd.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 18.194.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:6d:0a:ea:6b:6c:d8:8a:96:98:16:61:d5:1b:c3:34:47:a1:65:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e3:3e:c0:82:9e:45:8e:25:99:46:5b:38:85:
2b:cd:84:2a:53:ec:17:24:86:f2:26:68:bb:a2:72:
a8:2f:95:f7:6e:b6:a6:7d:9a:05:32:4b:fa:12:6a:
51:01:3f:b2:70:e7:69:0b:57:a6:c9:33:6e:7e:1d:
44:a7:90:e9:80:b8:f5:a6:51:d0:8a:55:b7:05:b9:
2c:e5:01:a4:b4:90:b0:7c:8a:be:88:38:af:33:a7:
ff:b7:b5:f0:8b:b4:ed:06:9a:ec:9f:56:f4:65:b6:
43:1c:66:8a:75:9e:47:e7:fb:cc:2c:1a:82:7b:12:
8d:1c:bd:d5:7a:ba:41:1e:ab:66:fa:99:7c:d9:74:
25:50:a8:bc:ea:15:6c:b0:19:ca:3d:25:5b:0c:7e:
af:a0:d4:df:d8:08:92:39:f5:6b:a6:c9:52:73:66:
65:27:1a:c6:e8:88:c2:23:0d:1f:de:82:6a:8a:b9:
d7:35:b6:bc:fb:0f:2d:3a:63:5b:76:b5:76:c0:3b:
52:ef:5d:39:b4:d0:ad:51:5c:a3:f8:02:74:15:fc:
38:80:77:4a:35:31:26:48:ec:89:b9:f4:bf:c2:3e:
2e:27:7a:0a:f7:d9:13:d7:27:dc:87:40:37:89:60:
79:66:b6:f3:a8:78:d2:4d:87:57:ac:ef:41:4a:7d:
f9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BA:79:30:FF:DD:81:E0:1A:C4:61:4B:5D:19:93:A7:5D:5D:A6:A4
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fac65241-fbb8-4cde-a9ec-bf9aaa2bb8fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.194.0.0/15
Signature Algorithm: sha256WithRSAEncryption
49:35:98:63:f1:12:96:b0:85:5d:25:07:b5:43:b5:04:cf:72:
41:2e:52:57:67:0d:db:ff:ac:71:3b:73:87:39:46:2d:55:46:
e6:22:1a:75:a4:86:fa:b6:0f:6f:a3:89:10:8b:b6:e7:c3:37:
db:ca:25:bb:a9:80:02:f7:de:39:bc:64:98:11:de:9e:ce:e4:
4b:e3:94:22:a9:fe:ad:2d:70:b2:40:e4:90:bb:ff:7a:b5:6c:
01:9b:fc:f0:9b:15:e3:af:a1:73:17:af:88:0d:79:d5:77:ff:
43:f8:a1:9b:46:26:3f:3a:90:de:78:e4:62:22:dc:98:d0:fb:
7d:95:10:1c:dd:44:6d:f5:a1:fe:02:0f:45:db:c6:00:50:31:
23:50:b9:eb:49:11:3f:82:20:a0:63:9e:c5:75:0a:8c:b5:d7:
73:f3:8f:9b:f5:3a:0c:72:cd:ae:c7:5c:2a:a4:b0:fd:42:71:
d3:99:d7:d5:b6:9e:27:10:9f:56:28:27:b4:34:fd:61:ff:ed:
88:e6:ae:b6:eb:27:16:c5:71:3f:e0:ab:44:7c:57:e3:93:ca:
bb:ef:99:cf:c7:33:85:51:a8:43:49:f5:a4:38:15:45:09:54:
f4:e4:37:e7:8b:b9:62:18:d8:b0:06:3c:99:69:50:53:bd:a3:
7d:a5:6f:67
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUJ20K6mts2IqWmBZh1RvDNEehZa8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMjE2MDAwMDAwWhcNMjUwMTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A1ZDdiYjE3OWM0OTViMjk2ODFjNGU4Y2JiZTM4ODY0ZTI3
NmZhMzg3YjI2NmM2ZDdiNzYxZGFjY2NjNTY5NDY3MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCh4z7Agp5FjiWZRls4hSvNhCpT7BckhvImaLuicqgvlfdu
tqZ9mgUyS/oSalEBP7Jw52kLV6bJM25+HUSnkOmAuPWmUdCKVbcFuSzlAaS0kLB8
ir6IOK8zp/+3tfCLtO0GmuyfVvRltkMcZop1nkfn+8wsGoJ7Eo0cvdV6ukEeq2b6
mXzZdCVQqLzqFWywGco9JVsMfq+g1N/YCJI59WumyVJzZmUnGsboiMIjDR/egmqK
udc1trz7Dy06Y1t2tXbAO1LvXTm00K1RXKP4AnQV/DiAd0o1MSZI7Im59L/CPi4n
egr32RPXJ9yHQDeJYHlmtvOoeNJNh1es70FKfflNAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUTLp5MP/dgeAaxGFLXRmTp11dpqQwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2ZhYzY1MjQxLWZiYjgtNGNkZS1hOWVjLWJmOWFhYTJiYjhmZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwESwjANBgkqhkiG9w0BAQsFAAOCAQEASTWYY/ESlrCFXSUHtUO1BM9yQS5S
V2cN2/+scTtzhzlGLVVG5iIadaSG+rYPb6OJEIu258M328olu6mAAvfeObxkmBHe
ns7kS+OUIqn+rS1wskDkkLv/erVsAZv88JsV46+hcxeviA151Xf/Q/ihm0YmPzqQ
3njkYiLcmND7fZUQHN1EbfWh/gIPRdvGAFAxI1C560kRP4IgoGOexXUKjLXXc/OP
m/U6DHLNrsdcKqSw/UJx05nX1baeJxCfVigntDT9Yf/tiOautusnFsVxP+CrRHxX
45PKu++Zz8czhVGoQ0n1pDgVRQlU9OQ354u5YhjYsAY8mWlQU72jfaVvZw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:52 2025 by rpki-client