Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0912c03a-24ba-4399-9a25-cb9008c13b56.roa
File: 0912c03a-24ba-4399-9a25-cb9008c13b56.roa (raw, json)
Hash identifier: bTtp8lAR27PSluocQaD8yxsDsflLk/Yj/HdHGJWbZbQ=
Subject key identifier: D7:2D:F8:62:EB:CC:04:B9:20:59:4E:BF:B7:38:0F:CB:0C:1F:39:F6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 13E3CFF3C698D09CF5B395AC66247B1F7F10221D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0912c03a-24ba-4399-9a25-cb9008c13b56.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.25.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:e3:cf:f3:c6:98:d0:9c:f5:b3:95:ac:66:24:7b:1f:7f:10:22:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: serialNumber=335074e0bbf0a9b010046cba2dc17116ffd3ec14b45640848b1d678e53ff3277, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:19:41:0e:b8:5e:91:32:ba:94:59:33:06:50:
b4:36:f1:e2:d6:d2:ec:cb:93:a6:de:4d:2c:aa:55:
5f:7f:bf:22:17:c1:0b:3a:78:55:a1:3d:f0:31:23:
7a:c7:3e:45:06:16:98:f2:34:34:2d:c8:ca:82:eb:
e6:f3:72:0d:c7:b8:02:fd:6c:d3:b1:d3:be:5a:dc:
b4:95:82:25:ef:0c:e6:4c:10:1d:bc:2c:97:a7:5e:
5e:63:e3:4c:49:af:d3:9f:b0:fb:0c:13:4a:2a:9b:
6e:18:8b:0e:7d:d3:db:7a:f7:39:31:a5:39:dc:80:
b2:ba:07:c5:22:d6:66:f7:d4:44:55:cd:42:d9:6e:
23:11:56:4e:e9:af:24:8f:75:a3:9c:f8:41:53:7b:
04:f5:47:5c:1c:ae:e7:4d:a3:d5:05:7b:63:72:8d:
fe:26:66:bf:06:e6:9b:6b:bb:6d:51:a5:15:0b:ba:
ea:2f:e4:5d:6b:87:58:b3:e7:9c:fe:5c:b8:63:40:
ac:51:8f:8f:45:c1:46:b2:62:2b:ed:21:cc:42:f0:
1e:77:24:b7:01:05:31:41:f8:aa:30:93:49:eb:60:
49:a4:9e:1d:64:43:38:dc:79:3f:55:c0:fa:8c:83:
0a:77:f2:df:6d:b7:a5:9c:1b:8c:69:4b:59:d3:7f:
ff:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2D:F8:62:EB:CC:04:B9:20:59:4E:BF:B7:38:0F:CB:0C:1F:39:F6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0912c03a-24ba-4399-9a25-cb9008c13b56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.25.67.0/24
Signature Algorithm: sha256WithRSAEncryption
36:21:30:6f:6c:f4:c3:48:44:09:1e:bd:90:85:9b:21:07:30:
a0:8d:f1:8a:93:da:da:47:64:bc:c5:e5:85:6d:8c:4d:66:62:
09:8e:1a:c0:9a:02:25:f2:6d:95:01:d5:bf:e0:5f:74:94:ec:
86:8c:94:8d:14:e3:a2:1c:08:27:13:49:3d:92:eb:ff:51:14:
e9:a1:8d:5d:b4:5e:7b:8f:8f:3e:95:a2:b1:75:23:94:03:90:
a1:60:43:67:a4:38:b3:28:95:36:f8:1b:0b:ee:ce:fc:98:3c:
42:8a:3a:e8:f1:ba:72:30:56:72:4c:5d:7a:ed:aa:87:84:73:
f3:a1:22:1c:ee:14:8e:b5:5f:42:11:70:3c:eb:57:12:bc:a0:
0e:e5:9a:72:33:0a:bc:31:ff:a1:3a:a3:1f:06:e6:e7:49:e4:
4b:49:99:fb:66:0f:33:31:df:f3:ba:77:2c:1c:a3:43:2a:b1:
c5:6e:83:f1:96:06:0d:15:1b:62:29:9b:f0:fe:2b:03:ea:e7:
7c:41:77:49:09:9c:e9:89:87:6a:22:a1:b3:49:42:9b:57:f4:
15:bf:84:3f:f4:ef:e8:8b:6e:30:5a:62:c8:91:8b:2e:cc:90:
49:29:6b:90:8c:fe:5a:a6:13:2c:ce:ab:40:8c:ab:93:49:16:
fb:f9:98:d3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUE+PP88aY0Jz1s5WsZiR7H38QIh0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTEwMDAwMDAwWhcNMjUwMjE0MjM1OTU5
WjB6MUkwRwYDVQQFE0AzMzUwNzRlMGJiZjBhOWIwMTAwNDZjYmEyZGMxNzExNmZm
ZDNlYzE0YjQ1NjQwODQ4YjFkNjc4ZTUzZmYzMjc3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDbGUEOuF6RMrqUWTMGULQ28eLW0uzLk6beTSyqVV9/vyIX
wQs6eFWhPfAxI3rHPkUGFpjyNDQtyMqC6+bzcg3HuAL9bNOx075a3LSVgiXvDOZM
EB28LJenXl5j40xJr9OfsPsME0oqm24Yiw5909t69zkxpTncgLK6B8Ui1mb31ERV
zULZbiMRVk7prySPdaOc+EFTewT1R1wcrudNo9UFe2Nyjf4mZr8G5ptru21RpRUL
uuov5F1rh1iz55z+XLhjQKxRj49FwUayYivtIcxC8B53JLcBBTFB+Kowk0nrYEmk
nh1kQzjceT9VwPqMgwp38t9tt6WcG4xpS1nTf/+HAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU1y34YuvMBLkgWU6/tzgPywwfOfYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA5MTJjMDNhLTI0YmEtNDM5OS05YTI1LWNiOTAwOGMxM2I1Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA2GUMwDQYJKoZIhvcNAQELBQADggEBADYhMG9s9MNIRAkevZCFmyEHMKCN
8YqT2tpHZLzF5YVtjE1mYgmOGsCaAiXybZUB1b/gX3SU7IaMlI0U46IcCCcTST2S
6/9RFOmhjV20XnuPjz6VorF1I5QDkKFgQ2ekOLMolTb4GwvuzvyYPEKKOujxunIw
VnJMXXrtqoeEc/OhIhzuFI61X0IRcDzrVxK8oA7lmnIzCrwx/6E6ox8G5udJ5EtJ
mftmDzMx3/O6dywco0MqscVug/GWBg0VG2Ipm/D+KwPq53xBd0kJnOmJh2oiobNJ
QptX9BW/hD/07+iLbjBaYsiRiy7MkEkpa5CM/lqmEyzOq0CMq5NJFvv5mNM=
-----END CERTIFICATE-----
Generated at Mon May 12 04:12:25 2025 by rpki-client