Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ea02aab-0372-497c-8c32-bff7070bda57.roa
File: 0ea02aab-0372-497c-8c32-bff7070bda57.roa (raw, json)
Hash identifier: ej1++doHx7se1RLxVbfTDXKiRIgcYR+Y03W8vJCkdbE=
Subject key identifier: B8:0F:96:52:55:7D:55:46:C3:78:F2:65:B9:B5:D0:B3:EE:7B:83:46
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 09DD25BADABC3FFCAF99EB0AEC6031CE0BBF0202
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ea02aab-0372-497c-8c32-bff7070bda57.roa
Signing time: Sat 28 Dec 2024 00:00:00 +0000
ROA not before: Sat 28 Dec 2024 00:00:00 +0000
ROA not after: Sat 01 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 141.231.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:dd:25:ba:da:bc:3f:fc:af:99:eb:0a:ec:60:31:ce:0b:bf:02:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 28 00:00:00 2024 GMT
Not After : Feb 1 23:59:59 2025 GMT
Subject: serialNumber=e3abdf1c984b06c20fb3c67a8fdccfde9689e5b388626cd8eb8b75063cd561cb, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5c:c6:ba:76:f3:f6:82:45:42:54:53:7d:d2:
8e:0c:95:61:64:0e:83:9f:6a:31:e5:f8:9b:9d:b9:
5a:68:09:2c:41:3d:f6:59:df:e0:a9:78:f9:53:5b:
ce:7f:92:0e:61:06:3b:75:57:9f:c1:45:41:73:bb:
cf:ef:cb:41:2e:f3:7d:e1:3b:a9:69:62:26:e4:34:
5c:78:37:ae:3b:f3:56:0b:0b:2b:cc:a4:44:1b:d9:
bb:cd:7d:91:de:b1:8c:a3:68:3c:3f:b9:3a:73:1f:
c1:92:4c:a5:0c:7c:b6:e8:f2:e7:f4:2e:77:4a:c0:
21:b8:f1:bb:c2:c7:8d:4b:39:86:c4:c3:f9:a1:db:
8b:03:8b:c1:a1:a5:22:a9:3b:64:b0:0a:20:85:21:
cd:30:c8:1d:c0:09:a0:64:6d:f9:51:92:89:1b:87:
7e:9c:fc:3e:7a:f3:e6:8f:ab:f8:d0:9c:0c:3f:41:
ca:1b:d1:a8:1e:c5:e3:ec:40:94:f5:a1:c8:fd:40:
c8:11:6f:39:89:3a:33:20:9a:93:18:9f:61:8b:7c:
7c:97:7f:56:8e:52:e4:21:f7:6e:9d:31:21:09:6f:
5f:d5:47:ae:7a:3b:1a:7f:06:27:41:66:6f:b9:85:
90:f4:b2:0c:d4:28:24:66:fa:97:cc:b7:5b:f5:b0:
39:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0F:96:52:55:7D:55:46:C3:78:F2:65:B9:B5:D0:B3:EE:7B:83:46
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ea02aab-0372-497c-8c32-bff7070bda57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.231.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1e:43:ed:3f:c2:aa:18:26:19:e9:60:4f:ae:80:2d:6c:b6:ba:
0d:5b:70:11:b2:82:69:ea:86:7b:a9:76:34:be:2b:cd:fc:f0:
ca:05:15:b4:fb:e4:fe:d7:de:ae:87:02:d9:d6:b5:25:c0:bd:
68:8b:10:71:b5:45:17:8c:40:41:9f:ac:3c:40:7a:76:1e:8c:
60:9d:6d:c6:e2:d1:ff:cb:12:64:d9:51:ef:0a:d7:32:4c:a9:
57:74:3f:d0:55:62:0c:10:a5:1d:fc:87:b9:68:1c:97:0f:a3:
7f:5d:49:e6:42:55:33:ee:41:3c:de:86:f2:01:53:48:67:d3:
b3:8d:65:94:87:d1:9f:f2:65:67:e0:e9:a7:7e:b1:05:2f:0b:
d5:14:83:9c:74:21:11:8e:86:88:bf:03:09:91:02:54:d1:9e:
cb:0f:83:e7:81:8b:f6:5f:df:80:11:10:de:cd:a6:e1:bf:2c:
f0:a6:a4:7e:fc:a3:8c:5c:4c:63:1a:51:72:a4:da:a2:6e:dc:
a8:db:6d:4e:fb:1f:b8:52:53:b2:b0:fd:96:9d:61:c0:8e:de:
1c:2b:64:93:2f:a4:ae:b5:48:3f:dd:97:9a:28:b4:2f:b7:ed:
03:a7:42:27:cc:34:45:84:27:16:dd:35:f4:62:fd:3a:54:c9:
07:66:52:bd
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUCd0lutq8P/yvmesK7GAxzgu/AgIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjI4MDAwMDAwWhcNMjUwMjAxMjM1OTU5
WjB6MUkwRwYDVQQFE0BlM2FiZGYxYzk4NGIwNmMyMGZiM2M2N2E4ZmRjY2ZkZTk2
ODllNWIzODg2MjZjZDhlYjhiNzUwNjNjZDU2MWNiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDoXMa6dvP2gkVCVFN90o4MlWFkDoOfajHl+JuduVpoCSxB
PfZZ3+CpePlTW85/kg5hBjt1V5/BRUFzu8/vy0Eu833hO6lpYibkNFx4N64781YL
CyvMpEQb2bvNfZHesYyjaDw/uTpzH8GSTKUMfLbo8uf0LndKwCG48bvCx41LOYbE
w/mh24sDi8GhpSKpO2SwCiCFIc0wyB3ACaBkbflRkokbh36c/D568+aPq/jQnAw/
Qcob0agexePsQJT1ocj9QMgRbzmJOjMgmpMYn2GLfHyXf1aOUuQh926dMSEJb1/V
R656Oxp/BidBZm+5hZD0sgzUKCRm+pfMt1v1sDkdAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUuA+WUlV9VUbDePJlubXQs+57g0YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzBlYTAyYWFiLTAzNzItNDk3Yy04YzMyLWJmZjcwNzBiZGE1Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCN5zANBgkqhkiG9w0BAQsFAAOCAQEAHkPtP8KqGCYZ6WBProAtbLa6DVtw
EbKCaeqGe6l2NL4rzfzwygUVtPvk/tferocC2da1JcC9aIsQcbVFF4xAQZ+sPEB6
dh6MYJ1txuLR/8sSZNlR7wrXMkypV3Q/0FViDBClHfyHuWgclw+jf11J5kJVM+5B
PN6G8gFTSGfTs41llIfRn/JlZ+Dpp36xBS8L1RSDnHQhEY6GiL8DCZECVNGeyw+D
54GL9l/fgBEQ3s2m4b8s8KakfvyjjFxMYxpRcqTaom7cqNttTvsfuFJTsrD9lp1h
wI7eHCtkky+krrVIP92Xmii0L7ftA6dCJ8w0RYQnFt019GL9OlTJB2ZSvQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:39 2025 by rpki-client