Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1563b312-8cb5-420b-9f48-2541625a8121.roa
File: 1563b312-8cb5-420b-9f48-2541625a8121.roa (raw, json)
Hash identifier: 1fwQA5HMCZgWXSxTuNQTRyni5elsKCFQtDEcYftC6d4=
Subject key identifier: 3D:F3:6E:DC:35:DA:EC:DF:1F:59:C3:9C:78:CA:F9:B0:C7:63:67:CE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5B594959361DD34FAF303D2FC1B2371B47F6E0C7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1563b312-8cb5-420b-9f48-2541625a8121.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 64.23.0.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:59:49:59:36:1d:d3:4f:af:30:3d:2f:c1:b2:37:1b:47:f6:e0:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=9bb19885d3eee5dc1eb51b7daff7906fe4e4c09d895978e23de478fcf7a77904, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:99:66:46:27:02:a4:fa:83:a4:36:43:11:c9:
18:17:77:d0:8c:3f:f8:2b:ae:db:71:be:15:d9:68:
d7:67:e3:9e:68:26:80:c4:7e:46:52:1e:bf:a2:bc:
60:af:ee:8f:d7:50:af:ea:65:17:2a:ac:8b:cb:77:
41:42:29:6e:a8:bf:da:a0:c7:75:50:38:95:cc:0d:
8a:62:5a:4e:95:6e:c9:6e:45:fc:5f:1f:4b:7c:1f:
43:d9:34:3a:66:02:29:cf:27:93:8c:c6:25:18:c3:
3a:53:26:d1:9f:9f:c8:93:72:28:83:62:3f:3d:e5:
be:ef:15:ff:76:b6:72:bb:7a:a4:5e:f3:d2:ad:4d:
33:6e:45:60:f4:3c:bc:ac:62:29:34:17:57:2e:17:
7c:b7:a7:a0:a6:45:b7:4d:ff:00:f7:31:4c:d5:5d:
b3:54:b5:e9:82:ae:e4:bc:30:96:8c:04:cb:7c:6b:
08:1f:fa:11:87:55:4d:cc:b6:da:84:73:e7:97:4c:
eb:1b:5a:8c:80:7e:dc:fa:40:04:33:ff:a5:c0:46:
41:51:b0:35:65:9d:fb:9b:5e:dc:c7:d0:ad:84:58:
5d:98:5f:62:24:29:55:e6:5d:6d:3b:a1:1a:34:d7:
ea:0c:f7:0e:6e:af:ed:ab:b9:1d:06:13:78:9f:b8:
ff:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F3:6E:DC:35:DA:EC:DF:1F:59:C3:9C:78:CA:F9:B0:C7:63:67:CE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1563b312-8cb5-420b-9f48-2541625a8121.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.23.0.0/18
Signature Algorithm: sha256WithRSAEncryption
59:ab:bd:23:69:d4:c0:ba:1a:91:c3:c6:10:7d:d7:9f:60:d2:
5d:ed:b9:c8:2d:82:ba:e4:7a:a2:a3:9e:82:7a:e8:59:fd:df:
d2:34:3a:26:65:6e:58:e5:44:17:cb:9a:03:d5:f5:15:4b:02:
6f:02:b0:53:0d:99:32:18:ae:28:43:11:9b:ab:60:2f:21:bd:
87:12:8c:0e:18:69:89:1b:4c:75:49:de:1a:34:00:c5:60:a4:
f5:53:cc:f5:f5:0b:40:11:c9:be:3e:0b:b1:37:92:02:b4:e1:
89:7f:ff:b0:08:85:3a:c1:8c:77:b8:ae:16:db:b7:ef:a7:00:
46:1e:50:9b:95:df:2f:20:12:71:bf:e4:e4:d8:9e:85:34:d1:
37:4f:25:9a:d5:f8:c6:a2:9a:6d:cc:4b:75:50:6b:a5:3c:d5:
e0:9e:64:98:d7:03:25:2e:83:e0:c5:24:77:be:23:c6:9f:c5:
9d:4e:57:f8:fc:87:5b:f4:ad:2d:af:8f:15:27:22:bd:c7:fa:
28:79:1d:cb:c5:dd:f8:b2:27:14:11:3b:0b:6b:bd:28:1d:50:
ba:57:03:a9:67:8e:3e:d6:cf:82:cc:35:24:80:1b:3a:7b:c0:
f2:b2:a6:c7:a3:3e:fc:78:5c:29:27:6f:9e:6f:5d:c2:cf:1b:
6e:d5:d0:54
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUW1lJWTYd00+vMD0vwbI3G0f24McwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTA3MDAwMDAwWhcNMjUwMjExMjM1OTU5
WjB6MUkwRwYDVQQFE0A5YmIxOTg4NWQzZWVlNWRjMWViNTFiN2RhZmY3OTA2ZmU0
ZTRjMDlkODk1OTc4ZTIzZGU0NzhmY2Y3YTc3OTA0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCemWZGJwKk+oOkNkMRyRgXd9CMP/grrttxvhXZaNdn455o
JoDEfkZSHr+ivGCv7o/XUK/qZRcqrIvLd0FCKW6ov9qgx3VQOJXMDYpiWk6Vbslu
RfxfH0t8H0PZNDpmAinPJ5OMxiUYwzpTJtGfn8iTciiDYj895b7vFf92tnK7eqRe
89KtTTNuRWD0PLysYik0F1cuF3y3p6CmRbdN/wD3MUzVXbNUtemCruS8MJaMBMt8
awgf+hGHVU3MttqEc+eXTOsbWoyAftz6QAQz/6XARkFRsDVlnfubXtzH0K2EWF2Y
X2IkKVXmXW07oRo01+oM9w5ur+2ruR0GE3ifuP+xAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUPfNu3DXa7N8fWcOceMr5sMdjZ84wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE1NjNiMzEyLThjYjUtNDIwYi05ZjQ4LTI1NDE2MjVhODEyMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZAFwAwDQYJKoZIhvcNAQELBQADggEBAFmrvSNp1MC6GpHDxhB9159g0l3t
ucgtgrrkeqKjnoJ66Fn939I0OiZlbljlRBfLmgPV9RVLAm8CsFMNmTIYrihDEZur
YC8hvYcSjA4YaYkbTHVJ3ho0AMVgpPVTzPX1C0ARyb4+C7E3kgK04Yl//7AIhTrB
jHe4rhbbt++nAEYeUJuV3y8gEnG/5OTYnoU00TdPJZrV+Maimm3MS3VQa6U81eCe
ZJjXAyUug+DFJHe+I8afxZ1OV/j8h1v0rS2vjxUnIr3H+ih5HcvF3fiyJxQROwtr
vSgdULpXA6lnjj7Wz4LMNSSAGzp7wPKypsejPvx4XCknb55vXcLPG27V0FQ=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:39:50 2025 by rpki-client