Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d50c078-c12f-4502-9221-08023ace42cd.roa
File: 3d50c078-c12f-4502-9221-08023ace42cd.roa (raw, json)
Hash identifier: hl4Jt7amzOaViS6gXMoGdIvgl+Rf1wDJazR/FUy0/zk=
Subject key identifier: F4:14:8B:41:68:4A:4C:F6:2F:73:E0:8C:12:DB:82:32:C9:84:5A:17
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 27E70F127910F9E9562079C21A10629C7A654478
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d50c078-c12f-4502-9221-08023ace42cd.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 216.219.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:e7:0f:12:79:10:f9:e9:56:20:79:c2:1a:10:62:9c:7a:65:44:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=5566b02ca623301be41a63c526a066b45638b8c314fc7f1bd91684d841316297, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ca:54:4f:e4:ea:b0:8d:fa:34:14:50:ce:a3:
4a:85:c0:cd:9a:1f:3d:ed:c3:22:bd:04:ae:27:2c:
92:d6:17:1c:90:4a:f8:1f:7f:c4:03:33:5f:3b:dd:
81:17:1e:e3:48:e3:a7:1b:6c:31:8c:05:ce:80:db:
9f:97:47:1b:68:00:3c:e5:be:d8:f1:0f:c0:e2:aa:
06:f5:53:50:a8:b8:44:93:65:62:b0:be:8d:75:af:
6d:36:86:70:ea:43:fd:63:b8:4a:ef:bf:30:aa:c9:
aa:6d:53:6b:c1:14:4b:29:02:5b:22:df:2c:90:5a:
90:86:5f:8f:2c:ac:67:c3:e2:44:54:b3:9a:43:09:
e2:20:7b:9b:5f:7c:3d:a5:0d:a9:47:0d:94:05:5f:
b7:3b:fd:52:08:cf:f3:43:1c:17:1a:02:aa:2e:51:
da:35:32:30:0a:42:b1:47:39:7b:17:6e:ef:30:41:
66:9f:2a:5e:77:04:3a:20:21:8b:76:d0:be:00:83:
4d:cd:37:e4:06:6a:b3:66:c2:66:69:40:69:ee:40:
e2:8a:93:01:1a:4c:a7:e7:59:af:65:91:d0:3e:45:
6b:3b:e7:76:26:5b:9e:94:ac:2c:a7:43:42:aa:32:
c6:d5:54:00:65:35:d8:f3:1d:4b:5e:b7:d0:5e:77:
5c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:14:8B:41:68:4A:4C:F6:2F:73:E0:8C:12:DB:82:32:C9:84:5A:17
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d50c078-c12f-4502-9221-08023ace42cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.219.128.0/17
Signature Algorithm: sha256WithRSAEncryption
d6:8a:27:69:e7:cc:0a:2b:25:6e:b8:32:c0:c1:83:ca:aa:5f:
f8:a7:b1:68:c4:a5:73:e6:46:36:94:15:8e:15:77:07:54:b0:
72:cd:3b:17:a6:0e:81:a9:56:a7:08:e8:7a:7e:63:49:ec:8f:
98:27:cf:12:b9:28:9e:ec:95:39:2a:ef:49:68:dc:a7:ce:73:
14:5d:ca:40:43:da:5d:c5:65:b0:7c:a8:6a:3f:e5:94:a6:81:
7b:6a:df:bc:c0:fd:b6:e5:47:b8:ac:f3:e3:bc:b6:92:b4:a7:
79:92:08:4e:1d:8a:23:98:d1:32:b5:46:46:3e:78:eb:e7:41:
b4:71:e3:eb:c2:f1:af:78:22:af:9f:8b:fd:7c:c9:79:a8:af:
eb:0a:6f:2b:70:94:f5:ad:6e:63:c7:22:c6:41:17:56:e4:6f:
61:7b:3c:bb:0c:f5:4f:3a:21:7b:3f:6e:8f:3a:25:74:19:84:
e7:7d:03:87:51:27:34:f8:09:d6:e4:13:d1:e0:bb:eb:1c:b4:
63:8a:4d:a7:9a:24:7b:57:63:9b:e8:f2:f0:d1:a4:02:5e:05:
20:2e:2b:4a:26:26:74:3c:33:2c:30:7a:ce:fb:92:a6:af:a0:
01:f1:bd:13:76:c2:61:03:3f:2f:05:ec:5d:99:a0:69:75:28:
45:74:e3:b9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJ+cPEnkQ+elWIHnCGhBinHplRHgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTA3MDAwMDAwWhcNMjUwMjExMjM1OTU5
WjB6MUkwRwYDVQQFE0A1NTY2YjAyY2E2MjMzMDFiZTQxYTYzYzUyNmEwNjZiNDU2
MzhiOGMzMTRmYzdmMWJkOTE2ODRkODQxMzE2Mjk3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDIylRP5Oqwjfo0FFDOo0qFwM2aHz3twyK9BK4nLJLWFxyQ
Svgff8QDM1873YEXHuNI46cbbDGMBc6A25+XRxtoADzlvtjxD8Diqgb1U1CouEST
ZWKwvo11r202hnDqQ/1juErvvzCqyaptU2vBFEspAlsi3yyQWpCGX48srGfD4kRU
s5pDCeIge5tffD2lDalHDZQFX7c7/VIIz/NDHBcaAqouUdo1MjAKQrFHOXsXbu8w
QWafKl53BDogIYt20L4Ag03NN+QGarNmwmZpQGnuQOKKkwEaTKfnWa9lkdA+RWs7
53YmW56UrCynQ0KqMsbVVABlNdjzHUtet9Bed1ylAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU9BSLQWhKTPYvc+CMEtuCMsmEWhcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzNkNTBjMDc4LWMxMmYtNDUwMi05MjIxLTA4MDIzYWNlNDJjZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAfY24AwDQYJKoZIhvcNAQELBQADggEBANaKJ2nnzAorJW64MsDBg8qqX/in
sWjEpXPmRjaUFY4VdwdUsHLNOxemDoGpVqcI6Hp+Y0nsj5gnzxK5KJ7slTkq70lo
3KfOcxRdykBD2l3FZbB8qGo/5ZSmgXtq37zA/bblR7is8+O8tpK0p3mSCE4diiOY
0TK1RkY+eOvnQbRx4+vC8a94Iq+fi/18yXmor+sKbytwlPWtbmPHIsZBF1bkb2F7
PLsM9U86IXs/bo86JXQZhOd9A4dRJzT4CdbkE9Hgu+sctGOKTaeaJHtXY5vo8vDR
pAJeBSAuK0omJnQ8Mywwes77kqavoAHxvRN2wmEDPy8F7F2ZoGl1KEV047k=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:41:54 2025 by rpki-client