Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb054371-a140-41e1-915a-758e59f442df.roa
File: bb054371-a140-41e1-915a-758e59f442df.roa (raw, json)
Hash identifier: kRO41sNQDq+YwCXqE7NfUrFIV/iKEr7Ttz9gE/Ant+E=
Subject key identifier: CF:75:AD:83:1D:80:E3:1E:39:CE:F1:C9:FF:FD:52:D0:7A:98:30:6F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 581A08EB2C1BB82856FB4B963846808315399899
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb054371-a140-41e1-915a-758e59f442df.roa
Signing time: Mon 09 Dec 2024 00:00:00 +0000
ROA not before: Mon 09 Dec 2024 00:00:00 +0000
ROA not after: Mon 13 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 136.18.140.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:1a:08:eb:2c:1b:b8:28:56:fb:4b:96:38:46:80:83:15:39:98:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 9 00:00:00 2024 GMT
Not After : Jan 13 23:59:59 2025 GMT
Subject: serialNumber=f8a5169451d25a85ef730eb8fa880f21f132f16e976230586ab60c85b092b611, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:ab:d0:50:81:f9:ee:b5:c1:5a:c2:27:a7:
20:5e:1a:ca:d4:f0:3c:20:9a:73:c4:24:94:6b:80:
65:51:8b:c1:06:c0:50:17:12:20:06:19:c7:23:43:
e7:6f:6d:09:d6:18:87:62:b0:91:de:09:87:bb:23:
09:f6:6d:4f:eb:6f:22:f1:5e:5f:5a:f7:51:bd:e6:
86:09:9b:68:0a:f3:e1:d1:f5:ae:38:b1:b6:f5:8d:
b1:f3:9c:c1:01:f5:e4:c7:e8:d9:6b:97:fc:29:42:
2e:52:c8:aa:8d:2f:05:96:19:77:59:05:fa:12:ab:
22:41:70:20:fe:0a:b7:fd:f4:7b:cd:da:94:21:68:
35:df:2e:18:90:e2:18:01:52:50:d6:4d:d6:76:5b:
a3:f1:92:ae:fa:21:40:fe:3c:63:fd:c7:41:d3:2c:
55:1b:3c:d5:60:0f:71:02:6f:79:ba:c1:8b:c3:9f:
e5:bb:ce:cf:a0:0f:ca:e4:2c:90:b1:d9:d5:07:5e:
f8:08:65:7d:ce:fb:4e:c1:99:35:de:dd:ff:6a:aa:
e6:c4:0c:4c:08:49:cd:b3:18:9c:ed:99:7d:d2:84:
12:b2:d5:db:08:be:84:3b:97:6e:f6:89:6b:68:52:
c3:ee:17:58:71:49:c1:c4:0e:38:b0:34:e3:94:79:
cb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:75:AD:83:1D:80:E3:1E:39:CE:F1:C9:FF:FD:52:D0:7A:98:30:6F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb054371-a140-41e1-915a-758e59f442df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.140.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:19:b4:2f:51:5e:b9:a3:ba:4a:d4:eb:17:e0:1d:dd:67:49:
4b:47:ba:37:86:2b:e6:86:03:1d:5b:56:78:cd:dc:4a:ff:62:
c7:9a:c3:99:a9:09:63:de:b5:96:fa:8f:f0:07:30:9d:37:c7:
39:8d:a2:c8:25:a3:50:16:ef:f2:c8:ba:41:ac:89:13:e8:4a:
55:75:21:8e:a9:38:87:7b:a6:c5:b7:92:ce:19:77:29:b1:01:
06:9d:5d:22:7d:ae:cc:8a:33:26:a9:96:d5:bc:85:14:6e:ee:
36:1f:a3:74:d7:82:cd:86:9c:0b:b2:63:26:37:0f:a2:25:9b:
04:3b:09:48:43:dd:88:3b:2d:b8:51:1c:f7:bf:9c:31:32:16:
09:eb:69:e4:c3:32:5d:a5:3d:9d:3b:8d:47:e7:4e:91:78:a9:
34:52:e8:81:99:32:69:70:d0:c2:1c:ec:12:5b:89:f9:e7:30:
27:08:3f:68:c8:5e:cc:a0:6a:e4:00:1e:e6:47:17:e0:e6:7c:
a8:8f:fd:d9:97:87:ec:3c:6e:36:62:55:32:2c:a1:f2:f3:14:
11:2c:ce:7e:47:80:29:c6:87:b0:c5:54:d6:82:87:e2:0d:fe:
f0:b4:0c:30:54:73:79:c1:cf:f1:fd:86:88:97:06:77:0c:d1:
96:ae:a0:dd
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWBoI6ywbuChW+0uWOEaAgxU5mJkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjA5MDAwMDAwWhcNMjUwMTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0BmOGE1MTY5NDUxZDI1YTg1ZWY3MzBlYjhmYTg4MGYyMWYx
MzJmMTZlOTc2MjMwNTg2YWI2MGM4NWIwOTJiNjExMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2mqvQUIH57rXBWsInpyBeGsrU8DwgmnPEJJRrgGVRi8EG
wFAXEiAGGccjQ+dvbQnWGIdisJHeCYe7Iwn2bU/rbyLxXl9a91G95oYJm2gK8+HR
9a44sbb1jbHznMEB9eTH6Nlrl/wpQi5SyKqNLwWWGXdZBfoSqyJBcCD+Crf99HvN
2pQhaDXfLhiQ4hgBUlDWTdZ2W6Pxkq76IUD+PGP9x0HTLFUbPNVgD3ECb3m6wYvD
n+W7zs+gD8rkLJCx2dUHXvgIZX3O+07BmTXe3f9qqubEDEwISc2zGJztmX3ShBKy
1dsIvoQ7l272iWtoUsPuF1hxScHEDjiwNOOUecvrAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUz3Wtgx2A4x45zvHJ//1S0HqYMG8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2JiMDU0MzcxLWExNDAtNDFlMS05MTVhLTc1OGU1OWY0NDJkZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAGIEowwDQYJKoZIhvcNAQELBQADggEBADoZtC9RXrmjukrU6xfgHd1nSUtH
ujeGK+aGAx1bVnjN3Er/Yseaw5mpCWPetZb6j/AHMJ03xzmNosglo1AW7/LIukGs
iRPoSlV1IY6pOId7psW3ks4ZdymxAQadXSJ9rsyKMyapltW8hRRu7jYfo3TXgs2G
nAuyYyY3D6IlmwQ7CUhD3Yg7LbhRHPe/nDEyFgnraeTDMl2lPZ07jUfnTpF4qTRS
6IGZMmlw0MIc7BJbifnnMCcIP2jIXsygauQAHuZHF+DmfKiP/dmXh+w8bjZiVTIs
ofLzFBEszn5HgCnGh7DFVNaCh+IN/vC0DDBUc3nBz/H9hoiXBncM0ZauoN0=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:55:19 2025 by rpki-client