Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c91a0608-8034-4006-ab7a-ad92e57f3cf9.roa
File: c91a0608-8034-4006-ab7a-ad92e57f3cf9.roa (raw, json)
Hash identifier: 7J64pcqghlYCpCuDOB/yXa610/lDxvFpcM/Gi8Zt/EQ=
Subject key identifier: 47:01:DA:67:70:79:D7:11:36:BF:94:FB:F5:CD:A0:82:D8:B6:6D:36
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3293FFDFB72B37A88AFC073E761256616742255E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c91a0608-8034-4006-ab7a-ad92e57f3cf9.roa
Signing time: Tue 24 Dec 2024 00:00:00 +0000
ROA not before: Tue 24 Dec 2024 00:00:00 +0000
ROA not after: Tue 28 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 57.251.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:93:ff:df:b7:2b:37:a8:8a:fc:07:3e:76:12:56:61:67:42:25:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 24 00:00:00 2024 GMT
Not After : Jan 28 23:59:59 2025 GMT
Subject: serialNumber=024f24c159a1f36da3e1e1c203216bbe55f75bf084d93aadc2efff9e6bbbbd98, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:3b:05:af:6c:fd:a9:97:ec:f1:cd:0f:25:01:
c8:b9:0d:b9:ed:de:51:e5:5f:fa:01:50:99:8b:91:
f6:c3:46:f1:ad:66:eb:d6:43:c8:e7:f4:4d:5d:dc:
3f:10:db:21:c2:c6:3c:fa:0f:45:20:00:03:84:c9:
c4:30:59:f5:39:c1:a2:7d:40:54:fb:f8:98:a4:3c:
16:f6:a4:a2:7c:d4:37:31:e1:eb:f9:cb:8c:7c:9a:
10:8f:f3:bd:9a:69:fd:57:b9:0e:27:7e:d7:53:b4:
c2:45:89:b3:76:c9:b2:6a:b2:2d:a9:48:26:92:e1:
59:6e:c0:4f:00:05:1d:eb:6a:de:1f:5f:96:7b:c6:
fc:0b:f5:c9:39:f6:57:a7:e5:67:66:2e:d2:a0:29:
3f:f3:cd:16:d5:78:3e:4e:0f:7d:00:32:99:b3:ac:
29:4b:90:21:bd:3c:c3:24:43:a5:6f:62:48:32:67:
20:6b:18:5f:ee:3f:46:12:6e:39:7c:ac:6a:b3:24:
58:24:b2:39:72:b4:2f:9d:62:6f:be:76:de:63:cd:
ee:cf:c7:6c:63:4d:c2:44:9a:37:61:72:83:4a:01:
76:00:5f:b0:18:51:df:99:8d:89:e2:13:c6:c4:e9:
e3:2a:68:f7:7b:26:fc:8d:8b:94:11:3b:69:83:76:
28:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:01:DA:67:70:79:D7:11:36:BF:94:FB:F5:CD:A0:82:D8:B6:6D:36
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c91a0608-8034-4006-ab7a-ad92e57f3cf9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.251.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d5:47:c3:84:f8:e9:8d:e1:4a:58:12:93:ac:06:81:0e:ab:e3:
f8:ae:3d:a0:a4:a9:2d:85:1f:15:9a:5e:91:bb:0b:b4:ca:07:
76:b6:6e:b5:4e:11:26:4e:20:43:ca:5e:e0:73:2c:49:1d:e6:
a5:44:b4:c1:fe:e2:2f:73:64:23:ea:3c:ed:6c:76:ac:f0:33:
b3:a7:68:87:dd:b6:3c:dc:3d:c2:ae:20:9d:58:21:81:37:7d:
32:d2:2c:27:f9:77:ce:a1:17:8e:18:b3:63:1b:a7:a0:60:42:
42:20:9f:14:bf:13:35:2c:75:23:cc:20:20:87:c4:78:bd:59:
29:71:24:35:c9:e6:21:e0:1c:f2:7b:77:d1:81:35:e3:78:01:
f6:95:b8:51:4e:4c:6e:52:0b:9f:47:b9:a0:05:bc:02:3f:d2:
cf:97:91:d8:76:56:85:dc:dd:5f:14:c0:e0:7c:5c:3c:14:3f:
a0:d4:ea:0b:74:5f:8b:0f:d4:f5:31:6b:46:38:fc:d6:fb:93:
cf:0d:9f:25:1d:85:9e:a9:68:29:95:89:e5:f3:8e:50:9e:a1:
27:60:34:7c:cc:17:1a:ce:02:4a:10:a3:bd:18:72:83:82:18:
82:ee:4b:76:07:a4:64:29:9d:6a:c6:f7:99:25:2d:f7:8e:09:
2a:9a:e0:49
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUMpP/37crN6iK/Ac+dhJWYWdCJV4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjI0MDAwMDAwWhcNMjUwMTI4MjM1OTU5
WjB6MUkwRwYDVQQFE0AwMjRmMjRjMTU5YTFmMzZkYTNlMWUxYzIwMzIxNmJiZTU1
Zjc1YmYwODRkOTNhYWRjMmVmZmY5ZTZiYmJiZDk4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD2OwWvbP2pl+zxzQ8lAci5Dbnt3lHlX/oBUJmLkfbDRvGt
ZuvWQ8jn9E1d3D8Q2yHCxjz6D0UgAAOEycQwWfU5waJ9QFT7+JikPBb2pKJ81Dcx
4ev5y4x8mhCP872aaf1XuQ4nftdTtMJFibN2ybJqsi2pSCaS4VluwE8ABR3rat4f
X5Z7xvwL9ck59len5WdmLtKgKT/zzRbVeD5OD30AMpmzrClLkCG9PMMkQ6VvYkgy
ZyBrGF/uP0YSbjl8rGqzJFgksjlytC+dYm++dt5jze7Px2xjTcJEmjdhcoNKAXYA
X7AYUd+ZjYniE8bE6eMqaPd7JvyNi5QRO2mDdij3AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQURwHaZ3B51xE2v5T79c2ggti2bTYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M5MWEwNjA4LTgwMzQtNDAwNi1hYjdhLWFkOTJlNTdmM2NmOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA5+zANBgkqhkiG9w0BAQsFAAOCAQEA1UfDhPjpjeFKWBKTrAaBDqvj+K49
oKSpLYUfFZpekbsLtMoHdrZutU4RJk4gQ8pe4HMsSR3mpUS0wf7iL3NkI+o87Wx2
rPAzs6doh922PNw9wq4gnVghgTd9MtIsJ/l3zqEXjhizYxunoGBCQiCfFL8TNSx1
I8wgIIfEeL1ZKXEkNcnmIeAc8nt30YE143gB9pW4UU5MblILn0e5oAW8Aj/Sz5eR
2HZWhdzdXxTA4HxcPBQ/oNTqC3Rfiw/U9TFrRjj81vuTzw2fJR2FnqloKZWJ5fOO
UJ6hJ2A0fMwXGs4CShCjvRhyg4IYgu5LdgekZCmdasb3mSUt944JKprgSQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:38:11 2025 by rpki-client