Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ece0404f-87dd-4797-b225-9d8c4bedfa69.roa
File: ece0404f-87dd-4797-b225-9d8c4bedfa69.roa (raw, json)
Hash identifier: BP+3LJ684wm04HrUpSrmroHptE3l2lMCq6++8dooNxk=
Subject key identifier: 7A:EA:9C:FA:ED:36:24:18:B5:B1:E0:DD:54:1A:27:F9:A0:E9:6C:8F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4E2055FB771105AE6C7242BF29919393C1A412AF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ece0404f-87dd-4797-b225-9d8c4bedfa69.roa
Signing time: Mon 02 Dec 2024 00:00:00 +0000
ROA not before: Mon 02 Dec 2024 00:00:00 +0000
ROA not after: Mon 06 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 16.26.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:20:55:fb:77:11:05:ae:6c:72:42:bf:29:91:93:93:c1:a4:12:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 2 00:00:00 2024 GMT
Not After : Jan 6 23:59:59 2025 GMT
Subject: serialNumber=6ecb78a15521ced9ddd97f7fa15d5a1830a907cb3a468d73eb959130095abafc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:fe:33:a2:d6:08:19:ed:14:14:95:27:3a:59:
e6:bd:e9:46:83:37:be:90:ca:d3:fe:93:da:cd:1f:
e7:e0:41:46:dd:88:08:7a:8c:0d:bf:d1:ef:d2:18:
39:dd:99:f0:b8:07:ab:76:c3:01:76:9d:78:af:17:
a0:59:fa:9e:80:b6:1c:4a:ed:96:2c:b4:a5:0b:17:
70:cf:c5:bd:5a:a4:9f:df:6c:d8:5d:41:42:09:61:
5d:d1:96:50:5b:98:b3:f4:0d:1e:c2:c0:20:77:5f:
72:1d:93:88:fd:f9:7f:c5:87:c0:4a:3b:60:ee:e6:
53:31:ea:61:3e:b7:a1:46:e0:0d:b1:e1:77:1e:54:
1b:29:e0:30:02:7d:c5:bd:f5:4a:a0:13:52:08:fa:
0c:13:1b:12:fc:b5:57:d3:d8:d6:70:84:78:a7:ac:
40:4c:1e:8a:1a:b4:ac:37:cd:45:de:8b:b9:1f:aa:
7d:fc:94:c5:17:9c:e0:29:d1:a9:ce:a2:cd:c2:4c:
11:ef:be:45:04:a4:26:82:46:94:d4:b2:cd:6e:d1:
91:10:d8:9f:87:39:04:e1:6b:09:9d:cf:58:1e:47:
6e:d4:b6:31:97:72:e4:74:3e:cb:4a:c1:ed:1d:59:
cd:1b:4f:9b:d3:f5:85:0e:13:67:fb:0b:e7:80:b0:
74:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EA:9C:FA:ED:36:24:18:B5:B1:E0:DD:54:1A:27:F9:A0:E9:6C:8F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ece0404f-87dd-4797-b225-9d8c4bedfa69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.26.0.0/15
Signature Algorithm: sha256WithRSAEncryption
a4:67:28:a4:98:12:d8:fe:b1:66:a0:2c:97:26:5f:11:76:ae:
49:de:37:62:65:60:fc:31:68:90:0f:69:de:68:37:3d:56:78:
99:42:55:74:96:15:ca:75:57:54:3d:d6:10:18:9a:af:7f:e0:
95:a0:5a:54:1e:e3:f8:fc:94:4c:e1:28:90:6d:6c:a8:20:e5:
8a:83:f3:59:3a:11:ae:89:0e:0a:98:3d:d5:d9:d5:3a:2d:89:
38:77:a3:41:ba:ae:42:26:aa:5c:b2:b1:5f:c0:e9:55:55:43:
e4:5c:e9:52:65:81:b6:92:fd:9f:a3:13:a2:6f:6e:56:5a:9c:
e0:eb:25:b5:f7:5f:0e:56:07:41:24:1b:6c:30:56:3b:ee:9c:
3e:f5:51:51:40:7d:6f:ac:35:84:20:30:e8:29:77:58:d2:65:
eb:39:8e:98:12:73:23:cf:7d:c4:46:b2:8b:7b:b1:e7:4b:94:
fd:df:3f:d3:ba:bb:9d:1d:13:27:30:2c:52:6e:bd:ae:36:56:
93:c2:f8:8b:ad:1e:3a:23:60:aa:01:e5:68:ba:d4:66:dd:39:
ce:e0:94:c6:de:36:4e:12:e1:fd:6d:3c:39:65:20:52:2d:86:
28:f9:e5:f4:52:5a:a5:f8:35:da:1c:fd:45:dc:2a:a9:08:0e:
e6:30:64:02
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUTiBV+3cRBa5sckK/KZGTk8GkEq8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjAyMDAwMDAwWhcNMjUwMTA2MjM1OTU5
WjB6MUkwRwYDVQQFE0A2ZWNiNzhhMTU1MjFjZWQ5ZGRkOTdmN2ZhMTVkNWExODMw
YTkwN2NiM2E0NjhkNzNlYjk1OTEzMDA5NWFiYWZjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD2/jOi1ggZ7RQUlSc6Wea96UaDN76QytP+k9rNH+fgQUbd
iAh6jA2/0e/SGDndmfC4B6t2wwF2nXivF6BZ+p6AthxK7ZYstKULF3DPxb1apJ/f
bNhdQUIJYV3RllBbmLP0DR7CwCB3X3Idk4j9+X/Fh8BKO2Du5lMx6mE+t6FG4A2x
4XceVBsp4DACfcW99UqgE1II+gwTGxL8tVfT2NZwhHinrEBMHooatKw3zUXei7kf
qn38lMUXnOAp0anOos3CTBHvvkUEpCaCRpTUss1u0ZEQ2J+HOQThawmdz1geR27U
tjGXcuR0PstKwe0dWc0bT5vT9YUOE2f7C+eAsHT7AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUeuqc+u02JBi1seDdVBon+aDpbI8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2VjZTA0MDRmLTg3ZGQtNDc5Ny1iMjI1LTlkOGM0YmVkZmE2OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwEQGjANBgkqhkiG9w0BAQsFAAOCAQEApGcopJgS2P6xZqAslyZfEXauSd43
YmVg/DFokA9p3mg3PVZ4mUJVdJYVynVXVD3WEBiar3/glaBaVB7j+PyUTOEokG1s
qCDlioPzWToRrokOCpg91dnVOi2JOHejQbquQiaqXLKxX8DpVVVD5FzpUmWBtpL9
n6MTom9uVlqc4OsltfdfDlYHQSQbbDBWO+6cPvVRUUB9b6w1hCAw6Cl3WNJl6zmO
mBJzI899xEayi3ux50uU/d8/07q7nR0TJzAsUm69rjZWk8L4i60eOiNgqgHlaLrU
Zt05zuCUxt42ThLh/W08OWUgUi2GKPnl9FJapfg12hz9RdwqqQgO5jBkAg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:30 2025 by rpki-client