Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f11fcdfc-fcdd-482f-93d6-21e6eaa9c6a0.roa
File: f11fcdfc-fcdd-482f-93d6-21e6eaa9c6a0.roa (raw, json)
Hash identifier: nPK2hWD4buDIzfuDDorca3yz6+VjN8mBIy8xG7QQxFE=
Subject key identifier: AF:E8:8E:BA:58:76:6C:63:76:63:18:F8:8E:23:A2:EC:C2:3F:20:50
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6EAC3F649A56AD11E49B2DD64DDC4DD4F90F367C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f11fcdfc-fcdd-482f-93d6-21e6eaa9c6a0.roa
Signing time: Tue 05 Mar 2024 00:00:00 +0000
ROA not before: Tue 05 Mar 2024 00:00:00 +0000
ROA not after: Tue 09 Apr 2024 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f2b:4000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:ac:3f:64:9a:56:ad:11:e4:9b:2d:d6:4d:dc:4d:d4:f9:0f:36:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 5 00:00:00 2024 GMT
Not After : Apr 9 23:59:59 2024 GMT
Subject: serialNumber=393aaef0d1c3c8ebd77e02c6a19e615d899cd3e1a13dba2faa7994d8a82cf02a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b2:cd:24:bc:41:e0:8d:48:7b:1c:c2:45:c3:
1a:7b:69:6e:fa:55:58:99:bd:58:9e:3b:f8:d9:39:
1d:77:77:ee:1d:f4:c0:96:ce:71:a6:11:f3:96:a1:
0c:36:18:02:8c:7f:f1:af:ef:96:46:2a:8b:bc:ac:
cf:1b:72:86:64:3d:f9:fc:8c:5f:5f:89:d7:3a:b2:
67:f8:71:90:45:65:13:e6:4c:ad:72:2d:b1:dc:41:
33:01:f9:f5:6e:50:1b:54:64:76:b3:04:aa:99:9d:
31:cc:46:65:5e:25:6d:c2:77:d4:d0:ff:bb:84:53:
1a:65:05:bb:aa:22:76:7b:47:d6:e0:ef:45:9e:c3:
ff:47:59:8b:52:49:06:26:3c:48:61:75:80:21:9e:
49:3d:ea:15:a9:1f:f8:1b:d3:cf:3a:31:38:6a:38:
e8:35:d4:48:8c:c7:74:50:80:cd:35:b7:97:2e:c2:
c2:5c:11:d2:d5:ce:6a:ed:c3:a3:b0:ad:db:86:84:
7e:ec:cd:aa:36:2b:7d:7a:86:c6:97:c7:b6:b8:73:
94:bf:d5:49:7b:dd:cc:19:41:71:d6:4c:dc:c9:ce:
59:73:6e:7f:32:03:64:af:61:a6:87:04:40:0b:8c:
a0:f7:15:2b:03:a8:d2:40:4b:84:3f:a3:b8:a5:0f:
79:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E8:8E:BA:58:76:6C:63:76:63:18:F8:8E:23:A2:EC:C2:3F:20:50
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f11fcdfc-fcdd-482f-93d6-21e6eaa9c6a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f2b:4000::/36
Signature Algorithm: sha256WithRSAEncryption
47:11:85:15:5d:8d:48:1c:c0:13:1d:a7:19:12:2b:3f:2b:1a:
d7:0c:be:f1:23:8a:90:17:02:31:b0:21:7a:18:77:26:66:a6:
f2:ce:73:90:06:7d:ee:ac:67:00:a6:eb:68:4c:24:96:c4:4c:
e7:a4:62:74:38:c3:2d:78:d7:47:7d:f7:e3:f9:19:ae:7a:09:
96:de:ce:16:24:53:95:56:0f:c9:d0:d9:2a:a6:ef:49:4c:57:
07:fc:17:ed:70:e1:a5:05:61:1e:ca:89:23:b2:0e:89:80:8c:
5a:8d:21:b3:7d:f1:fd:d5:c6:03:8c:ad:fc:58:0f:42:d1:f2:
c8:3d:ee:09:af:31:92:78:ce:1c:72:fd:d2:ba:39:25:32:7d:
a6:21:c7:95:e6:76:53:df:06:08:61:0b:82:5a:0c:49:1d:e5:
aa:1b:76:eb:cd:73:23:47:96:87:8e:f6:32:49:e2:c6:36:2b:
97:68:b1:c4:49:e7:3b:e9:a8:d8:32:c9:16:e7:e8:67:e8:b5:
59:56:42:ac:0a:16:ba:9e:f3:85:a3:7e:91:00:ad:f5:59:a4:
92:db:af:6d:2a:78:ef:54:d2:83:ff:1e:55:e3:3e:6a:60:2d:
53:ff:24:33:a0:9d:47:b0:e7:47:32:56:62:3e:79:3c:95:3d:
a5:0c:31:b3
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUbqw/ZJpWrRHkmy3WTdxN1PkPNnwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwMzA1MDAwMDAwWhcNMjQwNDA5MjM1OTU5
WjB6MUkwRwYDVQQFE0AzOTNhYWVmMGQxYzNjOGViZDc3ZTAyYzZhMTllNjE1ZDg5
OWNkM2UxYTEzZGJhMmZhYTc5OTRkOGE4MmNmMDJhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCtss0kvEHgjUh7HMJFwxp7aW76VViZvVieO/jZOR13d+4d
9MCWznGmEfOWoQw2GAKMf/Gv75ZGKou8rM8bcoZkPfn8jF9fidc6smf4cZBFZRPm
TK1yLbHcQTMB+fVuUBtUZHazBKqZnTHMRmVeJW3Cd9TQ/7uEUxplBbuqInZ7R9bg
70Wew/9HWYtSSQYmPEhhdYAhnkk96hWpH/gb0886MThqOOg11EiMx3RQgM01t5cu
wsJcEdLVzmrtw6OwrduGhH7szao2K316hsaXx7a4c5S/1Ul73cwZQXHWTNzJzllz
bn8yA2SvYaaHBEALjKD3FSsDqNJAS4Q/o7ilD3ktAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUr+iOulh2bGN2Yxj4jiOi7MI/IFAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2YxMWZjZGZjLWZjZGQtNDgyZi05M2Q2LTIxZTZlYWE5YzZhMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8rQDANBgkqhkiG9w0BAQsFAAOCAQEARxGFFV2NSBzAEx2nGRIrPysa
1wy+8SOKkBcCMbAhehh3Jmam8s5zkAZ97qxnAKbraEwklsRM56RidDjDLXjXR333
4/kZrnoJlt7OFiRTlVYPydDZKqbvSUxXB/wX7XDhpQVhHsqJI7IOiYCMWo0hs33x
/dXGA4yt/FgPQtHyyD3uCa8xknjOHHL90ro5JTJ9piHHleZ2U98GCGELgloMSR3l
qht2681zI0eWh472MknixjYrl2ixxEnnO+mo2DLJFufoZ+i1WVZCrAoWup7zhaN+
kQCt9VmkktuvbSp471TSg/8eVeM+amAtU/8kM6CdR7DnRzJWYj55PJU9pQwxsw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:52 2024 by rpki-client on console-fra.rpki-client.org