Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/c0b7a105-2833-47f4-8b51-8a9d1cb6466e.roa
File: c0b7a105-2833-47f4-8b51-8a9d1cb6466e.roa (raw, json)
Hash identifier: qlcyt0qgbFPxvDBTHMjH+B0yANR0Y33VEua033718hE=
Subject key identifier: 3B:D7:CC:9C:F5:F3:2F:5F:47:C3:73:9D:54:BE:20:34:45:81:7E:D6
Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial: 5C027F9431DA4B38AE89CAC396213C03477E616A
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/c0b7a105-2833-47f4-8b51-8a9d1cb6466e.roa
Signing time: Mon 09 Dec 2024 00:00:00 +0000
ROA not before: Mon 09 Dec 2024 00:00:00 +0000
ROA not after: Mon 13 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 50.112.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:02:7f:94:31:da:4b:38:ae:89:ca:c3:96:21:3c:03:47:7e:61:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Validity
Not Before: Dec 9 00:00:00 2024 GMT
Not After : Jan 13 23:59:59 2025 GMT
Subject: CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:a8:ec:0e:f3:59:0e:50:96:e7:f2:a0:3c:
c9:ca:e0:f3:a9:72:41:d1:46:8b:dc:97:13:11:37:
11:0e:f9:ac:1a:ef:46:9d:4a:76:65:24:22:65:1d:
41:f1:dc:1c:b3:ab:28:bd:2d:a7:97:95:14:68:42:
c4:7d:00:88:51:84:12:d0:de:63:bf:32:54:0b:df:
61:63:c5:5f:99:6b:fb:e6:c0:57:c1:72:a7:e7:2b:
4a:b9:d0:d9:9c:c9:99:c9:81:ce:ed:77:9e:00:de:
b3:43:96:6a:09:0f:e9:3b:c8:f4:fc:2e:b0:d1:10:
60:82:53:05:e0:a9:39:9e:99:a1:f9:62:3a:ed:24:
5f:b4:d8:29:b4:8e:4b:04:d8:1c:b5:1c:73:48:b6:
41:a4:57:ab:dd:61:02:c8:a8:c5:67:10:81:97:38:
56:c1:3c:db:79:d9:5a:6f:bf:4e:c1:c4:d8:bf:7b:
1f:c3:d3:12:60:4d:06:ed:a0:98:93:01:da:51:76:
bc:71:ad:2e:b5:0f:21:7c:5a:f2:fe:92:19:d7:98:
fb:e3:23:e9:c6:8f:db:f0:68:86:f0:a5:66:2f:58:
76:b5:17:d5:6e:31:9c:bb:76:f7:ba:40:3d:08:22:
23:04:60:e5:76:a6:a6:6c:73:b3:c4:60:c7:0a:2d:
b1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D7:CC:9C:F5:F3:2F:5F:47:C3:73:9D:54:BE:20:34:45:81:7E:D6
X509v3 Authority Key Identifier:
keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/c0b7a105-2833-47f4-8b51-8a9d1cb6466e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.112.0.0/16
Signature Algorithm: sha256WithRSAEncryption
91:57:ad:d5:f1:3f:8c:e9:f7:79:9c:9d:99:af:fa:af:f5:77:
ae:89:ea:3c:40:f4:8b:ef:b8:7a:4f:4a:14:38:01:b2:95:a7:
39:ca:a3:eb:eb:71:7b:65:34:8a:95:28:82:07:4a:9c:fb:fc:
40:70:43:58:89:9f:09:3d:ab:de:64:05:b4:51:37:17:8a:89:
9b:99:d8:84:a2:1d:6c:58:28:03:b9:d7:9a:d9:30:25:62:a5:
85:44:a5:5d:85:e0:31:5f:17:ce:88:71:6e:39:f5:be:82:87:
52:5f:72:47:28:da:db:90:32:b6:3c:81:71:fc:67:46:ab:25:
fe:57:e1:14:2e:85:a6:ae:3d:9d:74:8f:c0:6b:77:1d:91:e2:
cf:2a:cd:89:b3:8a:fc:cc:80:1b:71:ff:da:d6:83:48:68:d7:
6c:2a:9b:df:1c:1d:4a:1c:59:f1:cb:8f:b5:84:e2:19:ca:a8:
6d:09:49:56:0f:8b:20:12:19:fa:7f:4d:f0:14:c7:b1:3e:87:
12:3b:f8:02:ce:72:5e:fa:dc:05:08:4f:67:e8:4c:d2:19:6c:
7e:15:1b:ab:f1:3a:20:9e:b4:2d:cd:45:09:68:31:09:62:da:
fd:4a:a5:80:05:bc:c5:85:dd:e5:5c:3c:1e:3a:09:ac:b7:b7:
67:c7:4e:d6
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUXAJ/lDHaSziuicrDliE8A0d+YWowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj
Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjQxMjA5MDAwMDAwWhcNMjUwMTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0AwYTRlNDUzMmUzY2YxOTgxYjI2ZWJmY2QzODE5NjdjNTUz
NzNkNmQ4MDEwMTc0ZTEwMjVmZWMxYjUyYTg5ZjE4MS0wKwYDVQQDEyRkZGZiYzk3
Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDEdKjsDvNZDlCW5/KgPMnK4POpckHRRovclxMRNxEO+awa
70adSnZlJCJlHUHx3Byzqyi9LaeXlRRoQsR9AIhRhBLQ3mO/MlQL32FjxV+Za/vm
wFfBcqfnK0q50NmcyZnJgc7td54A3rNDlmoJD+k7yPT8LrDREGCCUwXgqTmemaH5
YjrtJF+02Cm0jksE2By1HHNItkGkV6vdYQLIqMVnEIGXOFbBPNt52Vpvv07BxNi/
ex/D0xJgTQbtoJiTAdpRdrxxrS61DyF8WvL+khnXmPvjI+nGj9vwaIbwpWYvWHa1
F9VuMZy7dve6QD0IIiMEYOV2pqZsc7PEYMcKLbFJAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUO9fMnPXzL19Hw3OdVL4gNEWBftYwHwYDVR0jBBgwFoAUkS3GDddkKYK8
rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w
OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy
Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4
OTE0OTBkOWM5L2MwYjdhMTA1LTI4MzMtNDdmNC04YjUxLThhOWQxY2I2NDY2ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw
LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAycDANBgkqhkiG9w0BAQsFAAOCAQEAkVet1fE/jOn3eZydma/6r/V3ronq
PED0i++4ek9KFDgBspWnOcqj6+txe2U0ipUoggdKnPv8QHBDWImfCT2r3mQFtFE3
F4qJm5nYhKIdbFgoA7nXmtkwJWKlhUSlXYXgMV8Xzohxbjn1voKHUl9yRyja25Ay
tjyBcfxnRqsl/lfhFC6Fpq49nXSPwGt3HZHizyrNibOK/MyAG3H/2taDSGjXbCqb
3xwdShxZ8cuPtYTiGcqobQlJVg+LIBIZ+n9N8BTHsT6HEjv4As5yXvrcBQhPZ+hM
0hlsfhUbq/E6IJ60Lc1FCWgxCWLa/UqlgAW8xYXd5Vw8HjoJrLe3Z8dO1g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:37:42 2025 by rpki-client