Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9d5f5b97-6ee6-4640-9018-e241efb9cf6f.roa
File: 9d5f5b97-6ee6-4640-9018-e241efb9cf6f.roa (raw, json)
Hash identifier: J9dJNrTTX0id4aJH0WtejgWRlQWvmI7wLTlsZMXuT2A=
Subject key identifier: 58:65:D4:B7:66:BF:70:14:98:54:BC:E8:C9:A8:59:21:D6:3A:53:63
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 72B39CD57150C2A536D1C014EC60C670FE2F89DE
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9d5f5b97-6ee6-4640-9018-e241efb9cf6f.roa
Signing time: Mon 23 Dec 2024 00:00:00 +0000
ROA not before: Mon 23 Dec 2024 00:00:00 +0000
ROA not after: Mon 27 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2606:7b40:10f8::/46 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:b3:9c:d5:71:50:c2:a5:36:d1:c0:14:ec:60:c6:70:fe:2f:89:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Dec 23 00:00:00 2024 GMT
Not After : Jan 27 23:59:59 2025 GMT
Subject: CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:21:78:6b:17:22:35:17:07:62:bf:ca:68:24:
11:dc:c4:45:e5:34:74:06:52:38:db:a2:04:e6:1a:
15:5c:65:dd:df:71:30:cc:92:a1:be:58:ba:fc:4f:
07:3d:3f:4e:44:c3:9a:e2:e0:21:cb:ad:95:ce:d5:
50:0a:31:13:a7:59:3c:1a:9b:b9:ba:41:0e:a8:17:
de:95:2b:84:5d:bb:31:b9:a2:de:eb:08:f2:fc:8d:
8e:9a:2e:e5:b8:9e:44:8d:d5:a7:69:ae:1a:e7:03:
26:2d:09:75:cf:e3:6d:4b:16:ed:1e:2e:9f:f6:2a:
f9:28:5f:7f:bd:3b:b7:b9:59:69:b4:b0:72:07:1e:
da:58:56:9a:fc:5c:0f:bc:08:5b:d4:75:0f:ab:6b:
0d:2c:fa:0b:5b:63:34:c6:ed:66:11:18:02:a2:b5:
6f:ad:da:e7:9d:19:80:21:98:89:fa:fb:33:8e:ef:
18:f4:19:de:ef:63:27:b4:9c:e9:fe:14:07:a9:05:
30:d0:39:75:15:b1:29:88:d8:de:74:dc:09:1e:27:
44:db:56:e2:4d:1c:00:97:e4:ba:9f:76:bc:4d:2a:
47:82:ba:b1:c2:26:17:01:0e:f2:7b:b8:70:3d:c8:
29:1a:68:86:d9:de:d7:a2:16:10:c5:4d:80:89:0f:
70:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:65:D4:B7:66:BF:70:14:98:54:BC:E8:C9:A8:59:21:D6:3A:53:63
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9d5f5b97-6ee6-4640-9018-e241efb9cf6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2606:7b40:10f8::/46
Signature Algorithm: sha256WithRSAEncryption
51:63:3d:b1:47:85:01:3a:9d:91:ed:07:b2:90:df:f7:8c:a0:
4a:35:00:40:55:1e:51:39:05:2c:47:ae:1c:00:a3:b4:df:ef:
bd:56:8b:3b:bd:09:3e:e1:f7:fd:8b:d4:4f:4a:7c:5b:b1:4b:
a7:98:1f:82:e0:d2:95:2d:4d:32:21:c8:d4:6c:e9:58:83:a4:
5d:4c:bd:7b:2d:3d:51:3d:49:63:5c:c0:88:76:06:d7:14:51:
1c:ff:6f:0e:42:4c:03:4e:86:c8:a4:e1:f0:a9:24:84:b8:96:
7f:e7:e5:d4:a9:de:4f:59:71:43:2c:fb:52:6e:07:40:d0:6b:
45:32:24:ea:67:65:b1:4c:af:0d:8e:15:e4:2d:b4:fb:e7:c7:
85:d5:9f:18:cb:bb:63:46:e6:c1:5a:37:b6:1e:ae:54:5f:f9:
c9:c8:d4:79:97:f9:2b:b9:03:03:9b:77:80:1a:e4:2f:60:1c:
a5:e9:00:07:2c:f5:fc:11:40:13:81:5b:3a:fc:c2:0d:1c:62:
03:84:2d:56:f9:23:53:cb:b3:b5:48:e3:ba:7f:d0:95:49:63:
02:7e:03:5d:1e:32:09:09:96:2e:18:00:5f:34:65:df:aa:1c:
65:47:ac:ab:b6:93:70:33:7a:2f:2e:78:56:37:9c:19:47:60:
4d:f1:4f:cb
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUcrOc1XFQwqU20cAU7GDGcP4vid4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjQxMjIzMDAwMDAwWhcNMjUwMTI3MjM1OTU5
WjB6MUkwRwYDVQQFE0BhOGE5ZjM2NDk0ZDI0MzU2OTJjYmNhMTU4N2E4MmMxMDM3
Yjk4YmQ0ZThhNzEwOTM1ZTk1NmFiNWFhMGM0ZGJiMS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDnIXhrFyI1Fwdiv8poJBHcxEXlNHQGUjjbogTmGhVcZd3f
cTDMkqG+WLr8Twc9P05Ew5ri4CHLrZXO1VAKMROnWTwam7m6QQ6oF96VK4RduzG5
ot7rCPL8jY6aLuW4nkSN1adprhrnAyYtCXXP421LFu0eLp/2KvkoX3+9O7e5WWm0
sHIHHtpYVpr8XA+8CFvUdQ+raw0s+gtbYzTG7WYRGAKitW+t2uedGYAhmIn6+zOO
7xj0Gd7vYye0nOn+FAepBTDQOXUVsSmI2N503AkeJ0TbVuJNHACX5LqfdrxNKkeC
urHCJhcBDvJ7uHA9yCkaaIbZ3teiFhDFTYCJD3B/AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUWGXUt2a/cBSYVLzoyahZIdY6U2MwHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyLzlkNWY1Yjk3LTZlZTYtNDY0MC05MDE4LWUyNDFlZmI5Y2Y2Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImBntAEPgwDQYJKoZIhvcNAQELBQADggEBAFFjPbFHhQE6nZHtB7KQ3/eM
oEo1AEBVHlE5BSxHrhwAo7Tf771Wizu9CT7h9/2L1E9KfFuxS6eYH4Lg0pUtTTIh
yNRs6ViDpF1MvXstPVE9SWNcwIh2BtcUURz/bw5CTANOhsik4fCpJIS4ln/n5dSp
3k9ZcUMs+1JuB0DQa0UyJOpnZbFMrw2OFeQttPvnx4XVnxjLu2NG5sFaN7YerlRf
+cnI1HmX+Su5AwObd4Aa5C9gHKXpAAcs9fwRQBOBWzr8wg0cYgOELVb5I1PLs7VI
47p/0JVJYwJ+A10eMgkJli4YAF80Zd+qHGVHrKu2k3Azei8ueFY3nBlHYE3xT8s=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:28:04 2025 by rpki-client