Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/658dcb89-91e3-44a9-aef5-0be9d2d1cf3e.roa
File: 658dcb89-91e3-44a9-aef5-0be9d2d1cf3e.roa (raw, json)
Hash identifier: 5qL0cyLjRtuLX/0U8sKZKMj2HsJUv/iR4dHxbGSiFQM=
Subject key identifier: A5:67:16:20:F8:76:3A:CD:77:1C:B8:CE:64:37:CA:B9:41:B9:6D:73
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4FC52DA1D377DC5E04580FD181FFC5C3057A6260
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/658dcb89-91e3-44a9-aef5-0be9d2d1cf3e.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 150.222.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:c5:2d:a1:d3:77:dc:5e:04:58:0f:d1:81:ff:c5:c3:05:7a:62:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b9:a1:c3:25:42:30:9b:4b:68:1c:16:08:d4:
0f:2b:3a:2b:98:7d:8e:8f:44:39:19:31:5d:09:75:
ef:cf:a7:a7:3f:18:02:d0:02:f4:f6:03:e8:12:18:
9c:56:00:5f:93:a0:13:8c:e1:46:74:3b:df:7c:63:
5e:e0:b7:6d:a2:3f:d7:12:d1:bc:2f:d2:ff:c5:43:
93:73:31:ac:b4:8b:a9:2d:22:61:f3:06:a9:2d:d4:
d4:ae:b2:cd:c8:c6:9a:c6:6f:b9:08:ea:7f:71:3e:
39:04:c0:9c:6f:2c:7d:4c:25:90:8b:21:27:3a:40:
da:47:de:0c:52:27:2c:ca:30:78:5d:1e:0d:4b:dc:
90:60:ec:15:05:4d:0b:08:81:6f:75:c4:3d:22:71:
51:a6:44:60:65:08:39:17:39:ad:f8:cc:3c:e2:71:
27:eb:bc:72:ee:d7:c7:df:8a:33:e9:68:cf:f0:40:
87:ee:d6:dd:5e:41:c8:0a:7a:65:71:90:2b:5a:6b:
2b:e0:5c:6d:74:ed:3b:bb:b3:8b:1c:25:81:cc:c6:
88:ea:8e:ae:ea:21:1e:a6:a4:ce:6f:aa:fc:60:a6:
21:99:ec:ab:5d:27:b4:ff:1c:10:60:c6:8f:76:8b:
26:a5:4d:d0:80:ac:37:d9:fe:f7:26:2d:a6:b6:0b:
0b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:67:16:20:F8:76:3A:CD:77:1C:B8:CE:64:37:CA:B9:41:B9:6D:73
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/658dcb89-91e3-44a9-aef5-0be9d2d1cf3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.222.74.0/24
Signature Algorithm: sha256WithRSAEncryption
93:28:be:d3:d0:41:62:46:32:f9:3d:f4:3f:a3:49:f5:4f:1a:
3c:79:00:df:18:10:30:df:79:30:0d:4c:ab:ba:03:99:c9:e2:
a9:5f:ce:d4:15:42:8a:12:d7:e6:6f:f8:f6:b1:de:03:7a:76:
f8:45:7b:03:9b:0c:79:e2:63:67:74:c7:e6:ea:90:79:46:12:
61:33:67:33:64:98:53:cc:ee:10:e6:72:a6:08:5f:fc:4f:aa:
9c:d2:ba:e4:8d:59:f1:dc:cc:47:fd:44:d3:26:73:86:a5:91:
af:b9:87:8e:19:e1:de:02:60:96:4f:db:8c:a1:89:f6:bb:d7:
79:4d:7c:9b:d5:b8:d6:4c:c4:9b:d6:12:7c:48:89:42:eb:de:
d2:a6:57:dc:4c:c0:f4:3e:d3:14:f6:95:a5:0a:90:4c:54:82:
e1:59:e0:5c:8d:4d:73:06:24:7c:78:ff:74:1e:11:fa:de:7b:
24:44:80:7a:1c:43:81:3c:dc:75:23:82:96:2c:88:4a:86:ad:
b1:6f:a6:37:1a:0b:e7:60:6a:b4:61:12:2d:a1:52:38:70:e1:
35:ba:21:d2:09:a6:94:69:b5:6f:22:2f:bc:bb:9c:c6:93:0c:
d2:15:de:c8:91:3e:53:e8:13:a7:0f:1e:42:61:0e:97:17:59:
0d:f7:56:8b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUT8UtodN33F4EWA/Rgf/FwwV6YmAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTA3MDAwMDAwWhcNMjUwMjExMjM1OTU5
WjB6MUkwRwYDVQQFE0A3MWZkOTA2NDJlYWM5YmI4ZmEyNTZmMGI2ZDFiZmZmNTNm
YmZmMmQ5ZjlmZTgyZGI2ZjZmMTcyMDU4MDU3ZjE1MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDvuaHDJUIwm0toHBYI1A8rOiuYfY6PRDkZMV0Jde/Pp6c/
GALQAvT2A+gSGJxWAF+ToBOM4UZ0O998Y17gt22iP9cS0bwv0v/FQ5NzMay0i6kt
ImHzBqkt1NSuss3IxprGb7kI6n9xPjkEwJxvLH1MJZCLISc6QNpH3gxSJyzKMHhd
Hg1L3JBg7BUFTQsIgW91xD0icVGmRGBlCDkXOa34zDzicSfrvHLu18ffijPpaM/w
QIfu1t1eQcgKemVxkCtaayvgXG107Tu7s4scJYHMxojqjq7qIR6mpM5vqvxgpiGZ
7KtdJ7T/HBBgxo92iyalTdCArDfZ/vcmLaa2CwutAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUpWcWIPh2Os13HLjOZDfKuUG5bXMwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzY1OGRjYjg5LTkxZTMtNDRhOS1hZWY1LTBiZTlkMmQxY2YzZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACW3kowDQYJKoZIhvcNAQELBQADggEBAJMovtPQQWJGMvk99D+jSfVPGjx5
AN8YEDDfeTANTKu6A5nJ4qlfztQVQooS1+Zv+Pax3gN6dvhFewObDHniY2d0x+bq
kHlGEmEzZzNkmFPM7hDmcqYIX/xPqpzSuuSNWfHczEf9RNMmc4alka+5h44Z4d4C
YJZP24yhifa713lNfJvVuNZMxJvWEnxIiULr3tKmV9xMwPQ+0xT2laUKkExUguFZ
4FyNTXMGJHx4/3QeEfreeyREgHocQ4E83HUjgpYsiEqGrbFvpjcaC+dgarRhEi2h
Ujhw4TW6IdIJppRptW8iL7y7nMaTDNIV3siRPlPoE6cPHkJhDpcXWQ33Vos=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:06 2025 by rpki-client