Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e6df26a-4bb3-4e3f-a984-0b42276ec009.roa
File: 2e6df26a-4bb3-4e3f-a984-0b42276ec009.roa (raw, json)
Hash identifier: cy0iuFTQKTzRTpTzGXrfa5Ac0CLaW4Rn8yhRU0cqMLk=
Subject key identifier: 57:E3:09:FB:30:01:6C:AA:96:7D:2C:18:B1:1F:9A:B4:A2:40:32:FF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 450B1C8B29CB75C44DE0836388B4FEE3AB8FD91D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e6df26a-4bb3-4e3f-a984-0b42276ec009.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 56.14.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:0b:1c:8b:29:cb:75:c4:4d:e0:83:63:88:b4:fe:e3:ab:8f:d9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: serialNumber=f91cf48539b4bc80f73ca0ef6e8849d12c2613e25577b3054616ed32f1062513, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d0:9d:c5:e3:e4:38:22:01:71:19:25:7d:48:
40:5a:ed:0f:90:2f:3c:cd:ff:0b:ae:d1:6b:f5:83:
b3:b0:91:c1:b4:e9:a2:00:f3:1f:67:40:3f:8e:3b:
ec:d3:8e:0a:d1:3e:95:73:26:49:35:75:59:f3:f0:
53:99:46:3e:b3:fb:de:07:37:35:b4:9a:80:cc:89:
ef:d1:d0:f8:be:0b:b8:44:00:2a:ba:6b:4c:56:dc:
c5:48:72:a8:ad:ff:36:7b:61:1a:bf:6e:eb:25:5c:
56:9f:ad:4c:f0:b0:63:91:65:3a:ed:de:b0:67:d5:
37:c0:66:26:44:95:22:07:d5:28:19:d9:2e:41:8c:
f6:f7:24:0b:40:c3:8c:7a:b2:8b:17:20:ba:67:36:
5d:61:5b:59:49:62:d5:56:2d:e9:14:f7:c7:11:e2:
66:f8:d5:13:36:c6:25:cf:44:44:56:bd:23:12:32:
8b:a7:ce:77:2c:bc:bd:6b:7c:21:42:e9:d1:b6:28:
e2:68:cd:ce:55:a9:f3:3c:f6:fa:36:46:e5:19:f0:
9f:5a:09:54:3d:81:42:3f:ba:6a:f5:0d:02:16:79:
2f:cf:af:bf:e8:78:2d:3a:f3:57:9e:82:02:0c:1c:
9d:68:54:85:38:c1:de:d1:31:11:be:4a:7c:5f:df:
80:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E3:09:FB:30:01:6C:AA:96:7D:2C:18:B1:1F:9A:B4:A2:40:32:FF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e6df26a-4bb3-4e3f-a984-0b42276ec009.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.14.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b7:71:68:f9:6d:2d:48:7d:63:c7:93:d4:c5:44:c1:96:0a:09:
b3:55:00:2a:f4:a5:68:9a:7b:c5:11:44:f0:02:8c:33:91:2c:
71:d6:fa:1c:68:49:7b:13:96:e9:58:c6:88:7e:23:da:71:16:
31:86:83:20:8d:84:a1:c3:19:96:ed:6f:54:e6:4d:7c:3e:1f:
0d:50:7d:8f:98:3b:0b:f5:69:29:45:b1:17:75:ed:b7:0c:5f:
2d:70:b1:39:47:91:87:0a:f3:41:d8:f8:cb:43:dc:4a:17:92:
05:76:5a:d4:ab:0e:ec:6d:8e:b5:eb:d3:6a:61:32:ca:eb:53:
a4:9d:ac:fc:89:90:ce:99:7b:0e:05:fa:2a:fc:dc:5b:76:16:
35:2f:a7:71:25:83:79:53:73:c2:f3:0a:63:9d:b9:5d:bd:b0:
00:55:e9:3d:63:a0:4b:b0:7f:de:e7:90:c7:eb:4b:85:6e:57:
f1:67:3b:26:9b:96:b5:e6:4d:dc:9e:5f:a2:8f:fd:ab:b8:01:
28:49:e3:55:29:6e:ba:7d:db:d6:8c:98:fb:99:b8:eb:71:da:
e2:c2:cb:7b:1e:e4:44:8d:1d:30:b7:f5:ca:dc:d0:cb:71:ee:
fe:66:3c:e2:56:e1:2e:a8:96:8a:d9:3e:e9:a5:7a:c3:bc:bc:
0c:31:d2:28
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIURQsciynLdcRN4INjiLT+46uP2R0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTA0MDAwMDAwWhcNMjUwMjA4MjM1OTU5
WjB6MUkwRwYDVQQFE0BmOTFjZjQ4NTM5YjRiYzgwZjczY2EwZWY2ZTg4NDlkMTJj
MjYxM2UyNTU3N2IzMDU0NjE2ZWQzMmYxMDYyNTEzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCw0J3F4+Q4IgFxGSV9SEBa7Q+QLzzN/wuu0Wv1g7OwkcG0
6aIA8x9nQD+OO+zTjgrRPpVzJkk1dVnz8FOZRj6z+94HNzW0moDMie/R0Pi+C7hE
ACq6a0xW3MVIcqit/zZ7YRq/buslXFafrUzwsGORZTrt3rBn1TfAZiZElSIH1SgZ
2S5BjPb3JAtAw4x6sosXILpnNl1hW1lJYtVWLekU98cR4mb41RM2xiXPRERWvSMS
MounzncsvL1rfCFC6dG2KOJozc5VqfM89vo2RuUZ8J9aCVQ9gUI/umr1DQIWeS/P
r7/oeC0681eeggIMHJ1oVIU4wd7RMRG+Snxf34AhAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUV+MJ+zABbKqWfSwYsR+atKJAMv8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzJlNmRmMjZhLTRiYjMtNGUzZi1hOTg0LTBiNDIyNzZlYzAwOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4DjANBgkqhkiG9w0BAQsFAAOCAQEAt3Fo+W0tSH1jx5PUxUTBlgoJs1UA
KvSlaJp7xRFE8AKMM5Escdb6HGhJexOW6VjGiH4j2nEWMYaDII2EocMZlu1vVOZN
fD4fDVB9j5g7C/VpKUWxF3XttwxfLXCxOUeRhwrzQdj4y0PcSheSBXZa1KsO7G2O
tevTamEyyutTpJ2s/ImQzpl7DgX6KvzcW3YWNS+ncSWDeVNzwvMKY525Xb2wAFXp
PWOgS7B/3ueQx+tLhW5X8Wc7JpuWteZN3J5foo/9q7gBKEnjVSluun3b1oyY+5m4
63Ha4sLLex7kRI0dMLf1ytzQy3Hu/mY84lbhLqiWitk+6aV6w7y8DDHSKA==
-----END CERTIFICATE-----
Generated at Wed Apr 16 16:54:47 2025 by rpki-client