Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/359938b2-f6f1-4aad-bfc7-363c8eed582c.roa
File: 359938b2-f6f1-4aad-bfc7-363c8eed582c.roa (raw, json)
Hash identifier: +2BT8dc9FLAVCoR1HeWd+PwDxTFaXE7V5apLQ91o5TE=
Subject key identifier: 67:63:D2:0E:B0:C8:ED:EF:18:E7:9F:1C:13:F1:18:34:ED:66:73:FB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 09B776D604DBEE60938E64F5563E0477396C7C4C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/359938b2-f6f1-4aad-bfc7-363c8eed582c.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f1f::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:b7:76:d6:04:db:ee:60:93:8e:64:f5:56:3e:04:77:39:6c:7c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:cf:d0:0d:53:92:ed:67:75:15:d3:03:09:
cd:b5:76:86:b4:91:44:98:e8:0b:e0:9a:58:a7:09:
56:b9:67:91:6c:41:14:c5:93:17:13:13:cd:38:2b:
c6:69:a0:e8:63:3a:77:27:f4:53:70:62:ea:5a:4c:
4e:89:de:3d:4b:5c:ef:12:5a:b6:b3:e9:1a:41:28:
4c:94:40:70:3d:1b:e1:60:0c:a9:64:6a:99:17:11:
87:6e:3a:4f:62:ce:da:5f:33:de:20:7a:1e:ec:a5:
c8:25:57:8c:75:3a:2d:f2:37:f4:97:4a:48:68:c9:
8d:e0:74:39:17:c8:2f:77:f7:8a:35:5d:59:17:15:
12:75:6c:46:01:32:85:c9:71:d1:bc:f0:10:47:c0:
1d:4e:f8:8c:cc:d1:dd:e3:55:d7:fb:9c:08:25:6e:
0d:5a:ab:f7:5c:0f:80:6d:4d:46:e4:29:66:bc:1d:
40:dd:aa:ba:dc:b4:f3:da:9c:b1:bc:25:a7:9f:13:
10:4d:f7:d6:cb:e2:b9:15:1e:07:1b:9f:10:64:84:
52:70:64:a0:90:7a:40:f2:c3:b6:a6:92:11:a1:21:
e5:f3:c6:70:1a:1b:b5:91:8a:c2:30:80:c5:ba:29:
5d:e0:82:2d:c1:51:dd:31:ba:42:d0:48:7e:4d:42:
de:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:63:D2:0E:B0:C8:ED:EF:18:E7:9F:1C:13:F1:18:34:ED:66:73:FB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/359938b2-f6f1-4aad-bfc7-363c8eed582c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f1f::/36
Signature Algorithm: sha256WithRSAEncryption
44:a8:6a:22:a2:b0:21:23:6f:0d:21:1f:11:ac:7e:a8:8b:e0:
7e:1b:16:b8:2a:5b:e3:47:df:63:48:b6:ba:da:30:c3:fb:d3:
a5:3e:fb:2b:02:4c:ce:b6:b5:9e:6a:38:56:c2:be:26:7a:94:
9d:a4:ce:08:d1:d4:2c:4b:fc:ab:9d:28:87:a0:61:4d:40:60:
1d:d4:91:70:7d:64:1d:03:45:82:fe:83:5d:0c:bf:2e:de:19:
08:60:43:25:57:9e:54:fa:3a:54:9f:5e:7a:99:5b:31:a3:65:
8e:15:e7:40:95:03:63:ef:37:81:55:73:b0:9a:da:df:c3:05:
a0:a1:85:86:63:99:52:55:6f:99:0a:81:79:17:8d:24:2d:3d:
ae:64:58:15:79:6b:f8:53:a1:c8:01:5d:2f:39:9d:6c:3e:21:
78:a7:80:fb:6a:59:0d:88:21:27:60:45:28:fd:e3:e6:b0:c2:
b1:d1:5d:c6:6e:5e:44:a7:fa:67:e6:e3:ef:a9:b4:81:fb:ed:
3a:e8:14:ac:77:81:cf:3d:73:30:dc:96:a5:62:a8:2d:c5:87:
d4:00:87:4e:33:e7:b8:43:22:01:be:44:3a:36:b4:c4:b7:a4:
03:dc:5c:18:07:fd:cb:93:c1:c9:6a:86:6c:44:06:97:83:2c:
df:d4:a5:5e
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUCbd21gTb7mCTjmT1Vj4EdzlsfEwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjMwMDAwMDAwWhcNMjUwMjAzMjM1OTU5
WjB6MUkwRwYDVQQFE0AwODcyOWUyNDc2MjkzMmRjYTlmNGUzZTQ5YjM3ZjUxNDUx
ZDczOTdmODEzZTUzODFmY2E1YmU1YzY5ZTJhMjEzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvDc/QDVOS7Wd1FdMDCc21doa0kUSY6AvgmlinCVa5Z5Fs
QRTFkxcTE804K8ZpoOhjOncn9FNwYupaTE6J3j1LXO8SWraz6RpBKEyUQHA9G+Fg
DKlkapkXEYduOk9iztpfM94geh7spcglV4x1Oi3yN/SXSkhoyY3gdDkXyC9394o1
XVkXFRJ1bEYBMoXJcdG88BBHwB1O+IzM0d3jVdf7nAglbg1aq/dcD4BtTUbkKWa8
HUDdqrrctPPanLG8JaefExBN99bL4rkVHgcbnxBkhFJwZKCQekDyw7amkhGhIeXz
xnAaG7WRisIwgMW6KV3ggi3BUd0xukLQSH5NQt6DAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUZ2PSDrDI7e8Y558cE/EYNO1mc/swHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzM1OTkzOGIyLWY2ZjEtNGFhZC1iZmM3LTM2M2M4ZWVkNTgyYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8fADANBgkqhkiG9w0BAQsFAAOCAQEARKhqIqKwISNvDSEfEax+qIvg
fhsWuCpb40ffY0i2utoww/vTpT77KwJMzra1nmo4VsK+JnqUnaTOCNHULEv8q50o
h6BhTUBgHdSRcH1kHQNFgv6DXQy/Lt4ZCGBDJVeeVPo6VJ9eeplbMaNljhXnQJUD
Y+83gVVzsJra38MFoKGFhmOZUlVvmQqBeReNJC09rmRYFXlr+FOhyAFdLzmdbD4h
eKeA+2pZDYghJ2BFKP3j5rDCsdFdxm5eRKf6Z+bj76m0gfvtOugUrHeBzz1zMNyW
pWKoLcWH1ACHTjPnuEMiAb5EOja0xLekA9xcGAf9y5PByWqGbEQGl4Ms39SlXg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 23:32:46 2025 by rpki-client