Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/420d710a-1005-4664-ae45-899c0b6c57a4.roa
File: 420d710a-1005-4664-ae45-899c0b6c57a4.roa (raw, json)
Hash identifier: U1XTtIW/SCqrsifUkTm0w0L7kBhcpP8j+Ya9fjOTGYI=
Subject key identifier: 93:E4:44:48:6B:85:12:3F:9A:90:7B:71:3A:F9:7B:16:39:D8:2A:4B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3F27AC4A54BC254DC24B137665EB7B02736A4111
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/420d710a-1005-4664-ae45-899c0b6c57a4.roa
Signing time: Tue 24 Dec 2024 00:00:00 +0000
ROA not before: Tue 24 Dec 2024 00:00:00 +0000
ROA not after: Tue 28 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 153.42.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:27:ac:4a:54:bc:25:4d:c2:4b:13:76:65:eb:7b:02:73:6a:41:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 24 00:00:00 2024 GMT
Not After : Jan 28 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:63:54:fe:1b:ac:99:0e:fe:8a:ba:36:32:a6:
f6:03:f1:35:25:48:5b:a8:7b:96:62:69:b1:ed:8b:
68:80:67:36:40:ee:8e:4e:08:bc:1d:67:e1:8a:60:
01:e5:cf:b2:64:e4:ca:b3:cf:43:1c:59:19:cd:9a:
8a:6c:e8:8b:71:90:fe:19:ae:49:b8:f5:26:2f:60:
df:5d:3b:9f:4c:3a:5f:07:fb:8c:ae:4c:d1:bb:81:
04:04:21:1a:62:7d:18:dd:fa:5c:53:78:2a:6e:e0:
d2:1f:ec:f0:0c:d2:a1:a2:ff:00:d9:96:78:f2:24:
cf:d4:10:23:4a:06:bb:01:57:45:ef:74:0f:b4:ea:
0e:25:65:66:90:69:77:41:cb:98:e8:46:59:52:97:
fa:0d:ab:2c:c2:6a:27:33:5e:3f:2d:4b:71:aa:ba:
5c:69:2a:1a:19:d3:fc:95:a5:d1:02:9f:49:b1:f4:
80:a3:32:75:95:65:c8:92:27:87:91:0e:f5:df:3d:
77:b7:10:f8:8f:02:28:14:dc:a7:b9:51:ca:e4:d9:
be:5f:aa:68:40:f0:14:73:0b:f0:28:5a:f6:ce:df:
c8:4b:1e:75:1a:45:6c:48:90:ba:e7:25:42:2a:75:
36:5e:d7:0f:6c:c5:bc:a2:7e:bc:d9:52:52:1f:90:
ec:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E4:44:48:6B:85:12:3F:9A:90:7B:71:3A:F9:7B:16:39:D8:2A:4B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/420d710a-1005-4664-ae45-899c0b6c57a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.42.0.0/16
Signature Algorithm: sha256WithRSAEncryption
84:59:53:24:40:71:e4:29:c3:9c:92:bd:7a:33:85:17:d9:c2:
93:76:a7:ab:d9:0e:c5:90:a8:0a:a9:40:c6:5a:6d:cb:68:f5:
01:01:2c:eb:ae:db:fb:fd:b7:1d:14:0f:74:4c:6e:48:1e:b4:
b4:f4:bc:a9:6c:0c:5e:50:7a:f7:ce:e0:dd:d2:9e:37:8c:2d:
62:13:af:09:ff:fb:05:de:ef:27:f3:a7:2b:b2:e8:9d:e9:a0:
c9:54:7d:68:be:99:2d:12:cf:5d:c8:6e:76:b5:43:00:87:6e:
dd:b3:4c:7c:a9:7e:53:4c:a3:38:77:f4:14:37:c8:b2:08:74:
c6:b8:c4:ce:1c:95:02:99:f9:bc:44:69:f8:e2:01:58:0a:76:
c5:87:85:0b:69:da:46:65:8c:71:73:a1:52:22:1d:8c:df:2d:
d1:a6:73:33:99:68:62:10:35:c7:8f:14:8b:ae:20:45:2b:c2:
fa:be:e5:42:e3:79:2c:17:45:e4:61:05:3d:d1:fc:e6:b2:9a:
59:fb:88:0e:a2:2f:e5:c8:a0:fd:d5:a3:e5:ae:4a:40:7a:ca:
28:25:a5:22:cc:13:f9:a0:39:25:75:28:35:ad:68:86:64:93:
a1:da:ed:96:ac:d0:e0:58:40:f3:89:f4:10:f5:b9:a8:db:8e:
05:b4:31:f3
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUPyesSlS8JU3CSxN2Zet7AnNqQREwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjI0MDAwMDAwWhcNMjUwMTI4MjM1OTU5
WjB6MUkwRwYDVQQFE0AwNTdmMDlkZGI4MTNiYjllZDhmMzc3YTdjYmNmYmU4MzNh
YmE2ZWM3Zjc3YmIyOGE2YWNlMDcyYTQ1M2VjMTQzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDgY1T+G6yZDv6KujYypvYD8TUlSFuoe5ZiabHti2iAZzZA
7o5OCLwdZ+GKYAHlz7Jk5Mqzz0McWRnNmops6ItxkP4Zrkm49SYvYN9dO59MOl8H
+4yuTNG7gQQEIRpifRjd+lxTeCpu4NIf7PAM0qGi/wDZlnjyJM/UECNKBrsBV0Xv
dA+06g4lZWaQaXdBy5joRllSl/oNqyzCaiczXj8tS3GqulxpKhoZ0/yVpdECn0mx
9ICjMnWVZciSJ4eRDvXfPXe3EPiPAigU3Ke5Ucrk2b5fqmhA8BRzC/AoWvbO38hL
HnUaRWxIkLrnJUIqdTZe1w9sxbyifrzZUlIfkOyfAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUk+RESGuFEj+akHtxOvl7FjnYKkswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQyMGQ3MTBhLTEwMDUtNDY2NC1hZTQ1LTg5OWMwYjZjNTdhNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCZKjANBgkqhkiG9w0BAQsFAAOCAQEAhFlTJEBx5CnDnJK9ejOFF9nCk3an
q9kOxZCoCqlAxlpty2j1AQEs667b+/23HRQPdExuSB60tPS8qWwMXlB6987g3dKe
N4wtYhOvCf/7Bd7vJ/OnK7LonemgyVR9aL6ZLRLPXchudrVDAIdu3bNMfKl+U0yj
OHf0FDfIsgh0xrjEzhyVApn5vERp+OIBWAp2xYeFC2naRmWMcXOhUiIdjN8t0aZz
M5loYhA1x48Ui64gRSvC+r7lQuN5LBdF5GEFPdH85rKaWfuIDqIv5cig/dWj5a5K
QHrKKCWlIswT+aA5JXUoNa1ohmSTodrtlqzQ4FhA84n0EPW5qNuOBbQx8w==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:18 2025 by rpki-client