Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/644b5c4a-1c6f-4ce2-8185-51f3ed53b306.roa
File: 644b5c4a-1c6f-4ce2-8185-51f3ed53b306.roa (raw, json)
Hash identifier: ffYpdOjgqg3U7T3xc6TiCV4SK9j7SN/6Vb0kN2xkdxc=
Subject key identifier: 89:7E:01:4A:29:7D:24:D0:5F:93:E2:AE:63:E3:04:2C:D3:0C:07:CF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 58E913A1FAF3EF147EA33663A68344C91CF5C402
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/644b5c4a-1c6f-4ce2-8185-51f3ed53b306.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 16.64.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:e9:13:a1:fa:f3:ef:14:7e:a3:36:63:a6:83:44:c9:1c:f5:c4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:98:f0:93:db:3d:9b:b3:95:88:5f:a6:42:e1:
c5:89:8e:76:73:2b:8a:9d:c1:e8:6a:13:dc:6b:14:
80:65:2f:06:3c:19:64:33:cb:dd:8d:ba:c2:06:f2:
3f:2e:0a:6e:b0:da:74:61:76:12:ce:88:67:0e:30:
5c:97:33:b2:a6:07:13:65:30:9d:91:f1:4a:7d:41:
c5:20:62:81:f9:af:53:00:32:63:1c:a7:ae:6b:0d:
21:69:87:08:3f:7a:af:78:f4:1d:c3:58:98:af:02:
05:df:19:24:9f:b1:9e:a2:3d:e8:63:9a:a5:8c:dd:
c7:f3:93:b9:17:1f:6c:36:8b:f8:79:bb:fa:80:27:
d1:2d:8b:03:48:95:16:df:c8:e6:20:22:5d:59:f6:
68:34:88:a7:cb:bd:4a:af:2e:81:ec:d3:bb:e7:19:
6f:60:9f:78:7e:3a:28:34:e9:40:15:13:d6:12:6f:
a5:de:18:bf:62:da:ae:e6:0e:3c:f1:99:9b:64:e2:
cd:f2:50:18:08:18:ca:a3:77:15:18:d6:bc:84:ff:
4b:a0:3c:50:c3:2c:1d:2d:ff:da:c6:38:2d:e6:30:
44:2c:a8:d8:a2:79:3f:ad:38:e7:09:89:de:49:61:
18:c4:1e:f8:9e:27:3d:82:2a:b8:48:23:0a:26:ff:
f4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7E:01:4A:29:7D:24:D0:5F:93:E2:AE:63:E3:04:2C:D3:0C:07:CF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/644b5c4a-1c6f-4ce2-8185-51f3ed53b306.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.64.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6e:39:97:d6:7f:12:23:bd:51:e4:93:01:c3:f7:60:0b:af:fa:
25:83:af:c8:06:81:9a:85:4d:8e:9e:06:bc:93:7f:bf:63:f0:
5a:ad:d4:10:7d:de:ad:67:18:21:18:a9:f7:7b:4e:df:f1:ef:
77:6b:e0:2f:fb:41:d8:36:af:fa:87:6a:74:e0:a0:3e:ed:56:
1f:99:68:bd:b0:77:3c:e3:5a:3d:b9:aa:04:e9:21:28:73:47:
b6:39:04:8c:6e:9a:52:c9:2d:37:9e:91:ad:a3:db:e0:7b:0f:
fb:b6:31:80:4f:c8:76:51:0a:9f:59:80:76:93:c1:4d:17:55:
84:fb:6a:80:7b:3f:d7:3d:f4:ba:5f:83:07:22:a8:65:1b:af:
13:6b:c6:2a:e8:3d:5e:1e:a8:70:b6:f7:88:ad:0a:92:c2:58:
0e:7f:85:cf:d6:bf:24:fa:b3:0f:3b:97:00:7d:7c:70:9d:11:
f9:40:c1:b9:88:27:8d:3d:13:4a:06:02:54:77:69:50:20:67:
94:eb:47:2d:08:4a:8d:04:bd:77:e4:63:fa:23:40:a2:3e:0e:
15:88:40:2f:87:35:11:1d:86:da:73:c3:90:93:2c:56:37:83:
60:ce:7a:c5:2b:53:3f:45:97:93:1b:c1:d6:95:d7:81:40:60:
cb:0a:f1:c1
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUWOkTofrz7xR+ozZjpoNEyRz1xAIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjE3MDAwMDAwWhcNMjUwMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AwNDVmYjM5MGMwZjFkYWE4Zjk2MmMwYWZlYWZlYzZmYWMx
ZWM5M2U0Mjk5M2VhODI4Y2YzNDhiYjY1NDRmY2EwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC+mPCT2z2bs5WIX6ZC4cWJjnZzK4qdwehqE9xrFIBlLwY8
GWQzy92NusIG8j8uCm6w2nRhdhLOiGcOMFyXM7KmBxNlMJ2R8Up9QcUgYoH5r1MA
MmMcp65rDSFphwg/eq949B3DWJivAgXfGSSfsZ6iPehjmqWM3cfzk7kXH2w2i/h5
u/qAJ9EtiwNIlRbfyOYgIl1Z9mg0iKfLvUqvLoHs07vnGW9gn3h+Oig06UAVE9YS
b6XeGL9i2q7mDjzxmZtk4s3yUBgIGMqjdxUY1ryE/0ugPFDDLB0t/9rGOC3mMEQs
qNiieT+tOOcJid5JYRjEHvieJz2CKrhIIwom//TLAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUiX4BSil9JNBfk+KuY+MELNMMB88wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzY0NGI1YzRhLTFjNmYtNGNlMi04MTg1LTUxZjNlZDUzYjMwNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQQDANBgkqhkiG9w0BAQsFAAOCAQEAbjmX1n8SI71R5JMBw/dgC6/6JYOv
yAaBmoVNjp4GvJN/v2PwWq3UEH3erWcYIRip93tO3/Hvd2vgL/tB2Dav+odqdOCg
Pu1WH5lovbB3PONaPbmqBOkhKHNHtjkEjG6aUsktN56RraPb4HsP+7YxgE/IdlEK
n1mAdpPBTRdVhPtqgHs/1z30ul+DByKoZRuvE2vGKug9Xh6ocLb3iK0KksJYDn+F
z9a/JPqzDzuXAH18cJ0R+UDBuYgnjT0TSgYCVHdpUCBnlOtHLQhKjQS9d+Rj+iNA
oj4OFYhAL4c1ER2G2nPDkJMsVjeDYM56xStTP0WXkxvB1pXXgUBgywrxwQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:41 2025 by rpki-client