Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d2c0034-a51d-4e50-940b-9cad78a1946d.roa
File: 6d2c0034-a51d-4e50-940b-9cad78a1946d.roa (raw, json)
Hash identifier: KJwT4B3nHpNplm7sxpphL0GYr7K+oBK4CBIw5PxwAj0=
Subject key identifier: A2:A4:A7:70:E2:C0:BD:E2:90:E1:CD:71:0D:D8:15:AF:84:20:9C:04
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6C0C013D0942A77BEA889E8614F125F7A929C554
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d2c0034-a51d-4e50-940b-9cad78a1946d.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 207.240.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:0c:01:3d:09:42:a7:7b:ea:88:9e:86:14:f1:25:f7:a9:29:c5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4d:99:24:15:8d:1c:e3:7f:44:9b:02:aa:1a:
09:6a:67:d6:c0:49:a5:ad:91:c0:1b:f0:28:95:9b:
07:79:8a:27:4e:60:5a:6f:97:a2:29:33:97:e0:44:
21:21:73:da:88:69:2a:30:f8:ca:ef:be:e4:20:ff:
0c:06:02:97:d6:6d:a6:25:3d:07:e9:11:92:72:e2:
68:cf:e3:94:f7:b7:9c:be:39:dc:1a:bd:ca:85:61:
f8:c9:b7:8a:8c:74:71:00:f9:a0:14:09:1d:45:e9:
ad:c7:59:4a:69:07:29:40:63:29:65:cd:50:88:78:
0a:92:b0:63:d2:12:85:9b:b1:e8:d4:0c:47:77:9b:
d9:62:a8:e7:e8:08:24:b0:ab:02:f9:8e:cd:26:4c:
a8:ba:72:a1:1d:c0:9c:8b:f9:40:90:d7:ac:ce:05:
71:18:8a:82:3a:8e:cc:0f:08:54:ee:3a:a6:77:e9:
5f:87:18:8a:31:ae:94:ab:7b:64:38:c8:f5:18:90:
01:36:ab:de:1b:e3:de:94:fb:d4:c5:ec:bf:54:85:
1a:37:bd:8f:b3:83:3c:dd:28:fd:28:a3:06:33:87:
8a:ec:a7:4d:fd:ea:57:fe:6c:d1:78:29:da:9e:a4:
cb:80:70:70:95:e5:e6:ac:6d:90:2a:ce:ea:c6:36:
c7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A4:A7:70:E2:C0:BD:E2:90:E1:CD:71:0D:D8:15:AF:84:20:9C:04
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d2c0034-a51d-4e50-940b-9cad78a1946d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.240.0.0/16
Signature Algorithm: sha256WithRSAEncryption
aa:66:45:31:45:20:5c:be:78:7d:b8:d9:15:30:32:14:00:ce:
61:43:02:c6:4b:af:20:d5:c0:ea:24:02:2a:60:8a:c4:97:6a:
fe:cc:9b:11:8a:a8:70:d3:b9:0b:35:16:ad:da:cb:bb:db:cc:
57:2a:24:9a:0f:3c:7b:38:6d:00:b0:45:c2:5d:cc:40:a7:0d:
3b:26:3c:e3:8c:8a:fa:58:3a:39:f1:6d:e8:a2:26:e4:9e:6c:
d0:de:dc:f0:e3:0a:01:8d:01:d0:51:f4:97:c8:7b:33:31:9e:
d9:a3:24:1c:d5:fd:48:ad:bd:70:a4:3e:d0:24:92:e1:23:1e:
60:b3:39:50:c4:db:87:6b:00:04:43:79:ee:27:cb:5a:15:c4:
1b:d4:94:55:26:ca:ef:df:9a:44:26:f2:f8:61:5c:ec:c5:27:
fd:9c:33:45:c7:ab:52:c1:fb:5b:ab:3d:26:c5:aa:f4:a0:b3:
3d:ad:35:50:d9:9d:30:b1:81:b3:11:54:9d:ad:c1:58:99:d1:
72:9c:15:ac:32:0f:4e:20:b7:53:e8:b8:71:8b:b0:ff:47:e8:
c1:4e:dd:d2:c8:e8:98:8e:5c:1c:43:16:0a:78:4b:99:a7:23:
15:44:c9:8a:8d:e2:60:d6:b9:54:68:95:51:73:e0:24:bc:ac:
25:bc:ca:73
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUbAwBPQlCp3vqiJ6GFPEl96kpxVQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjI3MDAwMDAwWhcNMjUwMTMxMjM1OTU5
WjB6MUkwRwYDVQQFE0AxMDZlZTVjMmJhN2FhN2JiM2ZkZTc2MWY3OGViZjMzNTkx
ZTQxZGQ4ODIzMzMxMDhmZjcxNDI5YmQ1MTdmZjcyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9TZkkFY0c439EmwKqGglqZ9bASaWtkcAb8CiVmwd5iidO
YFpvl6IpM5fgRCEhc9qIaSow+MrvvuQg/wwGApfWbaYlPQfpEZJy4mjP45T3t5y+
OdwavcqFYfjJt4qMdHEA+aAUCR1F6a3HWUppBylAYyllzVCIeAqSsGPSEoWbsejU
DEd3m9liqOfoCCSwqwL5js0mTKi6cqEdwJyL+UCQ16zOBXEYioI6jswPCFTuOqZ3
6V+HGIoxrpSre2Q4yPUYkAE2q94b496U+9TF7L9UhRo3vY+zgzzdKP0oowYzh4rs
p0396lf+bNF4KdqepMuAcHCV5easbZAqzurGNse/AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUoqSncOLAveKQ4c1xDdgVr4QgnAQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZkMmMwMDM0LWE1MWQtNGU1MC05NDBiLTljYWQ3OGExOTQ2ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDP8DANBgkqhkiG9w0BAQsFAAOCAQEAqmZFMUUgXL54fbjZFTAyFADOYUMC
xkuvINXA6iQCKmCKxJdq/sybEYqocNO5CzUWrdrLu9vMVyokmg88ezhtALBFwl3M
QKcNOyY844yK+lg6OfFt6KIm5J5s0N7c8OMKAY0B0FH0l8h7MzGe2aMkHNX9SK29
cKQ+0CSS4SMeYLM5UMTbh2sABEN57ifLWhXEG9SUVSbK79+aRCby+GFc7MUn/Zwz
RcerUsH7W6s9JsWq9KCzPa01UNmdMLGBsxFUna3BWJnRcpwVrDIPTiC3U+i4cYuw
/0fowU7d0sjomI5cHEMWCnhLmacjFUTJio3iYNa5VGiVUXPgJLysJbzKcw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:47 2025 by rpki-client