Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75c02a07-84ae-4643-a74d-30d9fa14b1f3.roa
File: 75c02a07-84ae-4643-a74d-30d9fa14b1f3.roa (raw, json)
Hash identifier: eAbLxaMW55TcSdTSWMvzt67i+rgIQB/GCjB54zmvTqI=
Subject key identifier: 3C:F6:7A:37:88:10:68:E7:8E:D9:C9:8B:8B:FD:D0:47:BB:4B:9E:52
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5894230C717112103292AEC57ED5C102EBF54007
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75c02a07-84ae-4643-a74d-30d9fa14b1f3.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 96.0.40.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:94:23:0c:71:71:12:10:32:92:ae:c5:7e:d5:c1:02:eb:f5:40:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:a4:43:5c:b8:aa:9d:10:73:84:eb:94:c6:
10:87:42:e8:80:29:f6:0a:e5:e3:16:71:27:ff:f4:
08:6f:c9:71:9b:1e:3f:8c:ee:bd:87:8f:da:cf:d1:
35:62:ae:1f:e2:11:06:7e:ea:d5:e4:3b:76:d0:44:
ce:74:0a:12:0d:e0:b2:48:b2:47:cd:b6:7d:4f:8d:
68:18:ea:0d:43:6f:8a:89:aa:b4:05:99:f2:55:42:
77:9e:33:38:bc:ee:34:bc:16:33:ed:ba:e0:d8:db:
8d:f3:6c:43:c5:47:b5:54:64:0f:54:c0:37:cc:c3:
c7:91:68:5f:70:58:4a:56:a4:e6:5d:0a:36:49:56:
6f:59:d0:67:21:29:ae:e5:22:8c:d6:db:37:f1:f4:
bf:c3:92:68:54:88:6a:d2:25:41:47:63:d0:1e:3d:
1a:48:f7:13:de:71:35:d7:b3:d8:7c:01:e6:d7:a9:
7d:57:9a:af:eb:84:ee:59:46:62:fb:74:c8:c1:f9:
27:a1:80:55:ec:8c:2d:fe:79:3b:2a:57:5b:08:44:
b9:23:76:ff:ff:53:31:18:22:d6:e8:4c:54:d0:d0:
40:83:1c:a5:5c:60:a3:db:8f:77:9f:fd:6a:03:df:
54:12:81:93:6c:f1:ca:90:84:23:3f:5e:a9:ce:fd:
bd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F6:7A:37:88:10:68:E7:8E:D9:C9:8B:8B:FD:D0:47:BB:4B:9E:52
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75c02a07-84ae-4643-a74d-30d9fa14b1f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.0.40.0/21
Signature Algorithm: sha256WithRSAEncryption
b6:92:1b:d9:f3:ba:7e:d4:74:ff:0f:a6:68:7a:e3:c1:6b:a0:
34:24:59:49:88:e4:1b:49:67:b4:e8:dd:fb:18:fe:8f:39:97:
ad:43:88:3f:93:40:bc:78:ca:cc:1a:4a:3f:15:35:07:08:08:
30:55:9e:fc:cd:ae:51:65:de:ee:3f:4d:93:89:d2:9f:de:7c:
8f:36:f2:9d:57:05:63:4b:cf:25:e5:c4:98:2c:0d:41:06:1e:
de:7f:ca:46:93:99:09:9f:b1:58:07:f6:b8:03:6a:a2:8e:99:
00:19:76:39:43:87:84:35:dd:c1:8b:b3:e7:05:6a:07:1d:25:
23:21:4e:46:29:03:0b:e8:6e:1c:a5:4d:f9:82:22:a0:eb:5c:
3d:5f:f3:87:26:d3:84:40:4f:ab:77:09:de:e5:d3:02:9b:52:
ce:fc:d2:23:6f:88:71:3b:07:ab:26:af:1e:5c:89:75:b3:0a:
9b:36:50:a4:d7:3e:2c:9a:9b:30:ad:54:46:ca:85:6d:5e:4a:
47:2f:e5:52:ec:9b:db:78:2c:95:00:09:26:d1:7a:27:9a:70:
70:42:83:60:54:6d:7c:74:dc:27:ff:0e:74:5a:eb:a9:82:23:
03:e6:50:c0:33:09:b6:79:b8:ec:d2:66:43:87:c8:6a:7d:f6:
1b:68:cb:92
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWJQjDHFxEhAykq7FftXBAuv1QAcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjMwMDAwMDAwWhcNMjUwMjAzMjM1OTU5
WjB6MUkwRwYDVQQFE0BiYmM2YzlkYzBiY2YyMjA4MzczZGM0MTIyNDVhNGRiNTJi
MmQ1ZDEwNjk2N2E1OTZiNTJjMTY5MjZiMzA4NzQ1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC7nKRDXLiqnRBzhOuUxhCHQuiAKfYK5eMWcSf/9AhvyXGb
Hj+M7r2Hj9rP0TVirh/iEQZ+6tXkO3bQRM50ChIN4LJIskfNtn1PjWgY6g1Db4qJ
qrQFmfJVQneeMzi87jS8FjPtuuDY243zbEPFR7VUZA9UwDfMw8eRaF9wWEpWpOZd
CjZJVm9Z0GchKa7lIozW2zfx9L/DkmhUiGrSJUFHY9AePRpI9xPecTXXs9h8AebX
qX1Xmq/rhO5ZRmL7dMjB+SehgFXsjC3+eTsqV1sIRLkjdv//UzEYItboTFTQ0ECD
HKVcYKPbj3ef/WoD31QSgZNs8cqQhCM/XqnO/b0/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUPPZ6N4gQaOeO2cmLi/3QR7tLnlIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzc1YzAyYTA3LTg0YWUtNDY0My1hNzRkLTMwZDlmYTE0YjFmMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBANgACgwDQYJKoZIhvcNAQELBQADggEBALaSG9nzun7UdP8Ppmh648FroDQk
WUmI5BtJZ7To3fsY/o85l61DiD+TQLx4yswaSj8VNQcICDBVnvzNrlFl3u4/TZOJ
0p/efI828p1XBWNLzyXlxJgsDUEGHt5/ykaTmQmfsVgH9rgDaqKOmQAZdjlDh4Q1
3cGLs+cFagcdJSMhTkYpAwvobhylTfmCIqDrXD1f84cm04RAT6t3Cd7l0wKbUs78
0iNviHE7B6smrx5ciXWzCps2UKTXPiyamzCtVEbKhW1eSkcv5VLsm9t4LJUACSbR
eieacHBCg2BUbXx03Cf/DnRa66mCIwPmUMAzCbZ5uOzSZkOHyGp99htoy5I=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:50 2025 by rpki-client