Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81b97541-130e-4315-b8c4-7557321c36f1.roa
File: 81b97541-130e-4315-b8c4-7557321c36f1.roa (raw, json)
Hash identifier: GITmc1NibjzKavTV9Q7+uUiWaSukgLi8MX6C10NbvtI=
Subject key identifier: 17:F0:34:53:F5:E7:B1:D3:18:6F:0A:59:9D:CD:1C:F1:0A:78:E8:81
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2A175FD33F77BDFC43AEE1F3B2CD959CFD216E46
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81b97541-130e-4315-b8c4-7557321c36f1.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 15.159.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:17:5f:d3:3f:77:bd:fc:43:ae:e1:f3:b2:cd:95:9c:fd:21:6e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=98a4733a81942d98dcb6bb170bef71102ecdb5d74bdd46e63e8c3dbf7893cf77, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ea:88:21:f4:95:81:57:5d:57:36:f3:d5:81:
d4:55:65:7c:28:ba:2d:b8:54:27:da:fb:99:dd:ac:
1a:a1:0b:0a:82:ed:50:1c:a7:fe:e5:3a:61:90:5a:
70:f8:86:73:ee:46:b3:b1:a4:f7:4c:46:79:ec:db:
f8:88:2a:b4:28:60:e9:a9:8a:d6:a8:ce:bd:eb:66:
c1:5d:38:04:2e:bd:7c:be:52:c1:42:5e:09:48:e6:
31:d7:1c:e7:4a:0f:77:ea:94:33:db:7a:2b:5e:dd:
fa:82:b1:06:5c:b9:16:a9:7f:99:f7:1a:cc:96:41:
9a:40:c3:df:fe:e0:64:17:60:20:2c:78:4c:a2:8e:
4d:0d:55:1b:24:76:ea:62:4d:88:f1:2d:e8:b5:c4:
37:79:d2:02:35:a4:93:c1:d1:81:a9:fd:a9:76:9e:
59:8e:c5:5b:73:3e:47:4e:c5:28:ab:62:e6:63:75:
ae:16:2b:1c:ac:e2:05:40:52:a4:68:1b:22:c1:78:
23:70:1c:fc:88:5b:31:5d:46:d2:7a:09:95:8d:9a:
7f:33:da:07:6b:20:62:b3:6f:5b:8b:ea:db:ef:fd:
25:b8:81:41:3d:e0:60:0b:15:32:74:be:83:49:91:
0c:16:0f:e7:47:c6:be:4b:6e:9a:1a:08:24:5c:20:
47:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F0:34:53:F5:E7:B1:D3:18:6F:0A:59:9D:CD:1C:F1:0A:78:E8:81
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81b97541-130e-4315-b8c4-7557321c36f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.159.0.0/16
Signature Algorithm: sha256WithRSAEncryption
35:77:46:22:5c:c2:38:19:2f:66:d9:e0:ec:7c:6b:61:bf:f5:
8e:26:eb:dd:49:33:fb:01:0d:8d:6c:ac:f9:68:b5:a3:1f:4e:
0d:13:0b:5e:b5:27:7e:f4:d2:f8:d5:eb:bd:06:21:62:aa:44:
a6:e2:3e:8d:0a:7f:2a:ef:b5:53:22:cc:78:c5:e7:a5:fa:45:
47:a1:59:cd:5a:d9:04:2f:26:a5:82:cd:d2:df:cd:9a:ee:08:
6d:35:78:7f:bf:6d:f2:9a:e6:90:e5:b1:98:90:61:2c:c3:bc:
87:04:76:c0:82:d0:f3:b6:5c:88:82:8c:cf:d7:c2:70:95:1d:
16:b6:25:d1:d8:41:ed:7d:37:15:07:0a:92:4c:aa:d4:d3:09:
13:21:30:f2:1d:66:7c:98:73:4b:76:13:00:29:e8:bc:21:b5:
d7:a5:36:1a:3b:42:31:ea:0b:e1:2e:46:0a:ce:8f:d0:58:e7:
b1:cc:25:ce:89:09:2f:04:af:26:f0:25:fe:fa:2e:0f:d2:25:
e8:4b:f0:a5:4d:f3:de:11:a3:bc:46:0d:12:be:b7:61:95:33:
41:b9:8b:3a:3d:85:8c:5f:69:7f:ba:6e:b6:14:c9:e5:49:70:
70:05:8c:5d:99:24:98:67:81:51:11:25:2b:8d:6c:60:a8:82:
30:cd:99:e0
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUKhdf0z93vfxDruHzss2VnP0hbkYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjI3MDAwMDAwWhcNMjUwMTMxMjM1OTU5
WjB6MUkwRwYDVQQFE0A5OGE0NzMzYTgxOTQyZDk4ZGNiNmJiMTcwYmVmNzExMDJl
Y2RiNWQ3NGJkZDQ2ZTYzZThjM2RiZjc4OTNjZjc3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCr6ogh9JWBV11XNvPVgdRVZXwoui24VCfa+5ndrBqhCwqC
7VAcp/7lOmGQWnD4hnPuRrOxpPdMRnns2/iIKrQoYOmpitaozr3rZsFdOAQuvXy+
UsFCXglI5jHXHOdKD3fqlDPbeite3fqCsQZcuRapf5n3GsyWQZpAw9/+4GQXYCAs
eEyijk0NVRskdupiTYjxLei1xDd50gI1pJPB0YGp/al2nlmOxVtzPkdOxSirYuZj
da4WKxys4gVAUqRoGyLBeCNwHPyIWzFdRtJ6CZWNmn8z2gdrIGKzb1uL6tvv/SW4
gUE94GALFTJ0voNJkQwWD+dHxr5LbpoaCCRcIEcpAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUF/A0U/XnsdMYbwpZnc0c8Qp46IEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzgxYjk3NTQxLTEzMGUtNDMxNS1iOGM0LTc1NTczMjFjMzZmMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAPnzANBgkqhkiG9w0BAQsFAAOCAQEANXdGIlzCOBkvZtng7HxrYb/1jibr
3Ukz+wENjWys+Wi1ox9ODRMLXrUnfvTS+NXrvQYhYqpEpuI+jQp/Ku+1UyLMeMXn
pfpFR6FZzVrZBC8mpYLN0t/Nmu4IbTV4f79t8prmkOWxmJBhLMO8hwR2wILQ87Zc
iIKMz9fCcJUdFrYl0dhB7X03FQcKkkyq1NMJEyEw8h1mfJhzS3YTACnovCG116U2
GjtCMeoL4S5GCs6P0FjnscwlzokJLwSvJvAl/vouD9Il6EvwpU3z3hGjvEYNEr63
YZUzQbmLOj2FjF9pf7puthTJ5UlwcAWMXZkkmGeBURElK41sYKiCMM2Z4A==
-----END CERTIFICATE-----
Generated at Wed Apr 16 17:12:43 2025 by rpki-client