Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acd98541-f4af-488a-b83d-cc1c7bea199e.roa
File: acd98541-f4af-488a-b83d-cc1c7bea199e.roa (raw, json)
Hash identifier: fkXU6ZQ3Fd9yUcNu24lcq77GDMQnBKQPdLTKWemjipw=
Subject key identifier: 0E:C1:F6:81:B7:53:19:44:82:C7:7B:7F:20:44:A9:57:36:97:8A:B2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 484F73E355725A5CE209BAB1315D8E3B37F1452A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acd98541-f4af-488a-b83d-cc1c7bea199e.roa
Signing time: Fri 29 Nov 2024 00:00:00 +0000
ROA not before: Fri 29 Nov 2024 00:00:00 +0000
ROA not after: Fri 03 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 56.155.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:4f:73:e3:55:72:5a:5c:e2:09:ba:b1:31:5d:8e:3b:37:f1:45:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 29 00:00:00 2024 GMT
Not After : Jan 3 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5a:5d:88:90:1b:db:5f:b2:95:81:ca:56:99:
5d:07:bc:7b:72:a9:f8:4b:cc:17:35:c4:a0:03:b8:
39:f7:c2:df:4f:0f:a6:70:aa:05:57:d0:3a:20:6a:
08:bf:f1:12:63:96:dc:66:28:53:f0:68:ff:ba:ce:
8a:12:90:48:bc:82:f0:08:ac:2d:9b:82:6d:86:ea:
07:53:89:b0:56:4c:ac:5b:a8:e2:7b:36:13:6c:a9:
de:fa:32:1d:1e:04:b8:24:fa:e0:5c:f6:0e:2c:53:
89:9f:13:fd:42:72:cc:80:51:7d:e7:a8:40:73:6a:
f2:e4:44:88:1b:45:82:85:04:d4:60:23:27:9e:7f:
0b:1b:02:5e:3f:12:8d:3f:9b:9e:b6:af:51:ba:13:
95:23:c5:41:5a:c2:95:c2:e6:76:c1:24:57:2e:29:
89:06:35:bd:97:69:70:29:09:1c:a5:f0:da:a3:2e:
6f:5a:66:33:17:f2:00:38:58:a0:90:97:9d:da:43:
70:91:ab:79:ee:59:4e:8e:1a:ad:94:4c:a5:01:de:
b2:32:2c:7e:8f:d4:30:40:5e:c6:7e:a4:2b:ed:41:
78:61:af:7f:46:63:2f:c6:81:e4:71:47:01:5f:9b:
b4:85:5e:5a:8a:09:07:83:b6:e6:2c:2c:d6:a2:66:
8c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C1:F6:81:B7:53:19:44:82:C7:7B:7F:20:44:A9:57:36:97:8A:B2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acd98541-f4af-488a-b83d-cc1c7bea199e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.155.0.0/16
Signature Algorithm: sha256WithRSAEncryption
55:7d:3e:42:c4:f1:26:63:b7:25:b1:96:23:6d:94:f9:48:73:
c4:88:ba:65:68:8c:ad:1f:66:63:9b:20:7c:4c:96:fd:b3:2c:
b0:dd:44:a9:98:ab:d7:b2:13:0f:48:00:61:50:37:72:6e:00:
80:61:e1:51:f3:46:8f:7b:73:24:e5:9b:ec:cf:ab:a2:45:73:
dc:45:96:cf:35:bf:9e:4e:e1:c4:49:e9:33:39:80:4d:88:1f:
48:55:3e:58:13:5b:b3:41:0b:26:52:0f:70:80:12:bd:1e:f0:
e9:2e:b9:a6:29:8a:f6:08:23:3b:29:1a:3a:c8:5f:35:1a:c5:
4b:5d:50:e2:5e:bf:b3:35:a3:f2:b8:91:99:ec:7b:1e:44:9f:
14:90:dd:ef:e8:5b:4d:a7:c8:59:be:3d:70:9a:fe:0b:26:96:
3b:17:9f:61:5a:0c:f4:67:5a:bd:e8:2d:d8:28:b9:0a:af:c9:
ea:80:e6:9b:fb:ec:09:ee:31:58:7a:63:b2:2f:ce:eb:29:91:
b6:67:23:ce:63:9c:c2:28:31:aa:1c:fc:43:06:12:19:0d:b8:
e8:13:c9:4f:eb:9b:fe:cb:89:b5:d4:4a:ea:3c:84:8e:ca:29:
a4:68:ae:a5:6d:8c:81:32:3c:ee:17:6d:ea:cc:0a:aa:aa:7c:
bc:d7:9c:60
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUSE9z41VyWlziCbqxMV2OOzfxRSowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTI5MDAwMDAwWhcNMjUwMTAzMjM1OTU5
WjB6MUkwRwYDVQQFE0BhZGYxOGEzMzE2MjNlNGE4Y2JjZTFiNzAzODcxOGMwYzc4
MWU4OTA0NDRmYWQyZjE2MDYyNTM0MmZmNzNkYTU4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCbWl2IkBvbX7KVgcpWmV0HvHtyqfhLzBc1xKADuDn3wt9P
D6ZwqgVX0Dogagi/8RJjltxmKFPwaP+6zooSkEi8gvAIrC2bgm2G6gdTibBWTKxb
qOJ7NhNsqd76Mh0eBLgk+uBc9g4sU4mfE/1CcsyAUX3nqEBzavLkRIgbRYKFBNRg
IyeefwsbAl4/Eo0/m562r1G6E5UjxUFawpXC5nbBJFcuKYkGNb2XaXApCRyl8Nqj
Lm9aZjMX8gA4WKCQl53aQ3CRq3nuWU6OGq2UTKUB3rIyLH6P1DBAXsZ+pCvtQXhh
r39GYy/GgeRxRwFfm7SFXlqKCQeDtuYsLNaiZowtAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUDsH2gbdTGUSCx3t/IESpVzaXirIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FjZDk4NTQxLWY0YWYtNDg4YS1iODNkLWNjMWM3YmVhMTk5ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4mzANBgkqhkiG9w0BAQsFAAOCAQEAVX0+QsTxJmO3JbGWI22U+UhzxIi6
ZWiMrR9mY5sgfEyW/bMssN1EqZir17ITD0gAYVA3cm4AgGHhUfNGj3tzJOWb7M+r
okVz3EWWzzW/nk7hxEnpMzmATYgfSFU+WBNbs0ELJlIPcIASvR7w6S65pimK9ggj
OykaOshfNRrFS11Q4l6/szWj8riRmex7HkSfFJDd7+hbTafIWb49cJr+CyaWOxef
YVoM9Gdavegt2Ci5Cq/J6oDmm/vsCe4xWHpjsi/O6ymRtmcjzmOcwigxqhz8QwYS
GQ246BPJT+ub/suJtdRK6jyEjsoppGiupW2MgTI87hdt6swKqqp8vNecYA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:26 2025 by rpki-client