Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/deab7d88-8bd0-4709-8367-123d28645648.roa
File: deab7d88-8bd0-4709-8367-123d28645648.roa (raw, json)
Hash identifier: +Dlw2UQrZBYoX46xtGtCeK9PHlN46HGJhIvmuRWjcxs=
Subject key identifier: 21:59:29:CF:D3:57:93:BC:56:51:50:86:B7:EB:42:C8:E0:CF:FF:33
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 774C44C2D4EDB7E5654149BC499FD67EE3DF3BFE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/deab7d88-8bd0-4709-8367-123d28645648.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 96.0.64.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:4c:44:c2:d4:ed:b7:e5:65:41:49:bc:49:9f:d6:7e:e3:df:3b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:be:06:fe:ae:98:66:5e:61:40:30:99:91:
c3:de:d7:10:5a:21:6e:6b:6e:51:6e:1b:35:83:99:
f9:98:f8:f7:3c:f1:2e:58:ec:7f:30:2d:f9:a6:99:
85:3a:0d:55:b4:20:3d:ee:ff:8a:5c:0f:63:1d:d4:
a5:5c:7e:4a:4e:c8:a3:bf:45:67:b3:9d:41:ef:58:
2b:e2:48:6a:20:c1:c9:6b:8d:cd:da:56:27:50:d5:
f8:d7:d6:7a:8e:c9:d1:7f:57:6e:3d:26:bb:0c:c4:
bd:5a:09:d1:15:1c:d4:7f:24:94:a3:b8:ed:51:d8:
35:dc:f0:57:22:c5:10:71:b5:6a:8c:6a:49:5b:1d:
dd:41:37:2b:7e:28:ec:b3:ff:d2:f6:88:b7:2f:98:
f2:fd:6d:0c:c7:8b:37:1d:8f:42:0b:84:5a:e3:f5:
b3:2c:ce:a6:18:7b:d3:d2:4e:7d:65:56:3a:1f:7f:
d3:4b:e2:27:e9:88:bf:44:41:25:fd:16:93:78:12:
d2:c9:02:24:5c:c1:20:ac:47:c2:c3:a3:fe:06:08:
68:99:bd:1f:ad:bb:a6:fc:6b:24:88:b8:72:fc:68:
0b:47:79:44:75:9a:b6:12:4a:9f:14:00:10:97:f9:
6c:7e:ea:40:fd:e3:19:f6:07:ff:79:0c:c3:e0:29:
5d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:59:29:CF:D3:57:93:BC:56:51:50:86:B7:EB:42:C8:E0:CF:FF:33
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/deab7d88-8bd0-4709-8367-123d28645648.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.0.64.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:78:b6:6a:84:be:17:96:56:a8:0a:87:88:02:a7:b4:f1:be:
e2:bf:56:1c:1c:f5:4c:7d:c3:93:f8:61:9d:c6:74:c1:ba:f2:
a6:ee:ac:77:18:65:60:bd:bf:46:17:4f:06:3c:15:63:66:cf:
b5:56:07:19:55:7d:87:71:d0:26:e1:e2:7c:d9:56:50:1c:37:
f3:c6:9e:f4:02:fa:50:4d:6d:38:6f:b4:d8:b6:0b:63:3d:b2:
5b:ba:c7:94:e5:d0:a5:ba:30:17:05:8b:9f:76:2f:95:12:f4:
4d:35:a5:4b:c6:aa:08:5f:3a:59:fa:38:e1:43:ab:86:36:76:
5d:ea:34:f5:b7:43:a2:6e:b4:9d:57:4e:a5:8d:1a:b3:f9:c6:
94:04:a2:63:53:8e:e4:dc:98:cc:23:a9:d7:e4:89:0c:ff:e5:
1a:68:05:12:ae:7b:89:ea:98:7a:5c:d9:68:0d:64:c8:42:92:
e7:d0:3b:a0:04:4c:47:ff:ef:fe:87:fc:69:fe:28:d0:38:44:
12:0e:7d:89:1c:c5:e7:1d:59:01:76:54:2d:9e:48:1b:ea:5a:
2f:f4:3d:71:83:96:78:f0:8d:2e:7d:ac:91:04:71:87:a3:71:
27:68:50:a0:fa:1c:b5:85:96:5d:4e:fd:5d:67:84:9c:e2:b6:
f8:94:b1:4c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUd0xEwtTtt+VlQUm8SZ/WfuPfO/4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjI3MDAwMDAwWhcNMjUwMTMxMjM1OTU5
WjB6MUkwRwYDVQQFE0BhYTIzYzQxOTlhM2RlZDEwNzkyYWUyNWQ1NDI1YWViMzc5
YmI4ODBiM2E2YjMyMzMxOWFjNDA1M2NlZDhhNDE0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC/7r4G/q6YZl5hQDCZkcPe1xBaIW5rblFuGzWDmfmY+Pc8
8S5Y7H8wLfmmmYU6DVW0ID3u/4pcD2Md1KVcfkpOyKO/RWeznUHvWCviSGogwclr
jc3aVidQ1fjX1nqOydF/V249JrsMxL1aCdEVHNR/JJSjuO1R2DXc8FcixRBxtWqM
aklbHd1BNyt+KOyz/9L2iLcvmPL9bQzHizcdj0ILhFrj9bMszqYYe9PSTn1lVjof
f9NL4ifpiL9EQSX9FpN4EtLJAiRcwSCsR8LDo/4GCGiZvR+tu6b8aySIuHL8aAtH
eUR1mrYSSp8UABCX+Wx+6kD94xn2B/95DMPgKV3ZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUIVkpz9NXk7xWUVCGt+tCyODP/zMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2RlYWI3ZDg4LThiZDAtNDcwOS04MzY3LTEyM2QyODY0NTY0OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBANgAEAwDQYJKoZIhvcNAQELBQADggEBAGt4tmqEvheWVqgKh4gCp7TxvuK/
Vhwc9Ux9w5P4YZ3GdMG68qburHcYZWC9v0YXTwY8FWNmz7VWBxlVfYdx0Cbh4nzZ
VlAcN/PGnvQC+lBNbThvtNi2C2M9slu6x5Tl0KW6MBcFi592L5US9E01pUvGqghf
Oln6OOFDq4Y2dl3qNPW3Q6JutJ1XTqWNGrP5xpQEomNTjuTcmMwjqdfkiQz/5Rpo
BRKue4nqmHpc2WgNZMhCkufQO6AETEf/7/6H/Gn+KNA4RBIOfYkcxecdWQF2VC2e
SBvqWi/0PXGDlnjwjS59rJEEcYejcSdoUKD6HLWFll1O/V1nhJzitviUsUw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:51 2025 by rpki-client