Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0cc49d65-a34a-4d6d-b123-35c49f89e2bb.roa
File: 0cc49d65-a34a-4d6d-b123-35c49f89e2bb.roa (raw, json)
Hash identifier: ClHVOYh/cbmIpdre0BcbaXMXXXccE5wyI051e1X1GWo=
Subject key identifier: 12:F6:4E:F2:03:4E:15:91:5D:F3:E7:75:51:DF:5D:21:E2:BA:89:42
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 304FD9F157B27A082F3CED1381AA5C8774D999A3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0cc49d65-a34a-4d6d-b123-35c49f89e2bb.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 18.192.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:4f:d9:f1:57:b2:7a:08:2f:3c:ed:13:81:aa:5c:87:74:d9:99:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b4:5a:12:68:8e:48:cd:34:14:48:53:64:5c:
52:7a:4e:48:99:66:8c:8e:cc:3c:a2:31:77:21:98:
ac:69:e9:d1:b0:b2:b0:39:8d:35:80:25:c4:50:7e:
44:c3:a7:66:b7:42:07:df:47:52:64:1d:03:7d:19:
ce:5e:b2:2f:31:c7:7b:3f:67:0a:70:65:3a:93:84:
db:96:de:30:44:05:25:7c:40:e8:41:b7:d8:a5:8b:
21:ff:8f:62:e4:89:00:91:d6:99:74:5f:d4:a1:66:
43:59:0f:36:9d:d3:9b:5d:58:90:8e:a9:80:27:b9:
d8:68:91:a6:4f:7c:c0:f7:ca:a2:46:f5:57:28:c7:
f2:9f:46:3c:28:20:61:f9:c4:7c:f2:06:70:32:bd:
6e:88:ae:e6:d0:af:37:a2:f2:a8:e1:53:fc:51:e4:
99:83:36:f9:ee:1f:b1:99:2f:2f:49:05:f5:f9:87:
80:af:2f:55:02:a1:bc:a4:d3:39:4a:03:25:61:28:
45:c5:02:8d:e3:63:2d:8a:19:12:cb:86:e0:7d:09:
ec:43:d3:2a:06:46:06:cc:9f:c1:23:46:b4:e9:1e:
8d:08:db:c0:81:39:63:91:2d:94:c5:fd:02:b3:f3:
d5:00:d0:9d:66:e0:0f:ea:b1:74:60:e0:05:2b:25:
08:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F6:4E:F2:03:4E:15:91:5D:F3:E7:75:51:DF:5D:21:E2:BA:89:42
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0cc49d65-a34a-4d6d-b123-35c49f89e2bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.192.0.0/15
Signature Algorithm: sha256WithRSAEncryption
1b:de:a1:55:25:f8:c1:b5:80:48:dd:a9:35:c8:a3:cb:19:1a:
a2:61:ee:9b:18:00:f6:00:6d:af:ac:76:43:1a:4c:7b:70:6a:
74:89:e5:e0:2c:c2:77:40:31:61:96:e0:9d:74:d5:5d:1c:df:
70:15:9b:01:0b:03:41:1a:5f:6f:3a:54:cc:8e:f5:ed:20:14:
e8:82:fa:aa:60:93:2c:59:dd:a1:7c:e8:65:db:9b:34:22:0c:
8b:c3:7c:69:bc:66:e4:41:af:b8:b5:b2:0a:0d:0d:f8:71:de:
e6:e2:04:3f:10:6e:13:16:67:5c:df:34:ff:de:cd:17:94:f3:
5e:dc:1f:32:73:ee:20:ea:68:59:bf:e6:45:ad:44:8a:68:77:
67:4f:07:e3:0b:f6:12:e9:b0:22:98:42:0f:a4:74:60:48:62:
64:0a:a4:4b:c7:80:ce:83:90:df:e4:9a:61:07:17:a7:f8:9a:
9e:dc:04:42:81:d7:0d:29:36:27:69:83:dc:da:4b:16:81:91:
54:5d:46:43:f9:94:03:33:c1:7c:b6:a5:75:ee:e7:8c:8d:19:
ba:f4:96:44:95:40:f0:d9:30:58:8d:bf:9a:97:fd:6c:40:3a:
96:94:d2:9b:d1:bd:04:20:50:70:13:5b:29:0f:b1:12:4b:2d:
63:dc:a7:80
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUME/Z8VeyeggvPO0Tgapch3TZmaMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMjE2MDAwMDAwWhcNMjUwMTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AxOGNjMTBjZTA3MjA0MTBkYmE4Y2JmNzMxNTkxYTNhZjgw
YWQ2ZTU5YzY0YWZkNDE2MTM1MTFkYmY5MjVkZmViMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCttFoSaI5IzTQUSFNkXFJ6TkiZZoyOzDyiMXchmKxp6dGw
srA5jTWAJcRQfkTDp2a3QgffR1JkHQN9Gc5esi8xx3s/ZwpwZTqThNuW3jBEBSV8
QOhBt9iliyH/j2LkiQCR1pl0X9ShZkNZDzad05tdWJCOqYAnudhokaZPfMD3yqJG
9Vcox/KfRjwoIGH5xHzyBnAyvW6IrubQrzei8qjhU/xR5JmDNvnuH7GZLy9JBfX5
h4CvL1UCobyk0zlKAyVhKEXFAo3jYy2KGRLLhuB9CexD0yoGRgbMn8EjRrTpHo0I
28CBOWORLZTF/QKz89UA0J1m4A/qsXRg4AUrJQi3AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUEvZO8gNOFZFd8+d1Ud9dIeK6iUIwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzBjYzQ5ZDY1LWEzNGEtNGQ2ZC1iMTIzLTM1YzQ5Zjg5ZTJiYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwESwDANBgkqhkiG9w0BAQsFAAOCAQEAG96hVSX4wbWASN2pNcijyxkaomHu
mxgA9gBtr6x2QxpMe3BqdInl4CzCd0AxYZbgnXTVXRzfcBWbAQsDQRpfbzpUzI71
7SAU6IL6qmCTLFndoXzoZdubNCIMi8N8abxm5EGvuLWyCg0N+HHe5uIEPxBuExZn
XN80/97NF5TzXtwfMnPuIOpoWb/mRa1Eimh3Z08H4wv2EumwIphCD6R0YEhiZAqk
S8eAzoOQ3+SaYQcXp/iantwEQoHXDSk2J2mD3NpLFoGRVF1GQ/mUAzPBfLalde7n
jI0ZuvSWRJVA8NkwWI2/mpf9bEA6lpTSm9G9BCBQcBNbKQ+xEkstY9yngA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:39 2025 by rpki-client