Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5012e4b8-cb30-4f13-8195-bf4a912f6e0e.roa
File: 5012e4b8-cb30-4f13-8195-bf4a912f6e0e.roa (raw, json)
Hash identifier: JlyEXiS6BB7Y5RWYJA4eRuL2T2UUIPwA5xg3dNh+J8Q=
Subject key identifier: B4:A9:1A:A0:0C:07:64:DC:2F:DD:29:FA:DC:85:4F:20:89:68:5F:A3
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 35D1E4D524FFCDE2C6AF310866E3FD581BCEF072
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5012e4b8-cb30-4f13-8195-bf4a912f6e0e.roa
Signing time: Fri 20 Dec 2024 00:00:00 +0000
ROA not before: Fri 20 Dec 2024 00:00:00 +0000
ROA not after: Fri 24 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 150.222.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:d1:e4:d5:24:ff:cd:e2:c6:af:31:08:66:e3:fd:58:1b:ce:f0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 20 00:00:00 2024 GMT
Not After : Jan 24 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:36:d3:70:c8:06:4e:5d:69:a8:05:64:8a:63:
0d:ab:14:04:d6:5f:e0:30:66:5f:c2:08:84:09:05:
e5:fb:17:6f:9c:82:75:26:c3:49:15:59:59:58:49:
86:0e:6f:72:de:41:c0:a8:75:a8:3b:3d:92:7b:38:
0e:11:86:55:b4:e3:5c:b9:82:b8:ad:8c:38:9f:1e:
b8:46:df:e1:ef:c9:c1:1c:d9:f9:2a:f5:7f:36:2b:
7f:7c:8c:89:c2:ac:11:23:ad:ca:32:4c:01:b7:2b:
f5:a6:33:3c:7f:54:4d:58:23:18:c6:ee:46:68:24:
d5:9e:d2:89:6c:6f:3a:1a:f8:58:36:bd:1d:32:c8:
01:1a:36:b6:c7:b9:15:5b:e2:99:57:ef:ef:13:9e:
fe:f8:e7:b1:68:af:06:60:ca:62:c7:7d:10:05:d4:
fe:fe:5c:dd:79:48:76:b1:eb:7a:87:4e:a1:31:e2:
91:e9:54:c7:ea:a2:0e:54:0b:f6:61:2b:02:59:2c:
10:e6:26:97:ec:05:cc:24:7c:68:7c:c0:04:df:03:
e4:c8:07:fe:a7:76:c4:14:54:8d:c2:7e:1b:c5:eb:
72:8f:c4:f1:ae:9f:ca:df:97:5f:09:84:19:86:f5:
7c:92:8c:ba:95:7e:c2:48:57:25:4e:68:f8:c8:d0:
07:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A9:1A:A0:0C:07:64:DC:2F:DD:29:FA:DC:85:4F:20:89:68:5F:A3
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5012e4b8-cb30-4f13-8195-bf4a912f6e0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.222.237.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:9d:c0:bb:ce:7a:70:10:26:2f:27:45:9b:99:ac:2d:25:6b:
f9:b3:53:28:9a:e0:b7:39:90:41:6e:4c:85:47:5f:44:62:3b:
75:d1:e5:9f:01:a4:cd:d7:a4:e7:a5:12:93:c4:38:75:63:e4:
28:e6:8e:1b:c1:22:b6:9b:53:6f:c6:97:0c:bd:74:a1:31:45:
12:a5:bd:53:8c:ee:42:55:c2:f5:ed:16:df:72:3b:e0:b0:de:
93:90:c8:c2:5e:00:7b:d5:97:53:60:19:e2:2c:a7:fe:de:9a:
12:47:2a:b9:42:65:26:5d:1c:17:1a:59:fd:1c:19:d7:b1:a5:
92:0a:29:08:b0:d6:ce:ef:9c:e8:42:77:82:ab:8c:02:f0:18:
e6:ed:34:0d:f7:35:21:34:76:4b:8b:da:d9:95:9a:0a:84:d6:
9e:60:71:0c:89:0b:a1:35:c6:75:20:c8:b7:20:63:55:f1:ea:
f8:82:6b:02:d8:63:6c:c2:04:3d:80:5c:b7:f8:12:38:c9:8b:
2f:a4:96:83:12:d0:24:a7:df:88:8d:77:ea:23:9e:1c:20:af:
13:e2:24:00:3b:05:f4:81:3a:5f:9e:62:8b:d1:19:31:ee:df:
c8:8c:71:3c:0c:fd:48:b5:03:c6:eb:e7:70:e3:e3:97:b9:ec:
89:11:30:bd
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUNdHk1ST/zeLGrzEIZuP9WBvO8HIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMjIwMDAwMDAwWhcNMjUwMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BhM2IyMTQ2ODQ4MzFhYjI2MThkNzQ3NjhiOTkzMDUxOGEz
YjllNTg0OTI2MmEyZTFlMDMzNmE1MWY0MTFlZDVmMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5NtNwyAZOXWmoBWSKYw2rFATWX+AwZl/CCIQJBeX7F2+c
gnUmw0kVWVlYSYYOb3LeQcCodag7PZJ7OA4RhlW041y5gritjDifHrhG3+HvycEc
2fkq9X82K398jInCrBEjrcoyTAG3K/WmMzx/VE1YIxjG7kZoJNWe0olsbzoa+Fg2
vR0yyAEaNrbHuRVb4plX7+8Tnv7457ForwZgymLHfRAF1P7+XN15SHax63qHTqEx
4pHpVMfqog5UC/ZhKwJZLBDmJpfsBcwkfGh8wATfA+TIB/6ndsQUVI3CfhvF63KP
xPGun8rfl18JhBmG9XySjLqVfsJIVyVOaPjI0AdHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUtKkaoAwHZNwv3Sn63IVPIIloX6MwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzUwMTJlNGI4LWNiMzAtNGYxMy04MTk1LWJmNGE5MTJmNmUwZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACW3u0wDQYJKoZIhvcNAQELBQADggEBAA6dwLvOenAQJi8nRZuZrC0la/mz
Uyia4Lc5kEFuTIVHX0RiO3XR5Z8BpM3XpOelEpPEOHVj5CjmjhvBIrabU2/Glwy9
dKExRRKlvVOM7kJVwvXtFt9yO+Cw3pOQyMJeAHvVl1NgGeIsp/7emhJHKrlCZSZd
HBcaWf0cGdexpZIKKQiw1s7vnOhCd4KrjALwGObtNA33NSE0dkuL2tmVmgqE1p5g
cQyJC6E1xnUgyLcgY1Xx6viCawLYY2zCBD2AXLf4EjjJiy+kloMS0CSn34iNd+oj
nhwgrxPiJAA7BfSBOl+eYovRGTHu38iMcTwM/Ui1A8br53Dj45e57IkRML0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:06 2025 by rpki-client