Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9aaef8fc-6e71-4438-929b-ca3c889da936.roa
File: 9aaef8fc-6e71-4438-929b-ca3c889da936.roa (raw, json)
Hash identifier: NuHanwWLKyXqA5C2AWD+RyfYo4suhumObEJPNzvtYjk=
Subject key identifier: AC:14:C3:45:4E:E7:C0:06:2F:4A:9E:1F:41:EC:D4:EF:77:11:C1:0B
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 1A7BB90983C3FB8F77B18F62F5593B5315A93D1F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9aaef8fc-6e71-4438-929b-ca3c889da936.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.220.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:7b:b9:09:83:c3:fb:8f:77:b1:8f:62:f5:59:3b:53:15:a9:3d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:96:a5:b4:52:95:b6:49:84:e2:ec:a5:91:53:
f7:cd:58:98:99:6c:d0:8b:f1:33:28:1f:41:7b:6b:
72:a4:96:e7:47:0b:36:e2:6c:1d:00:b1:05:dc:d1:
a1:31:77:6d:6d:fb:ab:2b:09:3e:77:79:84:5d:f8:
9e:27:ba:88:28:2e:50:0c:e7:cd:34:40:16:10:e4:
f8:c8:48:ea:9d:11:60:96:32:1a:bf:f2:0a:a7:f8:
c1:1d:c8:98:fb:81:ce:8d:80:49:e2:1c:ee:96:1d:
f3:f4:ef:41:f8:91:9d:7a:20:a1:a0:2e:1a:83:13:
2c:4c:70:30:c4:a9:6e:f4:50:3f:8e:91:2a:64:5e:
f0:22:68:04:74:9c:4a:e7:10:30:01:be:a6:0b:61:
01:9c:2b:ee:07:18:7d:35:df:6c:4b:cd:f9:2d:22:
f7:12:cf:b0:51:c4:e9:37:33:ca:af:21:9c:f0:be:
44:67:16:62:20:ba:b0:e1:d9:7e:44:f3:b9:86:62:
60:9f:e2:ef:30:49:77:83:46:d1:93:d3:14:1a:67:
a8:4f:15:8c:06:e1:64:b0:79:9e:ef:b8:ae:6c:51:
51:7c:99:1c:2e:27:41:93:cd:40:1c:4e:f7:9d:bd:
e4:a7:c3:b1:15:b2:e7:e1:e6:96:72:7f:a4:6d:7d:
59:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:14:C3:45:4E:E7:C0:06:2F:4A:9E:1F:41:EC:D4:EF:77:11:C1:0B
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9aaef8fc-6e71-4438-929b-ca3c889da936.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.220.252.0/22
Signature Algorithm: sha256WithRSAEncryption
75:68:7e:3f:6f:ee:a3:a4:eb:b4:87:2e:58:f5:d4:f5:9d:e9:
80:13:93:ee:f8:c0:9e:6d:77:c6:55:ce:b8:68:e9:58:4a:76:
aa:7d:2c:75:85:de:ed:15:58:fc:b0:9e:7c:15:e1:4a:32:7c:
89:0e:83:99:e2:46:17:df:29:31:a0:3a:b5:d6:2e:54:ad:d6:
5d:11:ec:cc:51:c0:f7:7a:99:33:1b:8e:67:40:eb:83:32:eb:
cb:64:9b:c1:79:5b:33:5e:52:5b:ef:9d:0d:38:80:88:35:09:
aa:f9:77:a5:8d:bf:56:d9:c9:1d:c6:52:73:81:52:ea:39:64:
ee:dd:ff:86:cf:fc:78:4a:83:99:84:ae:23:62:97:8e:c0:5a:
07:a2:97:00:5e:11:89:27:4b:ab:9e:f2:62:d1:df:a8:78:dc:
7e:6b:59:a0:b3:89:b8:d4:ee:79:90:54:b7:be:59:de:32:16:
c4:ba:3e:2a:9c:71:5b:19:34:06:3c:8e:77:c3:f0:92:77:69:
21:34:e9:dd:20:77:40:ff:75:c9:39:d0:0c:1b:29:bd:54:39:
28:a3:2f:14:77:a5:d0:87:33:b5:74:75:89:e5:0a:4a:5e:05:
29:c9:1c:88:5d:5c:51:0c:9e:de:6b:b3:85:c8:de:99:30:83:
7e:f0:3e:c0
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGnu5CYPD+493sY9i9Vk7UxWpPR8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMjE3MDAwMDAwWhcNMjUwMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BiOTNjMDY1Y2RiNWE4NDUyYTEwMDJmN2YzYzhlYzcxMjQy
ZDAxZGFlNWVkNDAxNzA3ODE1NzNlYmQ4MjlhNDEyMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDvlqW0UpW2SYTi7KWRU/fNWJiZbNCL8TMoH0F7a3KkludH
CzbibB0AsQXc0aExd21t+6srCT53eYRd+J4nuogoLlAM5800QBYQ5PjISOqdEWCW
Mhq/8gqn+MEdyJj7gc6NgEniHO6WHfP070H4kZ16IKGgLhqDEyxMcDDEqW70UD+O
kSpkXvAiaAR0nErnEDABvqYLYQGcK+4HGH0132xLzfktIvcSz7BRxOk3M8qvIZzw
vkRnFmIgurDh2X5E87mGYmCf4u8wSXeDRtGT0xQaZ6hPFYwG4WSweZ7vuK5sUVF8
mRwuJ0GTzUAcTvedveSnw7EVsufh5pZyf6RtfVlpAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUrBTDRU7nwAYvSp4fQezU73cRwQswHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzlhYWVmOGZjLTZlNzEtNDQzOC05MjliLWNhM2M4ODlkYTkzNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIP3PwwDQYJKoZIhvcNAQELBQADggEBAHVofj9v7qOk67SHLlj11PWd6YAT
k+74wJ5td8ZVzrho6VhKdqp9LHWF3u0VWPywnnwV4UoyfIkOg5niRhffKTGgOrXW
LlSt1l0R7MxRwPd6mTMbjmdA64My68tkm8F5WzNeUlvvnQ04gIg1Car5d6WNv1bZ
yR3GUnOBUuo5ZO7d/4bP/HhKg5mEriNil47AWgeilwBeEYknS6ue8mLR36h43H5r
WaCzibjU7nmQVLe+Wd4yFsS6PiqccVsZNAY8jnfD8JJ3aSE06d0gd0D/dck50Awb
Kb1UOSijLxR3pdCHM7V0dYnlCkpeBSnJHIhdXFEMnt5rs4XI3pkwg37wPsA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:03 2025 by rpki-client