Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02a1d776-e314-4a95-8913-ace3fa04cde1.roa
File: 02a1d776-e314-4a95-8913-ace3fa04cde1.roa (raw, json)
Hash identifier: HzjGVeMsG4TM1si0lAcQuiJ1hzhmIXwkC7br/PEFHVg=
Subject key identifier: 38:0F:73:11:17:AB:75:4D:18:3E:60:7F:E3:1B:39:AF:D6:20:49:CF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 61038B985A1B8B751C068C24B37A47CA786A4937
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02a1d776-e314-4a95-8913-ace3fa04cde1.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 16.151.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:03:8b:98:5a:1b:8b:75:1c:06:8c:24:b3:7a:47:ca:78:6a:49:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=540c0a788f1b1c2c5725680bf222651974eee7f234058b65f2235d9aa7a3089e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7d:97:23:65:35:c3:53:90:d6:1b:0c:2b:53:
1a:24:aa:51:b1:c3:f9:86:ef:85:8b:1f:36:5b:91:
74:e0:49:63:86:06:39:97:49:df:2d:cc:28:60:00:
e1:dd:83:94:53:c6:3b:65:3b:4d:2b:dc:94:f6:ab:
62:38:6b:34:e9:5c:71:3d:e7:fc:64:d6:ba:88:cd:
b8:d3:d7:ea:f8:b8:a4:b9:c0:b7:29:b5:36:9d:e5:
59:be:b6:5d:9a:b1:45:02:a5:d1:3e:f0:36:09:db:
c7:95:f5:82:b3:55:cb:96:aa:c5:50:e8:d7:c2:19:
74:8e:ae:e7:79:98:c1:61:5d:d6:86:50:ce:35:d0:
10:eb:f3:37:45:16:dd:8c:44:e5:8d:50:be:17:66:
89:31:d6:f6:b6:2f:67:8e:ef:d5:3c:d8:a3:e3:cd:
40:af:fe:76:89:97:79:76:83:2f:ed:2c:33:e7:34:
1c:f0:02:31:0c:c1:f0:52:83:a6:3b:65:79:30:93:
77:96:8b:25:e0:12:c1:7d:55:5d:c1:bb:f5:0c:f4:
60:c1:e5:8b:92:52:c7:74:15:14:2d:89:1b:09:59:
55:51:70:da:6f:b4:d3:5f:01:28:ac:98:d6:0d:57:
84:49:a5:da:eb:51:ed:c5:cc:7c:cf:db:03:69:f1:
4e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0F:73:11:17:AB:75:4D:18:3E:60:7F:E3:1B:39:AF:D6:20:49:CF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02a1d776-e314-4a95-8913-ace3fa04cde1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.151.0.0/16
Signature Algorithm: sha256WithRSAEncryption
28:e2:e2:d8:3a:67:5e:51:07:80:4b:32:cf:56:11:bf:14:40:
56:87:40:59:9e:a4:18:be:a7:3a:0e:dd:bf:35:6f:44:24:99:
5b:b0:f8:d4:91:a3:b7:ea:26:32:18:5c:60:90:72:08:b5:2d:
d1:2f:ee:26:11:48:29:7a:b7:6b:5e:fe:9d:75:48:5f:e1:4d:
2d:91:0c:7d:51:94:e4:85:26:c9:70:cd:f7:45:45:b0:7e:d8:
eb:e2:a8:01:ce:d0:22:90:26:ef:2b:b2:b3:7b:3d:2e:14:68:
2d:58:a6:4f:c8:32:71:c9:60:6a:42:24:1d:f1:5e:65:bf:af:
3b:cc:ca:2b:01:e8:b6:5b:a5:d2:1f:61:92:a0:18:1d:53:93:
33:ca:de:e5:36:5c:07:4b:ae:10:b2:1e:e7:9d:b4:7d:87:f0:
9c:09:80:c5:c4:ee:93:3b:43:85:be:ba:15:13:30:17:13:a4:
d5:d5:23:e4:a6:bc:fc:80:3f:42:45:98:1c:e7:f3:85:d5:70:
d9:f3:49:bd:8f:21:eb:42:2d:55:66:f4:c8:f2:96:5e:a1:72:
80:c1:e4:60:4f:b2:36:9f:e3:6d:1d:36:56:8e:d4:57:6a:a7:
f3:f6:bd:a9:c8:cd:43:dd:d6:4c:ca:49:d0:6a:57:37:1d:bd:
cc:7a:0c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:30:39 2025 by rpki-client