Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03a8a8cf-43f0-4078-9ae4-5d650b99f2e0.roa
File: 03a8a8cf-43f0-4078-9ae4-5d650b99f2e0.roa (raw, json)
Hash identifier: snkTYid8U3xClEf7/HMtGCwhJUwOBVOep2znFZQre00=
Subject key identifier: 98:21:E2:F7:84:6F:27:BB:FD:E6:12:FA:D8:9E:67:B1:3E:BA:C2:C7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 555EC1A052A0E2812F7DD7E9B9CD6DDA6ED82A4C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03a8a8cf-43f0-4078-9ae4-5d650b99f2e0.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 157.243.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:5e:c1:a0:52:a0:e2:81:2f:7d:d7:e9:b9:cd:6d:da:6e:d8:2a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: serialNumber=2471af5b539ae52590420895054fd2e1203351108a67b8d89dbc34b150769ea3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:79:49:dd:85:8a:b7:3b:49:cc:4a:0c:87:53:
60:34:06:ca:b8:8a:92:c2:80:33:9c:8e:c1:15:0a:
70:57:15:a2:15:3e:72:b5:d4:81:62:c9:ca:bc:97:
7b:34:56:f0:46:42:2d:81:e6:a2:7e:ae:f6:dc:bc:
00:98:7b:15:04:53:1f:7c:13:2e:1a:6d:9a:b0:24:
c3:86:04:d4:49:ee:c8:25:03:f9:d3:27:91:2d:e3:
41:2e:e7:90:43:5a:31:cc:d3:71:ed:d5:bf:61:76:
25:54:29:78:e9:bd:48:b0:4c:1c:a0:6c:3c:ce:65:
e1:62:5c:5b:33:a2:c5:6a:22:b8:f5:5f:f0:14:b3:
be:4d:4c:98:f9:eb:31:51:c7:ca:f9:5c:44:b2:3d:
bf:8e:e8:de:43:1f:bf:85:f9:6d:67:55:ab:ae:cc:
2c:68:2e:77:99:4e:c4:c1:82:86:09:2a:5e:52:ca:
9f:10:09:8d:2f:b2:e0:2e:66:c1:a1:e8:3c:28:e1:
a9:3c:da:25:21:31:07:1c:f9:82:f5:30:fa:df:4e:
0b:10:53:3d:ed:52:17:be:32:69:f7:e2:f1:f0:2f:
75:9b:a0:7d:ae:23:3b:bb:ae:cf:0a:4e:d5:2d:d0:
69:b5:bd:36:99:8e:07:78:61:46:2c:55:1c:43:44:
b3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:21:E2:F7:84:6F:27:BB:FD:E6:12:FA:D8:9E:67:B1:3E:BA:C2:C7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03a8a8cf-43f0-4078-9ae4-5d650b99f2e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.243.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b9:42:2a:50:4f:aa:19:8a:f2:df:9c:13:96:76:60:72:76:0b:
56:6a:b4:4f:26:c6:1e:af:44:1c:62:e1:db:76:52:84:64:3a:
d1:c0:d6:70:1c:8b:5e:9e:6f:9b:ca:ea:35:f4:13:f9:de:5e:
7d:35:00:01:84:2d:54:dc:f2:e2:b8:04:0d:00:ed:95:eb:18:
c9:3a:b2:22:7c:dd:97:7f:80:19:6d:16:b8:73:d5:8c:ef:51:
14:6b:26:81:0b:e3:d0:7c:d3:96:6c:05:59:a3:a3:22:87:93:
8d:06:6d:ac:91:a6:01:be:ed:6a:8e:83:f2:5a:05:17:2b:9a:
48:c1:81:de:83:85:a3:2b:6a:bc:53:c2:8c:c4:1e:e5:53:9a:
16:53:0c:20:d7:61:57:e3:2d:0c:21:84:9d:4e:47:c5:d2:3d:
33:fe:7e:d7:e4:42:21:6b:ca:f5:b0:60:f7:18:3d:13:f7:54:
6a:37:a8:6d:65:7b:ad:34:d1:b1:2c:7c:1a:36:72:06:56:f8:
21:3b:58:93:b5:e8:c7:ed:96:73:5d:e4:3e:cb:1f:96:eb:22:
f5:72:41:8b:f2:ab:c0:4a:2e:4e:ea:03:e4:db:78:9e:f3:e9:
42:87:19:1f:7e:b9:d9:34:f8:16:e7:2d:2e:55:74:67:46:cc:
32:8c:90:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:09:33 2025 by rpki-client