Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0455f3a2-f0cd-4ad7-810e-8c028fd27cb7.roa
File: 0455f3a2-f0cd-4ad7-810e-8c028fd27cb7.roa (raw, json)
Hash identifier: HglVDSkavpOK6ozfKwPm7141Iw5YaNsgOzW6kbaS8Jo=
Subject key identifier: 40:FB:D2:2A:47:8A:25:70:A9:F0:B3:1F:3B:DB:C0:C1:03:CC:E1:1C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 28674AA2B0F257C59F8C88CF619DD80B32E04721
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0455f3a2-f0cd-4ad7-810e-8c028fd27cb7.roa
Signing time: Wed 01 Jan 2025 00:00:00 +0000
ROA not before: Wed 01 Jan 2025 00:00:00 +0000
ROA not after: Wed 05 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff2:3400::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:67:4a:a2:b0:f2:57:c5:9f:8c:88:cf:61:9d:d8:0b:32:e0:47:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 1 00:00:00 2025 GMT
Not After : Feb 5 23:59:59 2025 GMT
Subject: serialNumber=046d469a995aa6a9a52e3a1214f050876b4f2a79d15ed8537b5c180b6cb36693, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:4d:6e:12:b2:27:45:2d:d2:54:63:c0:b3:
21:60:b0:64:55:05:52:24:57:b3:e2:c2:2e:d1:cf:
ca:09:32:90:14:02:55:e2:bf:5c:e7:85:23:22:95:
5f:c2:2d:55:db:95:11:13:4d:52:a9:61:47:97:dd:
e8:8b:91:31:eb:bc:dd:64:2d:9a:96:9d:c9:43:58:
26:0f:4b:8f:5b:99:fb:e7:b3:c4:3e:f0:5d:17:48:
6a:c5:25:84:1b:40:4b:14:c0:67:d6:3a:b6:50:31:
a4:45:fe:27:02:cb:cd:24:9f:a2:13:39:5f:6c:1f:
72:24:17:41:30:27:39:fb:29:7f:71:42:f0:84:3e:
86:01:13:30:e9:81:7a:4a:d4:0d:28:b8:d5:53:24:
c3:d2:14:41:21:a1:be:6b:fa:7e:65:d5:90:2d:7c:
f1:cf:72:d9:3e:a6:9a:df:2a:7c:e0:9b:27:a3:99:
e8:91:f2:b1:67:a5:bd:d5:40:3e:77:e6:88:1e:68:
6a:76:25:dd:a0:8d:72:8a:88:a1:28:e0:86:83:48:
8d:36:55:ed:af:1d:a3:e9:43:84:bf:a5:f3:1e:89:
f4:cc:c5:79:3a:76:66:ad:2f:9a:35:9a:3b:51:d1:
ae:e0:68:99:f9:d4:d0:9e:5f:b5:27:2e:0e:7a:10:
b8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FB:D2:2A:47:8A:25:70:A9:F0:B3:1F:3B:DB:C0:C1:03:CC:E1:1C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0455f3a2-f0cd-4ad7-810e-8c028fd27cb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff2:3400::/40
Signature Algorithm: sha256WithRSAEncryption
9a:5e:b9:a0:6c:1e:ff:90:98:ed:12:0a:95:80:bb:12:1b:db:
bc:99:31:1a:1d:0d:38:4d:3e:b8:7b:8a:90:9d:a6:39:84:47:
d7:46:62:88:46:13:9e:0b:a1:c2:67:68:74:e7:62:13:8a:5e:
7b:39:e5:ca:90:ee:d7:f6:1f:e9:f7:9a:8b:a3:d5:3a:c5:79:
b1:d6:9d:00:48:d6:49:8c:18:16:76:12:a0:c7:51:82:ae:e3:
4f:d0:e3:d7:fc:f8:5d:e2:29:c5:f6:1e:68:0c:14:af:90:7d:
dd:5a:bd:f6:52:8e:9a:2c:60:c0:79:08:3a:70:c2:84:21:20:
27:42:04:6c:14:b7:40:fd:47:61:70:aa:25:b2:f2:70:e1:14:
68:7c:3d:1e:94:07:6e:c0:a3:aa:66:95:bc:48:36:d2:eb:a2:
23:bc:a1:f5:43:86:88:ae:0f:ab:96:2e:12:e8:41:67:fa:f1:
dd:2c:ec:bf:ca:96:9c:db:d7:85:cc:1b:40:ee:9a:50:48:35:
e7:26:79:3e:d0:4e:65:03:94:ea:1a:bb:e6:69:66:f8:16:fc:
3e:2e:40:72:19:52:68:be:8a:1e:57:e8:01:29:01:50:4e:8e:
6f:bb:08:f4:45:10:72:c9:05:6a:32:db:b9:d4:27:8d:a0:a1:
c0:78:16:19
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:09:00 2025 by rpki-client