Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06178b38-ce0d-4734-81d4-7ea31d3704b6.roa
File: 06178b38-ce0d-4734-81d4-7ea31d3704b6.roa (raw, json)
Hash identifier: tjyx++JFN7Iwd3gi15DX9y9QmMxAEG4EMLOcjgJJ/DU=
Subject key identifier: 67:00:95:07:18:D6:80:1C:A4:B9:A8:56:22:E6:4C:D5:9F:62:7F:F2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4E590847FBB59CA33B17E6200FB1BC4304C90CA3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06178b38-ce0d-4734-81d4-7ea31d3704b6.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 40.220.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:59:08:47:fb:b5:9c:a3:3b:17:e6:20:0f:b1:bc:43:04:c9:0c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=39723321e201d13ad17368a374c8208054db8a4487eb3834946846de37f294c5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:51:52:8a:9a:2b:cb:7d:a5:7a:ff:79:33:48:
b6:1d:e1:c5:67:ca:cb:d4:1a:52:ff:4a:64:3e:8a:
de:ae:6a:53:6b:7d:cf:2d:7f:c2:e5:62:3e:da:7b:
69:b6:c4:ff:18:e8:90:7f:93:4b:a1:47:a2:0a:cb:
70:ae:45:23:2f:33:3c:55:84:68:8c:03:35:eb:16:
dd:5b:3a:1c:e8:07:0f:31:2f:10:9b:e4:b4:3f:25:
56:ef:f7:96:ba:ae:84:e0:09:13:ee:84:a2:54:51:
74:14:c6:53:5a:12:0c:50:35:1b:56:28:3e:27:9f:
98:20:8f:fb:aa:d3:8a:77:5e:0f:9c:86:28:e8:e1:
3c:04:67:2e:4a:f5:7e:6b:f2:e4:90:6c:c7:87:4d:
42:a8:67:f7:ad:0c:fc:52:4c:ea:5d:fe:a0:46:fe:
bc:81:67:d2:a4:d4:ff:31:cb:54:b8:c2:2f:6f:49:
da:97:8b:77:c5:fc:40:0f:eb:44:32:b9:09:89:f9:
14:d7:da:12:9b:f5:d6:f5:38:8f:f1:e8:fe:e5:f8:
b9:65:ae:c1:e8:a1:51:2c:0c:8d:bd:77:3a:bb:93:
af:58:4c:6d:e9:cf:c6:d7:8b:0c:d1:64:90:95:51:
49:9b:0e:63:aa:a1:30:6b:f8:45:6c:f0:f4:af:62:
c1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:00:95:07:18:D6:80:1C:A4:B9:A8:56:22:E6:4C:D5:9F:62:7F:F2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06178b38-ce0d-4734-81d4-7ea31d3704b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.220.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bb:03:51:ea:49:5c:68:38:c8:c8:6e:fb:f7:2a:77:41:da:73:
a7:3b:e5:78:72:09:5a:c6:69:b5:f0:6c:13:77:3c:04:af:53:
da:fc:ef:5a:d5:10:4e:ef:b9:06:bd:06:65:38:30:01:68:c2:
cc:2d:e5:40:e5:ab:ca:c1:32:21:aa:29:1e:1b:c9:d1:df:11:
a3:b1:e4:ac:a4:00:44:7f:bf:d1:80:fa:92:39:df:5b:53:4d:
28:15:e2:21:55:1f:87:3d:bc:1e:e2:e8:d8:cb:4e:a0:81:4b:
59:91:d3:ed:63:7e:8c:bd:6f:d4:fc:74:ec:bb:5c:95:dd:d5:
9a:b8:c3:10:19:a5:12:39:51:de:e9:56:bb:c0:69:dd:05:97:
c1:a2:5a:e8:06:6a:a7:4b:70:92:c5:da:dc:35:dc:59:5b:bb:
78:2e:4e:54:51:9a:22:11:48:2b:19:a9:75:bd:e7:ca:06:10:
05:be:c2:14:f7:08:85:01:60:f8:61:67:f0:8b:91:0f:49:12:
32:6f:eb:ca:ab:e8:1a:95:c5:3c:95:5c:57:e7:6e:c7:d4:21:
9f:40:7c:72:d4:a0:ed:de:68:aa:62:b0:35:55:04:f5:85:17:
9b:12:b5:8d:7a:e4:bf:f0:ae:c1:7c:cf:0c:1d:25:e9:0f:1c:
3a:65:59:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:11 2025 by rpki-client