Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/078e354f-c8be-45c8-97ba-83079c2aab84.roa
File: 078e354f-c8be-45c8-97ba-83079c2aab84.roa (raw, json)
Hash identifier: OSNLVgqJkmdiazqDtyUGvT0OGzYZZGn+0u3b9VPnEFU=
Subject key identifier: AC:63:FA:86:5F:06:86:36:F5:C2:26:F1:A1:9E:DE:DD:E4:89:D7:66
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0BCCACFF0F504125227A9D538EDA2EB6BAEF2A56
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/078e354f-c8be-45c8-97ba-83079c2aab84.roa
Signing time: Sat 15 Mar 2025 00:40:18 +0000
ROA not before: Sat 15 Mar 2025 00:40:18 +0000
ROA not after: Sat 19 Apr 2025 23:59:59 +0000
asID: 19047
IP address blocks: 70.130.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:cc:ac:ff:0f:50:41:25:22:7a:9d:53:8e:da:2e:b6:ba:ef:2a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 15 00:40:18 2025 GMT
Not After : Apr 19 23:59:59 2025 GMT
Subject: serialNumber=9268cebda52ed00d7aaf80c758a3cdb1472194c2f9f7862030b2b4c4ee17f453, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a9:17:ce:c3:72:a0:36:35:04:b3:30:e9:70:
31:9e:cf:eb:14:ea:01:74:d7:7f:7a:da:cc:f4:81:
a5:6a:f4:9f:25:0a:fa:b3:71:b4:e8:9e:18:fe:12:
9c:4c:b4:b8:68:82:60:41:0e:be:a4:e1:4e:08:e3:
9e:f7:3b:14:29:94:f0:8e:af:12:56:3e:7a:76:ce:
84:4c:2d:f3:74:ce:34:ca:5a:19:9b:93:5c:0e:d2:
11:89:1f:30:bc:9f:4f:ac:c2:a6:90:48:69:96:65:
8c:d3:e5:01:ea:85:9d:41:c7:6d:36:8a:99:36:2a:
6b:f3:00:46:92:72:84:58:94:fe:73:17:97:b5:5f:
f7:2c:3b:ab:a1:87:88:6f:68:82:e8:45:3f:8e:df:
9a:a9:ca:42:23:a3:2d:22:e0:31:86:5e:a0:5e:82:
12:c7:fb:27:07:b0:4b:aa:c7:21:fd:24:89:94:a5:
f9:e1:4d:b1:46:4c:5b:bb:d9:c5:a6:3e:5a:e1:b7:
5d:09:44:1a:0f:61:90:16:09:4d:22:18:82:3e:0f:
ad:33:11:3e:17:b7:61:ec:31:ed:32:ee:a7:7a:da:
04:a9:46:93:2a:21:c3:4b:59:0a:31:63:07:9d:f8:
39:ce:17:3d:4d:07:56:1b:73:4d:23:b5:cd:f0:9a:
55:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:63:FA:86:5F:06:86:36:F5:C2:26:F1:A1:9E:DE:DD:E4:89:D7:66
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/078e354f-c8be-45c8-97ba-83079c2aab84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.130.216.0/24
Signature Algorithm: sha256WithRSAEncryption
89:55:87:7c:c8:ad:b8:54:3b:5e:ad:46:26:55:2e:f5:fb:bb:
f0:3d:1a:57:f6:55:a6:cc:68:32:73:b7:48:4f:e3:cd:a3:a4:
16:6e:5a:95:f5:d1:6b:ff:f2:5d:6e:f8:d4:8a:50:bc:24:10:
c2:46:a2:25:23:2a:1f:fb:f2:3c:53:37:62:17:6b:cc:2e:c4:
e0:3b:9b:c2:5c:dc:40:0a:e8:6a:34:1c:d2:0a:cc:d5:53:bb:
22:51:3c:07:8a:d9:f3:e5:d0:18:8a:77:b0:4b:67:e9:2b:ab:
91:89:b8:f5:5e:ff:b8:bc:5a:b0:d7:d4:85:ca:4a:0d:1e:6a:
54:78:cf:08:9c:ac:df:4a:45:bb:60:d9:05:98:45:f8:fa:30:
3d:b4:4e:f1:5b:a0:ea:81:e7:ec:fb:8c:4b:98:4c:4b:42:1d:
f5:41:15:cf:08:46:73:2c:5d:07:22:cc:72:f4:fb:58:f7:f9:
32:54:11:d6:c4:f4:ca:d0:9a:8e:36:5c:59:3a:a5:5c:33:9d:
f4:85:24:12:a0:87:55:7d:d5:07:fc:74:5c:84:85:14:e1:01:
f2:9a:d3:21:9b:fb:ac:75:e1:11:fb:b1:a9:0d:01:24:e8:3c:
1b:48:92:d9:e7:21:a2:54:2f:56:8a:48:84:8e:f9:df:f1:41:
d8:a3:34:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:40:19 2025 by rpki-client