Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0bfc8166-be8e-48ba-9a5c-9ec049250c22.roa
File: 0bfc8166-be8e-48ba-9a5c-9ec049250c22.roa (raw, json)
Hash identifier: tiLi5DlMIq+S/Z8li/SJ/wlkP973TWWOL+hA3DWzpFI=
Subject key identifier: B3:63:E0:06:BD:7B:F3:11:C1:51:3A:9B:6D:52:01:2C:52:BB:23:5F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1BCD8D3083DC2234D5A497726D2524688C5CC0AF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0bfc8166-be8e-48ba-9a5c-9ec049250c22.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 64.113.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:cd:8d:30:83:dc:22:34:d5:a4:97:72:6d:25:24:68:8c:5c:c0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: serialNumber=be56e18c2f5ad9394adb309f1b76d6f49f8d3be3499a32937e1534a8e0927f3a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:30:cc:93:d8:5c:a5:86:cd:e2:42:d4:62:
33:2c:62:fc:6a:c3:f4:af:94:00:a8:d7:d4:83:68:
93:66:b6:65:41:f9:4b:8c:2d:f4:70:5a:8b:37:4e:
30:fe:cd:9d:36:d9:72:4e:d0:c7:28:3d:0d:64:72:
5b:bb:a6:45:c7:05:1c:fb:81:aa:18:f1:fe:57:5f:
d7:ae:af:18:e6:01:49:3a:5d:0e:8d:a8:fc:af:7b:
b4:7a:a2:0b:af:9f:83:2c:1c:11:88:88:6f:c3:2f:
3a:5e:05:df:1f:d8:16:f1:75:37:6a:10:4b:e3:f4:
b8:a5:14:fb:04:a7:5d:b3:5a:10:61:da:f9:77:30:
2a:8d:5f:34:68:d2:02:cd:ea:d5:2f:0e:20:bf:2f:
67:9b:84:90:ef:94:13:72:c3:03:fe:ee:8f:1f:85:
be:d5:6a:29:99:77:1e:a0:4e:73:c5:19:c3:fa:49:
ab:2b:1d:ee:fe:8b:84:c3:91:44:e0:0c:a6:e7:20:
a1:29:af:1a:07:7f:85:56:4a:ef:65:52:e5:f7:19:
3e:d1:f9:2d:75:9d:7c:75:10:01:b5:c6:56:41:37:
c7:4d:f6:e2:b1:ba:dd:69:3f:25:69:dc:bf:19:e9:
33:d3:93:62:4a:50:36:b7:1a:ce:41:16:96:07:7e:
d5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:63:E0:06:BD:7B:F3:11:C1:51:3A:9B:6D:52:01:2C:52:BB:23:5F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0bfc8166-be8e-48ba-9a5c-9ec049250c22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.113.192.0/19
Signature Algorithm: sha256WithRSAEncryption
ac:bc:69:11:68:28:82:cf:d9:25:6d:4b:85:04:14:e3:a2:6f:
5d:b2:66:c9:d0:3d:c0:15:6d:d6:38:2f:1a:7c:fa:49:c5:ea:
58:77:61:cd:b0:d7:de:c1:e7:1f:20:37:25:05:ad:6d:54:01:
81:4a:99:d8:74:e3:6f:0c:02:8b:a4:58:a0:28:fd:28:89:52:
ee:07:9d:a9:27:fb:79:04:ca:46:5b:7c:26:d0:7d:f3:ad:c4:
28:24:20:15:5a:9e:ef:a8:f7:0c:bf:54:1b:92:61:db:38:f3:
72:e2:be:39:ea:60:43:37:13:83:14:ff:ad:84:9c:07:8f:df:
25:ad:b7:cb:b0:e7:57:2c:c5:fa:ae:1a:05:55:74:c5:04:e5:
85:aa:c1:6f:af:57:41:1c:ea:20:85:e4:05:6d:60:11:05:08:
87:f8:8a:7b:4f:b8:a3:1f:4b:51:a4:40:85:7d:e7:bc:b8:a3:
b0:63:1b:a4:b7:a2:29:06:76:cf:d9:aa:a4:78:2f:16:24:7a:
b0:f4:e1:a9:c8:54:e1:b6:f2:d7:ac:77:8e:0e:be:21:28:f1:
8d:f9:9f:76:de:9b:b4:f1:b1:d4:4c:c1:a4:8e:a8:bc:91:11:
d7:32:18:72:4e:b3:86:67:81:9e:42:49:d5:a7:27:d2:c0:e3:
4c:0a:c5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:40:08 2025 by rpki-client