Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10ac3fd1-c3cd-4b2f-b35a-96a556becd8b.roa
File: 10ac3fd1-c3cd-4b2f-b35a-96a556becd8b.roa (raw, json)
Hash identifier: 6DRIap3p81gbTjOBAk85oavSOxEZAurqQPyfh9ITzRg=
Subject key identifier: 55:43:8B:4B:3B:54:9E:A0:AD:2A:16:B9:9F:CA:5D:D5:0F:51:CF:94
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1AF87D373DB33F9CD9D6EF0F37DE40F68E233EDC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10ac3fd1-c3cd-4b2f-b35a-96a556becd8b.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 149.114.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:f8:7d:37:3d:b3:3f:9c:d9:d6:ef:0f:37:de:40:f6:8e:23:3e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: serialNumber=76fb9b0c2246ba1e33085053ab60a10b2949c0746319f23b414b8ca4997b76f9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:25:d1:b4:02:87:ec:b8:99:db:cc:e0:fa:f7:
8c:32:5f:53:ca:0c:f8:68:ce:09:f5:69:30:e2:69:
ee:51:ae:f7:52:c7:25:e1:67:98:c2:35:24:db:47:
50:49:f2:24:3e:8f:0c:9b:d3:50:03:87:9d:94:86:
f2:9b:a0:52:3e:39:f8:bc:8a:d3:02:ae:c8:0c:16:
0a:39:14:b6:97:0d:fc:63:d4:5c:47:ee:11:04:a8:
d5:24:57:47:e0:79:13:d7:bb:e1:da:bc:a3:5d:70:
95:2a:48:42:bf:ec:30:2b:73:72:4d:1a:02:94:c4:
f7:e9:23:64:f8:e4:82:ee:c9:9b:88:10:5e:f3:4a:
f5:03:b0:f1:c5:f9:ad:3e:0f:b1:1c:0c:f4:af:70:
76:bd:17:db:d6:14:b9:11:ab:f1:c6:1a:52:be:05:
22:a7:11:26:99:f3:43:33:fb:b0:7d:07:5b:b2:5e:
8d:55:0c:5f:a5:35:2c:64:41:9c:7a:2f:80:58:be:
f1:26:9e:c0:15:7f:ee:c1:a7:2d:45:c1:0f:d0:37:
e7:32:e6:fb:ad:6b:9e:58:01:c5:6a:be:37:a3:d3:
33:eb:28:f0:8c:3a:b0:9f:37:e9:05:96:b6:b2:f9:
d2:a3:62:a0:9a:21:4e:f5:a3:02:3d:b4:ba:14:ef:
69:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:43:8B:4B:3B:54:9E:A0:AD:2A:16:B9:9F:CA:5D:D5:0F:51:CF:94
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10ac3fd1-c3cd-4b2f-b35a-96a556becd8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.114.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d1:5a:82:26:0b:e1:c6:62:15:54:de:8a:31:0c:4d:2c:68:99:
a6:33:12:13:ec:ee:22:06:d7:b0:7e:eb:09:ee:84:67:01:ab:
3d:8c:49:57:0a:3c:2f:44:7d:b9:49:59:cd:bd:59:fa:cf:0c:
38:a7:cf:1a:18:49:44:db:cd:1a:7b:92:72:15:4b:47:1b:cb:
8d:d7:a0:cb:db:4a:fb:77:17:60:9e:79:95:f4:bc:df:39:78:
40:fa:43:47:1c:a5:f7:f9:2b:86:c2:2f:33:5b:fe:f4:b7:00:
c9:47:60:59:db:5e:e0:88:2d:79:ef:0d:1e:82:e4:8b:7e:a0:
11:66:ae:74:82:3a:e8:e7:dd:64:05:95:b9:45:df:b0:13:8c:
ea:91:77:5a:e4:fb:8e:08:2f:c9:78:31:5b:39:54:a1:4e:72:
33:f5:da:b0:c5:d4:93:53:33:09:0c:22:ba:d2:3a:72:12:32:
f1:7f:d3:91:cd:65:c4:8d:5f:63:d1:25:47:af:7f:22:66:d0:
fe:3f:25:62:33:0c:08:db:70:7b:71:eb:7e:e9:73:9a:d7:15:
e1:6e:03:41:2a:e6:40:73:0b:4f:a3:7d:9a:d3:a2:91:4e:fa:
ac:c9:78:fb:bd:91:c0:ef:3a:f3:7c:67:36:52:6d:a6:d6:7c:
22:3d:7c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:04:07 2025 by rpki-client