Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10dfd5e9-572f-4675-ae62-d7dcc72d6acb.roa
File: 10dfd5e9-572f-4675-ae62-d7dcc72d6acb.roa (raw, json)
Hash identifier: UGCkIVP4K7d0rrYHYf3a2d2GVj4JPfQa0Y0bg0tbfNU=
Subject key identifier: 9C:C2:57:EC:BF:59:27:39:BB:77:78:03:16:39:BF:D0:6F:05:E0:E5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5A518BFCEC4B00107C21E9DE2D2D5425BD59E043
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10dfd5e9-572f-4675-ae62-d7dcc72d6acb.roa
Signing time: Mon 02 Dec 2024 00:00:00 +0000
ROA not before: Mon 02 Dec 2024 00:00:00 +0000
ROA not after: Mon 06 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 16.62.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:51:8b:fc:ec:4b:00:10:7c:21:e9:de:2d:2d:54:25:bd:59:e0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 2 00:00:00 2024 GMT
Not After : Jan 6 23:59:59 2025 GMT
Subject: serialNumber=fc0c11824abf0241fb3c82bc7b98b530d4514cb0ec5b8d00eb528364872b303b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9f:f9:50:b8:65:79:c0:b3:77:78:29:92:24:
c4:dc:89:19:75:89:91:24:35:6f:24:32:f5:f7:3c:
be:d3:b2:b6:06:d8:90:01:97:90:19:ff:ac:8e:86:
c8:86:28:a5:b1:8c:0d:5d:d3:ff:61:3c:e5:26:fa:
84:eb:a5:cb:18:30:18:e3:66:8a:b3:59:b7:1a:1e:
f1:f1:19:2e:c2:23:82:3d:51:54:54:c7:71:28:e5:
e3:06:e0:25:5c:37:e9:3c:23:16:b9:8e:46:2e:1b:
fc:c0:69:08:36:d3:55:35:92:bf:2a:18:e3:2d:02:
05:14:d7:6b:28:db:e6:d3:b8:bd:26:86:ae:d4:5f:
f5:01:ac:47:cb:c2:cf:da:dc:5c:5c:2d:24:e8:04:
f7:21:ba:4f:f2:ce:80:22:65:a8:0c:22:bf:6e:a9:
69:3e:84:89:45:d2:62:60:28:9a:5f:d0:3d:f4:fc:
42:7f:3e:68:d0:31:52:58:89:70:60:98:60:f7:a8:
30:2b:21:f5:b4:f1:86:3d:a5:b7:4c:30:02:10:0f:
c9:29:a6:85:cc:85:b0:fb:bf:0b:4d:88:05:91:c6:
34:0d:94:0e:bf:ba:d3:9f:e2:91:1b:48:a3:0b:bc:
3e:80:0c:c5:71:8f:ae:8d:ec:46:a0:8c:a3:1e:1d:
a9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C2:57:EC:BF:59:27:39:BB:77:78:03:16:39:BF:D0:6F:05:E0:E5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10dfd5e9-572f-4675-ae62-d7dcc72d6acb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.62.0.0/15
Signature Algorithm: sha256WithRSAEncryption
16:f4:d6:fe:95:56:1e:10:23:ed:58:b7:2e:92:1d:ae:2e:23:
e8:77:04:01:a1:b6:54:60:af:bd:93:d5:07:d2:bb:0f:7e:18:
f9:a9:8e:74:c2:73:1c:72:b3:fc:45:55:d6:4a:8b:31:cd:43:
16:88:15:da:c7:48:13:42:ff:17:e8:ee:53:64:ce:a9:41:b8:
9f:b9:3a:3f:40:40:91:1b:d1:c4:e6:39:62:f0:5c:e3:d6:71:
5a:fc:39:68:41:9e:a3:21:15:ce:61:24:88:6f:4d:2f:99:e1:
68:19:20:49:6c:ed:96:f8:70:11:ac:5a:ba:b6:84:5e:d8:e9:
3d:fd:09:d7:57:6d:e7:dc:05:31:c0:27:5c:b8:71:49:a8:95:
af:89:a3:44:52:43:c8:f6:2b:dd:bf:14:38:1e:95:69:8b:4f:
f7:8e:e7:fc:d8:62:4e:42:91:fc:9b:71:a2:92:41:90:d6:37:
9c:fc:f5:e3:0a:83:2b:f2:fe:3b:dc:a8:96:fe:b1:18:31:98:
e3:1e:d9:0c:3d:13:75:80:83:5e:5b:eb:f6:ee:12:54:50:81:
87:ad:2b:8f:30:51:91:b2:2c:1e:cf:a5:46:8e:a8:cb:74:cf:
e7:ab:8c:52:ed:05:6f:66:7f:e8:84:ee:00:eb:6c:f6:63:d5:
22:7b:1e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:26:55 2025 by rpki-client