Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/118390dd-3538-4758-b395-9332264dd268.roa
File: 118390dd-3538-4758-b395-9332264dd268.roa (raw, json)
Hash identifier: PoL+EovN47SicboJqJm1EqY50P9Dtv+I63QR5uguA4M=
Subject key identifier: BF:82:19:1C:65:3F:40:D8:4C:DA:9C:C6:67:E9:52:43:71:B0:2B:C4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0CF115DF58F0470FA3FD23A763A1A3394F1FB01B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/118390dd-3538-4758-b395-9332264dd268.roa
Signing time: Wed 15 Jan 2025 00:00:00 +0000
ROA not before: Wed 15 Jan 2025 00:00:00 +0000
ROA not after: Wed 19 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 16.49.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:f1:15:df:58:f0:47:0f:a3:fd:23:a7:63:a1:a3:39:4f:1f:b0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 15 00:00:00 2025 GMT
Not After : Feb 19 23:59:59 2025 GMT
Subject: serialNumber=513a303bb4bac8e244b41f083666f67578920ecf03b2649789b38d046ba31b21, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:fd:c5:84:93:bb:af:a7:77:a1:de:c6:7a:
6b:4b:ad:45:5b:d2:65:de:6b:4a:51:4b:3d:67:5d:
26:d7:36:84:19:62:ef:1e:7f:bf:ce:35:72:ef:b7:
12:49:7a:3a:7b:14:f7:a9:2f:62:d6:16:12:f8:91:
59:bf:88:59:2d:4d:af:4d:39:2b:3c:72:a6:0c:b4:
e2:75:49:75:7a:73:25:f9:64:7d:f7:52:3c:ee:26:
0a:90:3b:58:94:5d:37:c2:5a:9d:5a:09:71:7b:6f:
60:46:a1:66:65:a1:14:6c:5f:1b:2b:d0:8c:50:82:
f4:e3:eb:44:f2:50:62:a2:d3:40:d7:d9:4f:87:aa:
8f:4c:ce:17:06:97:bb:84:b7:51:79:79:b6:cc:9c:
c8:83:af:63:5c:c0:fa:59:2e:eb:18:b2:2d:4b:c5:
36:e6:e2:d6:7d:5c:15:cd:67:86:3c:6a:70:fc:20:
15:d0:84:b5:de:b9:e2:0c:2a:54:4d:89:e6:70:69:
bb:15:dc:55:47:09:e2:38:e3:58:4f:13:b5:bd:cb:
15:da:c4:bf:71:ea:9f:3d:2d:84:e3:6c:8b:e1:81:
53:cf:53:3d:c3:45:13:7e:95:2f:f9:59:55:79:ec:
0e:a7:dc:07:9d:f0:b5:1d:1e:60:c3:15:1d:19:25:
8f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:82:19:1C:65:3F:40:D8:4C:DA:9C:C6:67:E9:52:43:71:B0:2B:C4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/118390dd-3538-4758-b395-9332264dd268.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.49.0.0/16
Signature Algorithm: sha256WithRSAEncryption
13:fd:92:f9:57:9c:57:b5:a1:6f:72:4c:45:6d:5d:5c:47:0d:
3a:69:aa:26:b0:b0:2a:ad:e5:50:73:4d:a9:bc:ce:28:2a:a0:
b8:c2:ac:52:f9:ed:5b:ee:dd:80:a3:c2:71:c2:fe:09:42:ed:
73:c8:16:0e:7d:75:c7:3a:f5:19:7c:8a:14:4c:1d:26:42:0c:
ef:75:60:c0:b0:09:eb:30:04:6c:aa:5c:9f:b5:96:79:74:91:
e4:25:b0:d3:b4:78:71:13:41:8d:e5:89:f0:35:42:31:77:ae:
dc:10:d8:a0:43:f5:55:25:4d:83:fa:a2:75:13:fb:33:88:c4:
fa:bd:42:61:7c:f0:b8:dc:73:fc:01:c1:d3:22:7c:2e:46:a4:
cc:d3:cd:06:53:be:ab:4f:05:88:29:65:1b:cc:84:2c:2d:22:
bf:a3:9e:2c:e3:05:07:77:61:33:bd:30:89:fd:c8:6a:c7:5c:
b5:00:78:ce:9a:7d:cf:a8:26:98:d2:e9:3a:80:ab:66:7e:b0:
75:74:bd:27:88:39:58:e1:be:fe:6d:a8:79:ab:ab:9c:69:eb:
4f:7f:51:b7:f2:46:96:0b:86:2b:e7:34:bf:75:c7:d9:99:ab:
cd:8c:36:e1:40:ce:c5:52:1e:ce:43:29:fe:31:59:49:24:c3:
36:79:30:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:09:18 2025 by rpki-client