Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11f81f9a-4ac8-4080-b97e-44528fe3e4bb.roa
File: 11f81f9a-4ac8-4080-b97e-44528fe3e4bb.roa (raw, json)
Hash identifier: wyRrj9GUCIOLEachyLBrtZRdfWijo0axMlakRuPHJ1w=
Subject key identifier: 9B:0C:76:5E:BC:3F:98:69:79:B6:A4:F4:57:37:08:8E:72:FE:E8:4A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 12C05476E8509E8DDC89EFDBEDA822F6B5B84483
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11f81f9a-4ac8-4080-b97e-44528fe3e4bb.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 159.20.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:c0:54:76:e8:50:9e:8d:dc:89:ef:db:ed:a8:22:f6:b5:b8:44:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: serialNumber=e8ea1dffc5def045c475e8d2e7654ec6c92ced95c3282674cb4e5ce5290915ec, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d4:46:ec:1e:c7:dc:07:ca:dc:ae:54:ef:d7:
04:ad:0e:39:2e:f6:83:83:7c:fe:d9:c6:10:a6:80:
60:a7:69:2a:42:f6:bc:e9:ab:5e:1a:54:8d:8c:c5:
46:de:34:70:fc:0e:56:71:3e:64:78:87:bc:73:29:
92:de:04:19:14:6f:99:6b:3e:29:ae:3c:cc:cb:c9:
11:fd:48:9a:f3:7c:6e:87:36:a1:07:cc:98:99:8c:
44:8e:60:a8:43:69:c9:91:39:4f:8e:c3:5a:80:de:
61:b2:f0:57:3c:0d:9f:20:e8:56:b3:55:80:39:ed:
d5:bc:be:9c:46:6a:82:99:13:2c:53:e9:26:9e:e9:
8e:25:05:b0:a1:bd:45:45:42:0a:7d:8e:f5:42:2a:
10:aa:d9:21:5a:84:9b:45:1b:ad:ea:50:40:90:58:
66:c5:ba:e6:f3:74:1f:4f:fb:a9:6e:22:a0:19:94:
bb:ea:fa:43:f8:88:08:93:ed:e8:25:16:82:8f:af:
ea:9f:57:5d:45:75:e4:d1:df:31:65:ac:65:f6:ca:
76:a1:20:60:4e:7a:b8:17:66:80:5f:74:81:41:31:
b2:66:b6:4e:fa:79:d6:3e:e6:74:23:37:7e:0f:24:
cc:17:df:9c:2d:c4:9a:36:c2:98:a0:ba:0c:ca:6c:
a3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0C:76:5E:BC:3F:98:69:79:B6:A4:F4:57:37:08:8E:72:FE:E8:4A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11f81f9a-4ac8-4080-b97e-44528fe3e4bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.20.128.0/17
Signature Algorithm: sha256WithRSAEncryption
77:b1:36:f4:65:2c:89:3e:be:43:20:e6:59:3c:d3:32:39:e0:
c1:02:2b:93:f1:b7:b6:d4:f3:ab:a5:d5:4a:9e:f1:0b:e0:16:
65:4e:4c:9d:21:40:80:4a:42:06:0d:d7:47:1b:fd:b8:3d:de:
7e:da:27:92:90:1f:39:e2:6c:4b:9c:a4:70:c2:5e:cf:2f:fc:
c2:18:b4:28:b9:eb:12:f5:5c:16:0a:e2:ad:41:4a:fb:8f:2b:
82:0b:0a:e3:d9:9c:90:a0:e0:9e:f4:35:c0:86:47:c3:31:ee:
23:fe:7e:d3:f4:8f:98:09:07:69:0c:11:aa:79:cf:ce:45:ef:
46:a9:82:43:70:92:26:9c:5d:78:88:a7:22:54:57:bc:f6:e5:
d9:aa:77:03:df:79:86:02:2f:45:bb:eb:97:31:b2:24:c1:87:
b5:17:d8:05:56:e7:d7:ae:47:e4:17:bb:6f:c0:1b:bc:08:14:
5e:52:73:a1:f6:af:3c:a1:0e:f6:b4:ab:6e:86:c4:84:52:0b:
2d:38:38:08:81:e8:5b:04:8f:19:85:39:41:d2:35:1f:bb:3a:
83:6b:55:7f:05:c5:4f:00:ad:f1:ad:27:b9:12:07:54:d9:0c:
1c:d9:04:ce:73:e2:dd:1d:78:47:77:b5:9b:c8:3f:d0:97:a6:
5d:d9:6c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:56:17 2025 by rpki-client