Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13068bd1-282e-4747-a1ce-3d8ef1858ad2.roa
File: 13068bd1-282e-4747-a1ce-3d8ef1858ad2.roa (raw, json)
Hash identifier: vOnGVCaKkZakGQgD1BGHmia1yphRKvShNAVO3F9fU9o=
Subject key identifier: B9:6B:FA:DE:6D:3B:5C:59:A4:71:F1:C4:19:AE:40:71:73:E9:E3:9C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 41348F94E48C214D123A3C122EA1CB484930EE02
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13068bd1-282e-4747-a1ce-3d8ef1858ad2.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f60:5080::/46 maxlen: 46
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:34:8f:94:e4:8c:21:4d:12:3a:3c:12:2e:a1:cb:48:49:30:ee:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=d7ff44764c1792f164062687599c8651b83355521dcd33c41e42f82b4dbaf66c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b3:44:37:a0:75:ca:6d:8f:91:7e:c6:d1:a9:
b6:b9:22:ed:da:4c:d2:fd:a9:0b:af:09:1a:b0:b1:
00:f3:f3:13:a8:93:bf:e5:f0:20:42:e9:7b:be:ff:
aa:82:ab:80:bd:0b:7d:19:7a:b7:0e:46:5e:ab:33:
9c:40:a0:b1:18:ca:5e:dc:35:a7:16:35:2e:db:3e:
4d:45:5b:41:ce:e0:cd:1e:96:2c:c1:bc:28:50:ba:
01:e9:94:c6:03:de:e0:48:d7:0b:e2:76:73:85:b2:
8a:3e:36:a6:02:17:3a:c3:95:70:29:6b:cf:31:96:
dc:c9:68:e6:f2:c9:d0:79:e7:c6:c9:65:ad:d3:c6:
05:ca:1b:dc:69:5a:51:7a:f7:85:60:5f:0c:c6:f9:
15:af:67:ed:84:64:ce:5a:c8:0c:f5:fb:5d:9c:c5:
14:9f:0c:eb:40:e7:33:06:5b:eb:1c:4e:80:be:fc:
28:5a:f5:1c:ca:ed:8d:46:bc:08:64:2a:12:f4:bc:
c0:b1:9a:26:0c:82:2b:0c:31:6f:4e:3d:65:f3:49:
c5:5a:d7:81:28:5c:18:3b:28:af:cf:cb:25:7b:33:
67:ab:b0:b0:40:fd:80:66:d1:5c:91:59:3d:ce:d3:
90:27:eb:95:11:a1:49:d8:99:65:43:b3:b7:e7:fe:
54:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6B:FA:DE:6D:3B:5C:59:A4:71:F1:C4:19:AE:40:71:73:E9:E3:9C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13068bd1-282e-4747-a1ce-3d8ef1858ad2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f60:5080::/46
Signature Algorithm: sha256WithRSAEncryption
51:56:a5:95:ee:85:cf:4a:bf:97:a9:52:a9:52:2d:04:d9:77:
73:2b:5b:1e:96:cf:60:24:f1:b1:59:72:9f:34:0c:a2:80:d3:
be:08:58:21:3e:7e:1a:67:68:e2:a0:0a:7e:35:ca:aa:0e:89:
3c:82:d4:c2:1f:e1:c5:c1:18:88:bd:62:ea:84:2d:1f:80:67:
31:99:56:3b:d6:1a:04:f9:f8:24:6f:57:b1:c7:7c:89:eb:8b:
40:ad:e7:bc:7c:af:39:a4:c7:09:ba:32:04:d0:4a:f5:11:12:
fa:63:da:a2:6f:59:b4:27:17:3b:e6:ab:2b:08:43:cc:f0:67:
a5:fa:49:68:e0:3e:44:22:83:35:2c:98:6b:6d:5a:f7:ee:40:
31:84:1d:11:6f:09:8b:ab:67:b8:8d:9f:b6:c6:2b:58:6b:e9:
77:46:09:7d:a6:98:45:8c:dd:5d:81:01:01:ec:80:a7:a7:89:
08:2b:4b:e7:ae:e2:f6:5c:db:12:8c:24:f1:e5:5f:cf:74:b4:
bf:b1:e5:e8:90:fd:50:8d:91:47:43:e9:96:59:01:25:0e:92:
52:c2:e4:a5:ea:6e:40:e7:78:7c:8d:17:5e:e8:09:0f:de:51:
6d:23:0a:60:7a:04:a7:83:d7:14:b0:f8:f2:b0:92:d0:b2:f8:
65:42:3c:51
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:18:20 2025 by rpki-client