Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/160f1a22-5546-4cd6-8e2c-93d5b88146a6.roa
File: 160f1a22-5546-4cd6-8e2c-93d5b88146a6.roa (raw, json)
Hash identifier: 1pUO62wzLOmBqNomNr3k7dMrcvMddN83DRIXEshhzWE=
Subject key identifier: 81:30:E2:FC:7D:F1:98:C2:6A:E3:EF:49:57:AE:42:2D:5D:3B:54:30
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6EBFA3AC48D2D269478C328F8133AEA079866B11
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/160f1a22-5546-4cd6-8e2c-93d5b88146a6.roa
Signing time: Tue 26 Nov 2024 00:00:00 +0000
ROA not before: Tue 26 Nov 2024 00:00:00 +0000
ROA not after: Tue 31 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 16.26.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:bf:a3:ac:48:d2:d2:69:47:8c:32:8f:81:33:ae:a0:79:86:6b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 26 00:00:00 2024 GMT
Not After : Dec 31 23:59:59 2024 GMT
Subject: serialNumber=2954adb9d0442cebd8364b14aee3cc709634faf651747069922c88a6265b72c5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:df:76:38:bc:12:83:47:04:4e:7a:68:13:33:
8b:e0:2b:eb:7c:03:dc:15:7c:eb:18:81:86:4e:f5:
07:29:49:86:0e:7b:5a:98:13:7c:df:10:df:bc:22:
be:c2:bb:33:a2:ca:eb:42:67:19:70:7c:3d:85:62:
7e:5e:6d:b2:51:8f:2e:19:30:9e:9a:1e:82:0b:b6:
6b:0d:06:ff:e8:72:65:da:cc:47:00:57:19:b3:d0:
57:5e:91:b9:f4:bb:77:11:26:59:bd:e4:b9:ef:2e:
6a:ab:44:8d:a9:e1:30:e3:b2:e3:cd:b4:ce:9c:85:
45:99:48:d8:ca:69:72:c2:10:c5:86:fa:cd:4d:5c:
b3:cc:9a:ce:fa:f8:d1:ea:e8:13:6e:43:5b:d7:d2:
60:c3:5f:6b:9b:a3:9f:86:87:a3:c6:1a:e2:62:4f:
61:79:13:60:89:95:d8:1d:69:af:3e:0e:15:51:f8:
de:d8:c0:d5:6a:7d:c9:76:cc:9c:cd:42:6f:4f:67:
54:5a:45:d3:9f:48:38:81:41:ed:0a:53:93:8e:8e:
13:1d:6c:e0:c9:75:c2:23:c0:55:3e:d0:1f:3e:50:
21:5d:ac:8b:a8:e5:c8:8f:b0:ea:36:92:51:c7:71:
d8:b2:9c:37:33:52:bc:83:90:9c:52:42:a3:d0:19:
5b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:30:E2:FC:7D:F1:98:C2:6A:E3:EF:49:57:AE:42:2D:5D:3B:54:30
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/160f1a22-5546-4cd6-8e2c-93d5b88146a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.26.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c7:5f:1f:98:a1:ec:dd:9b:46:45:1d:5a:e0:22:2a:a1:6f:55:
1f:d0:cd:52:b4:da:02:97:de:4d:fe:98:98:c5:4e:6c:21:0d:
2b:22:a9:02:09:d7:4a:b6:1c:68:c6:47:1d:ed:64:40:71:ad:
42:88:31:a8:cf:c9:aa:35:08:7f:0f:d1:00:6a:26:f8:f2:fa:
65:4e:ce:36:7f:1f:ed:40:dd:ce:11:fc:c0:7b:bc:02:89:a4:
a3:88:f7:31:d6:88:05:46:d4:2d:71:19:37:0b:11:f0:7f:ca:
97:e2:74:4e:86:3c:9c:32:6f:c4:32:8c:96:3d:d9:30:ce:7e:
1d:f6:11:1b:f7:9f:97:21:2c:7b:06:45:e7:ef:9c:9c:24:e9:
95:7d:e8:ab:22:ad:a6:f3:ef:07:81:4c:79:34:d5:2c:d4:a5:
a7:62:81:eb:4b:23:e6:1b:a5:bd:14:42:3d:c6:37:ec:46:3f:
1f:56:ea:a5:1f:75:e0:d7:a0:20:b8:02:ce:a5:72:5a:4e:a4:
d7:51:2b:1f:ba:10:f4:bc:d6:b5:aa:ef:63:fe:26:3e:85:4e:
14:39:f1:b5:6e:98:f6:0c:e3:8a:12:8b:18:b8:49:0b:83:ea:
09:12:fe:75:60:89:74:cf:5a:a3:ac:75:2e:b7:73:31:6e:c6:
4d:36:34:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:07:44 2025 by rpki-client