Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16a5df37-e150-4134-83b1-263c1a99e0f7.roa
File: 16a5df37-e150-4134-83b1-263c1a99e0f7.roa (raw, json)
Hash identifier: gIPmGusNqVHDU4KO40V6XTalydh7AzrXsW8+Flh7gI0=
Subject key identifier: 5B:52:28:F4:5E:2B:E0:E6:47:01:53:5D:6F:17:39:BE:60:00:1C:31
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1786969C3E927E1F6C3155A7C800A98BD551D658
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16a5df37-e150-4134-83b1-263c1a99e0f7.roa
Signing time: Sat 11 Jan 2025 00:00:00 +0000
ROA not before: Sat 11 Jan 2025 00:00:00 +0000
ROA not after: Sat 15 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 54.25.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:86:96:9c:3e:92:7e:1f:6c:31:55:a7:c8:00:a9:8b:d5:51:d6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 11 00:00:00 2025 GMT
Not After : Feb 15 23:59:59 2025 GMT
Subject: serialNumber=e198792855dab52271e6b8bea76f44ba867669587b63ae2dcfb9e2df1f5ac6f0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:20:2d:6e:3b:a5:c1:3f:79:2c:e8:99:16:77:
d5:13:2d:60:d6:fc:be:73:8b:57:ac:ff:41:2b:10:
18:8e:06:cf:69:34:8b:9e:3b:4f:a2:8b:4c:ff:5f:
70:fa:d7:6d:40:19:ee:8a:bf:b9:57:bb:20:e0:a0:
d6:48:99:0a:ec:7a:08:ff:89:d3:08:2c:9a:24:6f:
86:60:e8:c8:77:9e:91:18:45:58:8c:68:6b:90:80:
d9:7a:85:92:7b:e1:8c:ee:6f:8d:15:e4:a3:62:f1:
33:dc:5b:d0:c0:64:a4:bf:5f:d4:66:ed:ff:0a:b0:
5d:2c:3e:0a:77:c9:fb:f3:9f:fc:bc:e9:c3:e6:aa:
d7:11:89:fa:d2:f0:3e:30:62:67:0f:e3:9c:e1:f4:
5b:85:0c:7f:ed:06:c8:62:35:6e:f4:99:d9:ec:08:
2b:a9:c9:48:b8:d6:81:b4:6f:6f:2b:cd:a4:86:80:
a5:33:e9:07:53:18:22:48:66:76:4d:9e:d9:a2:6e:
6c:0b:12:2d:b1:5a:c6:47:63:02:dd:09:3a:d3:7c:
aa:75:2f:e0:79:a9:cd:c3:52:33:28:42:b7:ab:03:
5b:ef:74:89:73:87:6d:e9:b3:1e:76:a8:66:b1:b6:
0b:f0:9c:a4:6e:a7:48:ab:ec:87:26:2e:89:d5:c9:
d7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:52:28:F4:5E:2B:E0:E6:47:01:53:5D:6F:17:39:BE:60:00:1C:31
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16a5df37-e150-4134-83b1-263c1a99e0f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.25.69.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:7b:b2:f9:8e:b9:26:82:65:88:51:10:8e:51:ba:9e:ef:84:
84:9b:fb:9d:ca:17:c7:c8:2e:44:25:10:49:17:37:b1:80:4e:
26:07:0f:37:e2:1b:0e:b8:0e:62:ae:1d:3a:c8:7c:f5:33:3e:
02:c5:14:e8:3c:4a:f7:ea:c9:a3:f3:95:58:4b:ac:ec:72:5f:
03:a9:71:a1:8c:7e:88:8b:f4:dc:41:42:af:28:05:41:ca:f9:
51:e0:4e:f0:f6:6e:59:06:7e:d9:a5:dd:86:da:a8:89:6b:ce:
f5:86:61:71:48:46:58:b3:a4:12:e9:0f:c9:0f:27:22:ea:37:
db:43:47:fa:74:ac:3f:9c:66:b1:ff:bf:89:b7:48:97:29:49:
70:a1:b8:30:6e:67:39:e7:59:ef:a1:c2:21:ff:d8:85:db:e6:
e6:c0:eb:8a:f4:19:13:42:19:09:56:4f:7b:08:60:a3:61:47:
82:cf:44:e5:78:c7:83:2d:60:9e:70:98:19:ee:27:48:88:bc:
a6:a1:c5:3a:85:df:8b:21:f2:44:12:b1:8c:6a:bf:76:17:19:
8d:fe:16:91:38:41:f7:19:98:46:1c:3a:0b:b5:c8:20:9d:48:
d9:5f:d0:c9:f7:13:1b:df:4e:e4:fe:0b:1c:fd:60:a2:a3:63:
fd:c2:11:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:38:13 2025 by rpki-client