Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18dfc27e-1993-4894-9bad-4c2537d4ceb6.roa
File: 18dfc27e-1993-4894-9bad-4c2537d4ceb6.roa (raw, json)
Hash identifier: XFggZFbzyyhAwo6ujEnr7cKWIrFQy1cqXFlZ8B3aSeA=
Subject key identifier: 5C:FD:60:23:E1:AA:EF:D3:8A:77:66:E9:F1:C3:1E:D0:46:E3:20:65
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 32C14472C4355D0F12E77B93EF1FD11EED46C5A0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18dfc27e-1993-4894-9bad-4c2537d4ceb6.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 107.160.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:c1:44:72:c4:35:5d:0f:12:e7:7b:93:ef:1f:d1:1e:ed:46:c5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=5377055a9c8f61827ec8a997d98adca59bc7ae6744d2bf9a0fafd22ba55c8992, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1c:df:5e:7c:8c:54:16:86:5b:2e:ef:e6:7f:
8c:1a:77:b8:5a:c5:f5:32:01:34:9f:04:20:52:5a:
da:a2:af:26:0e:0a:ce:bf:ad:15:2d:d1:fc:b7:e2:
a8:cc:2d:7c:0a:44:8f:21:c5:8d:50:79:c5:53:cb:
04:af:fa:76:e6:8f:0c:88:07:98:76:8f:47:f3:7c:
63:d6:4a:f6:bd:bb:3d:99:a3:da:a6:ea:3e:92:ba:
1c:1f:52:b4:bd:16:49:0e:59:d7:61:1c:c6:7c:75:
7d:2a:ef:29:23:da:4f:f9:0a:d4:f0:40:12:2b:55:
66:67:61:c7:7e:0e:64:84:a7:77:9e:bf:5f:99:e3:
f9:69:0e:b0:b5:0e:50:8b:67:cd:37:4f:e5:b3:b4:
ba:bd:b8:77:d3:c8:7a:8f:39:b8:13:05:10:28:c8:
d6:36:0e:28:77:ae:20:d7:7c:f3:8a:ae:64:1c:1a:
a4:ff:1d:96:21:59:21:3a:7c:c9:26:d9:5d:62:69:
6f:6d:8b:c6:3c:a4:98:a0:6e:81:10:4e:72:f3:08:
38:52:b0:11:09:20:35:c5:ef:c5:80:c3:89:07:50:
09:d0:32:50:9a:e0:1f:c9:1d:71:fc:87:79:19:36:
c4:d8:99:c2:e8:d2:ba:f2:ea:80:27:77:8a:f3:10:
a5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FD:60:23:E1:AA:EF:D3:8A:77:66:E9:F1:C3:1E:D0:46:E3:20:65
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18dfc27e-1993-4894-9bad-4c2537d4ceb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.160.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1c:70:bd:e5:f7:26:26:33:54:92:66:78:63:d8:d3:c3:bf:5a:
2e:d2:d2:a2:c6:5a:a6:31:aa:08:57:ae:79:dd:fe:aa:b1:c6:
2b:ed:33:a1:52:13:2b:f8:c0:85:a5:1f:6f:4d:b7:a5:e3:c5:
49:01:b2:e1:60:3e:65:10:17:25:87:fb:5d:76:24:6a:2a:2d:
0d:53:0e:cb:6a:a8:ba:5a:ca:79:ce:41:da:ba:ed:bd:5f:ae:
cc:a0:39:c4:31:bb:51:2e:f0:dd:bc:58:c9:42:4d:d5:75:14:
87:71:d4:84:1a:5d:0b:83:5b:56:d8:d2:72:1a:02:77:bd:cc:
5a:ec:ca:fe:a8:8b:4f:66:c3:62:1e:ab:39:f3:5f:6e:fa:9e:
4e:a1:33:65:c7:f5:44:8d:02:0c:86:5b:57:05:38:a3:c1:5a:
89:19:5e:a8:b3:96:e1:38:e9:64:e7:c3:46:d6:8d:c7:a8:10:
ad:5e:39:7e:3e:dc:68:fb:ec:d2:e4:33:91:ba:7d:f8:bb:9c:
22:75:f1:cc:b9:85:62:10:50:87:84:03:77:94:1e:fe:07:97:
f7:ca:a8:7a:2c:c7:f8:07:3e:c0:a6:7a:a8:f6:f6:67:6f:a6:
d1:34:7b:71:fd:16:58:fd:ab:41:6b:49:b2:e4:71:9a:c0:7a:
8e:3a:40:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:48:28 2025 by rpki-client