Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19814b5e-505a-4b70-ad34-626f911d4a1f.roa
File: 19814b5e-505a-4b70-ad34-626f911d4a1f.roa (raw, json)
Hash identifier: gR4TBomriA6khipZq2+NVveNFOgAiiSQiEgYyGgWOkc=
Subject key identifier: 51:E2:1A:56:FB:52:26:A8:D8:D4:AE:A9:6F:39:11:6A:D3:65:C1:32
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 419C0415F7E7F169B301469EF7EC00AC6B1115D5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19814b5e-505a-4b70-ad34-626f911d4a1f.roa
Signing time: Wed 05 Feb 2025 00:00:00 +0000
ROA not before: Wed 05 Feb 2025 00:00:00 +0000
ROA not after: Wed 12 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f30:5000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:9c:04:15:f7:e7:f1:69:b3:01:46:9e:f7:ec:00:ac:6b:11:15:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 5 00:00:00 2025 GMT
Not After : Mar 12 23:59:59 2025 GMT
Subject: serialNumber=61937b370a7b9cf7d02442231641640b4f8b6cb3fc22aeb1fe84bb38a75479b6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:10:4c:e6:a4:ce:59:f6:46:5a:36:0c:6c:83:
ca:42:aa:61:fb:f9:ec:4f:4e:30:dd:91:45:6a:be:
d8:df:68:4c:30:37:33:65:03:1a:1a:86:b7:f4:e4:
eb:ae:b1:cb:5e:ca:82:a5:10:17:5a:d2:e1:ba:50:
95:03:1a:dd:d2:73:61:18:50:f3:29:b5:aa:9f:c2:
54:bc:d8:18:d2:28:2f:d0:ec:d7:26:70:de:81:8c:
30:b2:d1:da:20:25:6f:21:30:0a:06:01:34:85:be:
d1:8f:a8:3f:c1:8d:79:d2:f2:71:24:1b:73:53:fe:
88:9b:ac:9e:1a:eb:31:6f:ba:4e:cb:89:bc:a2:db:
85:39:ec:74:31:f9:52:3a:70:f7:4a:06:8b:d3:b2:
04:24:db:5a:52:36:16:0e:85:a0:0a:2b:26:c6:ca:
b2:17:a8:5d:a7:b4:c8:1c:1e:6a:39:ce:4c:3d:da:
a4:ef:cb:24:d2:b4:82:69:62:8b:fd:00:d4:ed:e2:
10:1c:9d:e2:ae:d8:eb:78:b9:3b:72:22:5a:27:b9:
65:ff:f0:ac:4d:8a:02:c5:2b:29:3e:15:7c:1b:cc:
53:16:d5:4c:8f:a0:39:b5:f5:6d:78:3b:ac:9c:c3:
a2:25:23:26:e4:cc:17:d0:9b:77:b0:79:80:cd:2e:
8b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E2:1A:56:FB:52:26:A8:D8:D4:AE:A9:6F:39:11:6A:D3:65:C1:32
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19814b5e-505a-4b70-ad34-626f911d4a1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f30:5000::/40
Signature Algorithm: sha256WithRSAEncryption
7d:bf:7c:0e:1e:16:72:83:e2:38:2f:a9:dc:f1:d4:28:bb:4b:
c9:84:51:88:02:7f:b6:11:6b:b2:b7:77:6b:a2:8e:b3:67:3a:
dc:e5:82:57:b2:1b:2f:bf:56:7a:06:82:56:0a:bc:6d:49:16:
eb:c8:25:f8:d1:21:3a:2e:68:81:bd:5e:ac:9a:87:50:db:4b:
23:08:36:86:88:40:88:62:6c:83:48:92:90:72:fb:83:96:0b:
1c:eb:70:9b:06:64:d1:b0:73:9b:45:02:63:cc:e8:d9:60:5b:
06:2c:2d:97:a2:6f:a5:80:60:6e:4f:22:0e:ff:6f:67:2f:c2:
26:70:f3:ca:4a:52:47:aa:84:27:eb:33:6d:b5:fb:66:29:69:
e3:da:83:e6:b0:31:52:2e:27:69:7b:e5:bf:a6:c6:25:1e:91:
cd:fb:f2:ad:39:74:7d:d1:50:4e:b9:be:ff:b6:b6:b4:a1:ae:
ba:ef:54:f4:fa:45:55:42:9c:53:f6:36:dd:3b:d4:6f:1e:96:
8d:2c:11:ec:56:80:34:1c:8b:24:dc:23:bc:23:89:d7:cb:d6:
56:cc:6f:ec:ea:13:6d:75:fe:1a:c5:e2:75:0a:a4:50:6f:32:
57:a2:0f:d5:4d:b9:d7:82:ff:73:53:5d:0e:76:eb:21:d9:71:
eb:b2:4a:ab
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:50:29 2025 by rpki-client