Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19fdebe9-66e4-44b6-91de-67f6a15bf28e.roa
File: 19fdebe9-66e4-44b6-91de-67f6a15bf28e.roa (raw, json)
Hash identifier: jp2BDwTtVWFiAjuvlkrZy74cQTiIBSE/APiUBs0Lvts=
Subject key identifier: 6C:E5:B4:88:D7:BB:66:07:33:E5:10:17:55:0F:5A:3B:44:ED:EE:B4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 14AB29075A6419D6324C3A107552C4720B4E385F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19fdebe9-66e4-44b6-91de-67f6a15bf28e.roa
Signing time: Sat 11 Jan 2025 00:00:00 +0000
ROA not before: Sat 11 Jan 2025 00:00:00 +0000
ROA not after: Sat 15 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 156.66.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:ab:29:07:5a:64:19:d6:32:4c:3a:10:75:52:c4:72:0b:4e:38:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 11 00:00:00 2025 GMT
Not After : Feb 15 23:59:59 2025 GMT
Subject: serialNumber=7a777089a3fbdf8212abf46946079d479e7d10d4c782553fa87aef59451b1bf3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d5:20:ca:1f:23:ad:d1:a4:29:b7:a3:67:e3:
4f:0f:01:1a:93:5f:54:37:55:bf:95:cd:f3:16:dd:
06:b1:83:0c:5c:7b:85:3b:33:45:f3:9c:78:7f:d6:
2d:cb:ea:d4:a8:a1:e0:7a:49:28:3b:2c:a8:49:bb:
24:23:a3:5d:92:f8:ed:b0:7f:36:87:d3:61:0b:56:
18:26:1d:ea:9d:7e:4d:b3:ca:d6:3d:bd:be:6d:33:
be:d1:fa:22:5a:63:8c:b9:82:83:21:b9:47:4c:26:
83:e2:35:37:be:4e:23:8b:b8:55:9b:8f:79:c7:0a:
72:73:81:0e:b9:e5:aa:e3:fa:7f:ff:e4:bf:8d:20:
b7:9b:3b:6e:25:33:43:93:40:2e:67:de:d1:3e:43:
e5:87:41:0a:27:02:38:32:4d:71:84:be:7c:b3:59:
38:9f:67:5d:e9:8e:c7:60:bc:f4:aa:a7:eb:fa:77:
d8:d4:68:d6:77:8c:f7:44:f7:62:5a:ef:d0:16:24:
4f:61:c6:c3:d2:4c:bf:ea:06:da:3e:55:f8:e2:bf:
93:ee:5f:dc:89:af:26:4a:70:78:3f:94:75:f6:9d:
35:06:39:5a:7d:7b:2c:34:13:49:4a:3f:0a:39:61:
04:0a:3f:0a:7b:4d:fd:65:77:8b:23:b8:0f:ac:83:
2b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E5:B4:88:D7:BB:66:07:33:E5:10:17:55:0F:5A:3B:44:ED:EE:B4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19fdebe9-66e4-44b6-91de-67f6a15bf28e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.66.0.0/16
Signature Algorithm: sha256WithRSAEncryption
94:45:26:6d:35:1c:61:a5:b3:3c:27:c0:69:56:ed:7e:29:b2:
f6:f6:fe:29:53:0a:05:91:c5:a5:31:e0:b1:12:0d:58:e6:53:
56:ef:02:38:75:23:17:57:5f:c7:8c:7b:9a:7c:ee:fd:02:f6:
5b:b5:c1:d1:a3:e0:40:f6:bc:0d:9f:bf:c0:7b:75:b6:92:f2:
40:f1:52:1d:b4:0c:84:f4:12:4a:7c:52:af:eb:ca:6f:ca:86:
cc:41:9a:2f:0a:fd:f0:43:48:0f:92:8d:ca:06:99:f4:52:7d:
46:d8:be:a9:e2:59:4d:72:0d:5b:5b:81:9b:08:2e:a3:fb:43:
19:f6:6c:55:fd:aa:59:cf:49:0d:92:b4:59:f1:ef:31:1e:42:
89:fb:0f:05:b8:b0:66:b7:49:f5:40:e3:0e:fd:4e:a1:7b:a4:
f7:b0:e7:79:ed:7e:2a:5d:28:56:e4:c1:32:56:9c:4b:ac:fd:
2c:b6:4a:a5:df:7b:a9:af:bc:d5:4d:51:45:58:0f:4e:9a:5d:
43:0a:e7:4f:e0:30:35:96:53:a3:6a:75:7d:13:be:af:5c:98:
ab:f7:6d:0a:f4:47:0f:22:4c:d4:ed:fa:63:28:c2:5d:fd:42:
04:c5:5b:53:6b:57:63:45:09:ab:4e:f9:f8:f7:ff:8d:84:03:
88:05:24:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:25:22 2025 by rpki-client