Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1bb7fd5d-24c8-4951-958f-fa464333c581.roa
File: 1bb7fd5d-24c8-4951-958f-fa464333c581.roa (raw, json)
Hash identifier: vbbljiXydFOCC+m1+OXcI6dZOMEM04RfBcX/jJIH1cA=
Subject key identifier: 1D:01:76:68:4E:56:54:B9:3D:56:8E:27:1F:6E:F9:8C:79:25:5A:04
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 46BE716B02BCC65ECC1D0FD035C6666F86686461
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1bb7fd5d-24c8-4951-958f-fa464333c581.roa
Signing time: Mon 02 Dec 2024 00:00:00 +0000
ROA not before: Mon 02 Dec 2024 00:00:00 +0000
ROA not after: Mon 06 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 65.0.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:be:71:6b:02:bc:c6:5e:cc:1d:0f:d0:35:c6:66:6f:86:68:64:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 2 00:00:00 2024 GMT
Not After : Jan 6 23:59:59 2025 GMT
Subject: serialNumber=21ac2ee251ebd31ee36a604d9dd1aa392a7d297f345a8b816d23015cd93a7cfa, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b2:be:37:56:33:1b:8e:ac:de:42:4c:6c:d4:
d7:be:47:48:c0:de:c6:75:ea:b3:52:e6:f6:2b:1b:
0d:7a:db:18:c0:53:3c:13:96:a7:bb:39:ea:e2:6a:
d3:94:0e:05:10:04:e2:4e:9b:07:e6:3a:90:7e:15:
83:a6:d5:3f:1f:ff:d5:24:94:fc:37:88:41:75:e4:
66:4f:1c:0f:06:81:31:20:83:95:33:e2:17:ae:37:
aa:c6:dc:ef:cc:3f:c3:aa:3e:73:2a:be:61:81:4c:
2b:e2:03:bb:9f:3b:62:d7:8e:41:0e:b9:bb:49:1b:
00:71:dd:87:39:16:30:da:bf:43:86:7d:8c:35:c9:
f9:bb:a0:c5:5a:81:46:93:ed:af:65:c5:62:71:d3:
1e:06:62:18:c9:1e:48:64:98:ce:76:42:de:4b:ce:
4c:94:99:be:72:14:2a:66:59:fa:87:8f:2d:b8:1d:
4f:92:7d:24:33:d9:f2:7d:6f:c9:b0:14:fb:f0:08:
25:ff:3d:44:44:49:2e:55:ce:8f:9c:e6:04:ab:da:
27:1c:60:27:01:48:ad:73:36:56:d8:d2:7f:1c:7e:
a6:58:44:f0:f5:e8:a1:f6:d1:3b:97:7e:95:93:57:
40:86:6e:2a:b4:f6:83:5a:e8:0e:62:bf:d4:16:f6:
8d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:01:76:68:4E:56:54:B9:3D:56:8E:27:1F:6E:F9:8C:79:25:5A:04
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1bb7fd5d-24c8-4951-958f-fa464333c581.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.0.0.0/14
Signature Algorithm: sha256WithRSAEncryption
3b:2d:1a:d4:d7:ef:52:f5:a7:d6:3b:bd:ba:4c:89:70:1f:b7:
8d:0b:2b:80:fe:08:72:31:fd:8e:94:83:f4:5d:35:33:bc:dc:
7e:93:01:f7:31:64:f4:a8:10:b3:de:66:64:95:bd:50:5a:7e:
44:87:51:cc:23:81:d0:42:f7:79:e4:a7:31:46:1f:87:94:39:
e7:4a:47:97:74:b3:d1:0e:29:fe:7c:e0:31:d1:51:d3:b3:d3:
ac:0a:f4:49:46:6e:a6:6c:90:60:34:3b:2a:23:07:fc:a7:ae:
7a:fe:7d:b6:ed:6f:b7:9d:6a:8c:a0:d0:7c:4d:bc:8c:7b:a8:
ec:db:f9:fd:37:d8:91:68:3c:51:45:b9:37:84:10:f6:84:23:
0d:94:ff:30:84:61:70:90:97:ad:73:97:2a:1d:36:a2:f0:2a:
e9:62:8f:99:3b:e2:53:39:ff:76:ba:40:6b:29:1b:c7:63:06:
be:f3:2c:e5:b9:78:c0:f9:71:41:f0:79:b5:dd:1c:c9:2f:83:
87:3a:a1:38:c8:74:32:81:14:3d:13:d1:72:3c:66:8c:8f:6a:
d0:3f:2f:8f:cb:4e:d4:79:9d:c7:9a:b6:5f:8b:86:ed:b4:28:
b1:f2:30:20:35:c3:42:09:28:3c:b0:c9:a7:18:f2:2b:e1:da:
93:28:43:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:40:12 2025 by rpki-client