Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1db02b21-b410-4618-a3ef-3a974c02813c.roa
File: 1db02b21-b410-4618-a3ef-3a974c02813c.roa (raw, json)
Hash identifier: TLE0RXUEtqekEyUGsYAOhdgncgcusTLQWZ6FVoVwiGk=
Subject key identifier: 0C:AE:A1:0F:5E:B1:02:2E:D2:49:01:CB:83:D4:F4:59:00:8C:D0:CB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 090646EA3762E42F588A336B4E0A5F3FB147798A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1db02b21-b410-4618-a3ef-3a974c02813c.roa
Signing time: Sat 21 Dec 2024 00:00:00 +0000
ROA not before: Sat 21 Dec 2024 00:00:00 +0000
ROA not after: Sat 25 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 192.157.64.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:06:46:ea:37:62:e4:2f:58:8a:33:6b:4e:0a:5f:3f:b1:47:79:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 21 00:00:00 2024 GMT
Not After : Jan 25 23:59:59 2025 GMT
Subject: serialNumber=b9992afa0ccf5c07410e77d9fa57bc326021fed1495b738ea97108839d5ab19b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d0:75:fe:b9:4d:43:67:00:24:33:98:f5:c7:
be:5f:da:82:52:02:ae:17:92:fa:62:98:2e:68:48:
23:62:c2:fb:af:91:d0:09:28:23:41:3f:4e:8e:28:
01:0b:1d:2e:f4:d3:84:af:2f:1b:1b:2a:73:e6:4e:
16:a0:9a:9f:f1:eb:3c:06:51:1e:2e:d7:11:59:e9:
0b:9b:ed:68:1a:72:10:ac:24:03:b4:03:01:32:38:
9b:60:cb:9f:80:c7:08:35:e7:66:9f:98:9a:56:a0:
be:c4:16:04:9d:e5:8b:32:f6:36:bf:b4:0b:8f:b2:
f8:d3:0a:c9:2e:3e:93:f6:9a:97:b9:33:36:75:8a:
10:96:4f:f3:45:43:40:c9:cf:6d:59:58:54:75:fc:
8b:fb:c3:a7:e8:75:8b:fc:d6:57:d1:83:c1:c6:15:
0c:c9:e5:d2:10:5c:6c:ac:37:bc:ca:71:e3:53:7e:
74:ac:92:80:c1:62:b7:25:a4:c1:46:31:95:09:68:
3c:2f:cc:8f:fa:ab:1e:93:6f:73:e5:f1:91:2b:b0:
d5:0c:c0:1b:03:c1:e2:63:69:10:57:a7:20:ec:7d:
83:ec:24:5b:17:fd:af:99:3b:08:64:38:d6:94:b2:
10:10:0c:9e:a5:ff:e8:16:c2:5c:c0:f0:65:6f:99:
e5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AE:A1:0F:5E:B1:02:2E:D2:49:01:CB:83:D4:F4:59:00:8C:D0:CB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1db02b21-b410-4618-a3ef-3a974c02813c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.157.64.0/21
Signature Algorithm: sha256WithRSAEncryption
75:c3:04:65:21:4e:b1:0b:a5:d9:d2:c4:e6:b7:3b:aa:21:f5:
de:29:32:ac:e7:91:8b:fc:9c:f1:64:c4:e0:f6:46:ce:77:36:
5b:9b:c5:e8:cb:82:de:24:7e:3f:0f:cb:b8:ce:18:78:f2:25:
36:88:df:ef:84:c7:07:b9:48:cc:05:8d:28:8d:5e:61:4a:ad:
70:04:37:21:aa:cc:e3:8e:0d:15:d9:d8:91:f8:65:94:6f:4b:
22:84:af:81:01:2e:f5:a0:ed:2a:51:c8:c7:c0:54:8d:72:ee:
15:91:14:d9:b1:5f:d3:33:ea:78:e2:91:e9:6d:f0:5b:cb:10:
c5:97:36:0f:3e:19:de:91:6e:ba:ba:0a:4d:9b:18:85:5b:39:
df:10:31:c0:0c:26:cd:f4:3d:05:72:91:32:83:79:7a:4e:67:
87:30:ad:37:07:20:24:1a:e7:e0:f4:3e:55:ad:d7:0a:31:93:
3e:71:d4:43:ed:bf:29:fa:88:80:98:9d:c8:04:ad:ca:8d:27:
cd:ff:9c:79:ec:a1:25:d3:00:a4:92:93:b8:04:9d:1f:c0:f8:
bb:ae:70:35:8e:04:52:5b:ed:86:2d:12:35:23:77:ee:f2:e0:
5c:dc:92:43:2a:87:b4:b9:2b:c9:72:b6:cb:1f:28:7b:21:34:
c1:a3:27:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:26:56 2025 by rpki-client