Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f5250a9-e717-49b3-a91c-a954813884a2.roa
File: 1f5250a9-e717-49b3-a91c-a954813884a2.roa (raw, json)
Hash identifier: ZuyIKH7C/I7oahb2YQeY7qr+aD6UnBKv5ER0sCll9ro=
Subject key identifier: 90:58:C1:CC:05:0D:84:6B:C6:49:51:8E:F7:EC:8E:73:10:51:BE:54
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 370CDE73DDFE95A8AECAD5DE74CD9A10727443A8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f5250a9-e717-49b3-a91c-a954813884a2.roa
Signing time: Fri 07 Feb 2025 00:00:00 +0000
ROA not before: Fri 07 Feb 2025 00:00:00 +0000
ROA not after: Fri 14 Mar 2025 23:59:59 +0000
asID: 14618
IP address blocks: 5.60.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:0c:de:73:dd:fe:95:a8:ae:ca:d5:de:74:cd:9a:10:72:74:43:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 7 00:00:00 2025 GMT
Not After : Mar 14 23:59:59 2025 GMT
Subject: serialNumber=dcdab3934cc69c482f839bb8e9f3d636ac5b8697838ceef0cc6e9e8a506d2bee, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:83:24:a4:ae:3d:23:7a:bf:69:57:8d:db:fd:
d0:2d:fa:7d:12:cb:c9:ac:e2:59:ff:c5:90:3c:26:
f8:57:23:be:33:ea:6a:b9:5d:8a:c5:20:bf:8a:00:
9d:dc:38:68:80:94:e5:d3:28:d2:45:fc:d1:98:7b:
2e:72:81:b3:8c:ae:7e:1a:ab:ae:cd:83:13:e7:b8:
3e:44:46:97:8d:96:41:53:ee:b3:b4:49:37:5d:cd:
0d:19:23:29:ee:15:dc:62:14:5d:fa:e2:22:bb:1d:
91:2a:0c:94:77:83:fd:58:9c:46:ab:7c:5c:dd:f5:
da:8f:dd:2e:9d:58:0f:19:a2:4e:3d:dd:ed:be:6f:
4d:6f:c7:94:89:35:bd:55:c9:01:30:9d:08:d8:d9:
3c:a1:a6:9a:fb:8f:a4:8a:a6:6c:bb:d5:bb:4a:47:
e1:42:4a:88:f4:a2:05:d6:7b:9b:33:a9:07:24:c8:
57:2a:84:77:c6:ff:a2:e2:94:36:db:ac:dc:46:b7:
4d:bd:42:14:71:f1:a0:af:8d:32:ef:0d:69:a8:e6:
6f:81:af:40:15:b1:7f:92:37:f2:45:bb:41:85:15:
55:ff:1f:05:ff:97:a9:f0:c3:f3:49:4c:15:bb:85:
3f:2a:d5:2b:78:6f:7f:af:17:3b:13:8e:04:cf:02:
24:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:58:C1:CC:05:0D:84:6B:C6:49:51:8E:F7:EC:8E:73:10:51:BE:54
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f5250a9-e717-49b3-a91c-a954813884a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.60.56.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:ed:ff:b5:5a:35:c3:8a:43:0a:c6:66:33:4e:9f:c0:29:f8:
9b:84:29:fb:19:c7:f4:e2:11:61:a5:0d:f9:6f:18:17:e3:5b:
58:04:de:c6:48:ca:5e:01:e1:42:89:94:d5:a9:a4:82:66:19:
5e:d8:37:8f:4d:d1:d0:19:75:54:f6:88:13:d6:9b:ed:86:f7:
80:5b:96:31:0c:2d:8e:0b:fd:9d:9e:5b:a2:76:52:8a:4f:bb:
a4:ed:be:89:ea:5c:b9:6a:5c:c0:33:fe:7a:4b:81:d3:5a:02:
51:37:93:63:ee:0e:d7:1e:58:33:85:63:8b:14:72:97:da:28:
6c:7c:8b:26:bc:04:fd:83:77:91:82:1a:07:57:4c:04:eb:a7:
8f:b8:f2:3d:86:0e:5a:ad:08:e8:a5:a8:08:fd:07:0c:fb:c8:
ee:35:a3:5c:06:fc:8d:7a:3a:86:02:53:6d:87:e5:21:63:2c:
dc:34:5a:e5:eb:47:cb:e4:fd:8e:b4:9a:4c:a0:da:a7:fc:33:
7f:7a:8d:d0:9f:e9:f3:f0:9a:5e:08:2a:61:8f:df:29:b2:f3:
cf:ac:0e:ea:c9:ed:ea:14:92:a6:d9:b2:88:02:bb:8d:72:8e:
22:ee:8e:33:03:33:6e:c8:a8:80:01:3d:77:87:e3:f9:29:30:
79:03:73:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:36:18 2025 by rpki-client