Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2174100d-4e94-41bc-a630-7255c084a08c.roa
File: 2174100d-4e94-41bc-a630-7255c084a08c.roa (raw, json)
Hash identifier: hHLPe8Sv3d73N3ZkT5agw+rUTGQ5dlCZb56sJjvHnp4=
Subject key identifier: CD:AF:AE:73:87:EF:74:C3:09:61:9C:C2:9F:A8:B1:88:CB:24:C1:97
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2A59EA243FD6C2C86567D30CB7D54FE2E388A809
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2174100d-4e94-41bc-a630-7255c084a08c.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 150.245.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:59:ea:24:3f:d6:c2:c8:65:67:d3:0c:b7:d5:4f:e2:e3:88:a8:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: serialNumber=c2ac1a4f37d9f36e51ae3c7e958158c7ec67f354ecf68b56f59c9951b9c77c79, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:61:eb:23:ad:e2:f5:bc:04:91:15:0a:1c:96:
1f:63:33:52:42:5d:dd:40:b7:7b:36:96:bf:f1:38:
5c:b9:2b:ae:e6:52:e0:70:0e:fe:47:32:65:fa:72:
e8:29:21:bc:4d:00:16:01:5e:29:28:03:37:2c:fd:
d6:dc:1f:fc:bd:f7:6c:84:fa:dd:62:1d:ec:64:eb:
76:16:2f:28:ba:50:a9:c0:58:b2:2d:23:81:da:88:
e1:0c:90:9b:12:6e:85:61:16:f0:a1:4d:e4:00:82:
a5:ca:45:ed:1f:f2:56:7f:f6:d9:97:bf:78:09:d8:
56:32:de:f7:14:9e:fe:40:27:01:44:eb:9d:f1:75:
ab:f4:51:68:9d:41:1c:da:a7:21:ce:db:86:79:24:
bb:5c:fe:32:c7:90:4e:e5:4f:b4:d2:54:71:f4:94:
89:1d:68:c1:39:86:02:88:fd:6a:61:07:4f:53:fd:
e1:e2:2c:af:54:46:3f:ed:5c:e2:5e:43:81:b2:f7:
27:ac:64:cb:ea:ce:a1:44:9a:41:45:0f:18:6f:26:
45:f2:28:39:26:9b:c7:d1:f8:6e:79:0b:fe:de:7e:
40:91:e2:4f:39:32:f3:09:59:f8:af:44:e9:08:03:
8a:36:e5:66:10:77:90:c9:de:ba:88:3e:87:e1:dd:
58:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AF:AE:73:87:EF:74:C3:09:61:9C:C2:9F:A8:B1:88:CB:24:C1:97
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2174100d-4e94-41bc-a630-7255c084a08c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.245.0.0/16
Signature Algorithm: sha256WithRSAEncryption
21:58:c1:57:cd:c5:d3:63:74:14:ff:6f:7c:e3:b6:09:29:46:
02:38:5e:80:96:be:96:8c:59:3a:ff:0f:d5:16:75:6c:14:c8:
a2:64:d3:1d:05:f8:0f:ea:3b:2f:d1:df:c1:01:92:be:d4:1c:
43:e5:5f:4e:42:81:a7:27:95:83:92:37:de:b4:ab:d6:ff:eb:
08:d6:b2:cd:59:cd:d4:bf:7d:94:cc:55:83:a3:f5:47:52:0a:
e0:99:45:e9:e1:6e:56:db:95:bf:79:5e:04:9f:20:78:3b:ef:
cc:05:db:c1:ed:4b:d6:f3:f6:20:05:6f:5d:f3:5d:ab:fc:7a:
37:67:54:63:c5:b7:c8:b2:77:a2:c3:54:38:9a:17:11:c9:0b:
2f:ad:a6:5e:64:64:2e:ff:5d:4e:e6:66:cb:26:5f:57:1a:9f:
78:f3:28:57:46:6b:76:de:82:9c:6e:5d:18:0f:ee:48:1a:d7:
a1:14:14:73:a5:59:dd:c2:7b:9b:02:74:ee:b5:b0:21:a0:d1:
6c:54:8d:a6:65:75:6e:78:1d:38:a1:b3:2c:f9:35:0f:fb:0f:
5d:ff:4b:6e:9b:35:ee:9b:c0:11:3a:60:fc:aa:1e:d9:8a:66:
82:72:25:1a:95:89:e1:e6:67:65:81:4b:32:1f:c0:9d:5d:ba:
e0:13:19:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:47:38 2025 by rpki-client