Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22ee9671-08cb-4809-94cd-772af831eadf.roa
File: 22ee9671-08cb-4809-94cd-772af831eadf.roa (raw, json)
Hash identifier: olsPdEKbcTc9HP6Layo/zkbSEUC2CnZFrtcrJTSzFbU=
Subject key identifier: BE:49:5A:9E:C1:B0:CA:81:2C:D5:B5:24:44:35:7F:14:37:7B:37:31
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5723AFFE2F96B5522126D6656A6B3130AFE378B0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22ee9671-08cb-4809-94cd-772af831eadf.roa
Signing time: Tue 03 Dec 2024 00:00:00 +0000
ROA not before: Tue 03 Dec 2024 00:00:00 +0000
ROA not after: Tue 07 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 70.232.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:23:af:fe:2f:96:b5:52:21:26:d6:65:6a:6b:31:30:af:e3:78:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 3 00:00:00 2024 GMT
Not After : Jan 7 23:59:59 2025 GMT
Subject: serialNumber=1e47158221e5b0ef89ef6cd51517fb598038cdf3338ccd8584c80c442b4c0a0d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b0:c7:5c:91:60:64:1f:b9:19:4d:34:fa:25:
70:52:81:44:41:53:db:f9:c7:db:e7:93:e6:0d:cd:
54:cb:f9:5b:e5:fe:2a:56:2e:7a:8e:75:7d:b1:7d:
5e:94:a2:fc:d8:12:12:3d:47:ce:ed:e5:bb:a9:d7:
7b:ac:db:dc:d0:f5:49:4b:1f:9e:5b:cf:82:55:5b:
b9:0f:b9:15:cb:ec:67:0c:3c:47:61:e9:eb:92:ac:
2a:75:15:5c:6f:2d:4f:9b:ce:a2:9e:25:0e:78:c8:
61:99:b0:38:9a:7e:ab:cd:96:f6:22:9b:88:5f:b6:
14:08:fa:1a:8e:89:ba:a1:ed:b4:e6:ef:e1:05:ac:
65:2b:42:4b:b2:12:d8:69:5b:4d:13:dc:a9:b3:57:
4d:e1:18:b6:45:98:d2:f9:6f:15:f7:d0:9d:36:97:
e7:86:4b:af:b1:d0:7b:c5:27:d2:b8:8b:a0:fd:ac:
13:0d:17:ec:1f:16:29:48:47:40:09:82:41:e8:82:
38:76:25:92:12:b1:cb:47:c4:d0:0b:9e:c7:8d:cb:
be:32:96:8d:bb:84:32:8c:3d:90:6d:ed:53:a8:1b:
ab:fa:ee:65:31:8a:a7:81:fb:8b:f0:c7:b8:0c:3f:
64:3b:3f:57:a6:dc:e3:17:09:9c:75:ce:f0:4f:97:
85:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:49:5A:9E:C1:B0:CA:81:2C:D5:B5:24:44:35:7F:14:37:7B:37:31
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22ee9671-08cb-4809-94cd-772af831eadf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.232.64.0/18
Signature Algorithm: sha256WithRSAEncryption
12:c9:fa:6c:d3:8e:a8:3d:40:3f:74:8f:78:fc:60:33:79:7b:
0a:ab:e4:ba:fe:6b:42:24:78:29:fe:6e:69:fe:01:a6:ea:7b:
5b:ee:c2:80:c0:a9:1c:20:85:21:c9:fb:4a:7e:48:e0:2a:ad:
b3:3b:78:90:a7:52:c4:bf:a9:de:1a:55:2e:cb:2c:99:e7:b5:
05:89:b4:05:f3:f5:9e:36:f4:7c:34:27:a9:34:3d:99:48:34:
d0:6c:d6:84:79:0d:f0:2c:57:ce:ca:7e:79:af:23:00:35:5a:
12:45:b0:8d:b9:14:e0:f3:e8:c9:e8:20:4c:4c:4c:37:c6:51:
93:91:42:d9:7e:be:1a:e2:78:37:ca:86:b7:31:a9:eb:a4:60:
b4:b9:a1:86:54:e9:ac:8f:51:81:09:15:bb:7a:90:10:f2:0a:
00:2d:2d:ca:bf:0a:44:8e:ad:19:28:b0:ba:df:94:91:bb:09:
32:24:56:90:c4:a2:45:fb:cf:4e:cf:52:ce:cb:1a:35:15:56:
d5:a6:ac:d6:e5:97:44:87:b5:e4:70:7e:84:4e:c4:7e:7b:96:
e8:64:58:52:7a:31:84:b6:3b:80:3d:7b:46:f7:ec:66:3d:57:
6d:83:49:58:9f:ff:3b:35:83:be:a8:85:dd:08:3a:3b:65:a5:
7a:48:5e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:49:44 2025 by rpki-client