Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23f103f0-4be2-4443-9d34-0f0a05ff824e.roa
File: 23f103f0-4be2-4443-9d34-0f0a05ff824e.roa (raw, json)
Hash identifier: nZnECzWro6u8opmbS/gbuXBBHWXD37IhwWaQ9Lbju3w=
Subject key identifier: B5:69:CC:9B:68:D7:A7:60:96:35:FA:F6:D7:8B:79:6B:26:E9:F4:B6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2AF02F809D3FDB2A2110E65138F71BFBBB7837B1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23f103f0-4be2-4443-9d34-0f0a05ff824e.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f1e::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:f0:2f:80:9d:3f:db:2a:21:10:e6:51:38:f7:1b:fb:bb:78:37:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: serialNumber=cce949b16a6ec33485e4c5dab4da82f090051a0049b73d7310192931676b2831, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:70:f1:5a:3e:ab:af:ca:c5:83:7c:14:06:96:
d3:58:6a:2a:a8:0e:4d:9c:a8:0b:1a:9b:a4:32:f2:
ff:0e:8f:47:df:11:08:d5:75:ba:35:73:cb:37:cb:
45:13:37:fa:a9:fd:14:e4:c1:13:9a:4c:7b:24:da:
a8:e6:a6:08:f3:6c:33:c7:de:6d:ff:d7:ef:b6:d0:
55:4d:55:6e:93:86:be:55:74:23:ff:ac:d0:99:bb:
4f:a8:59:c0:d2:21:26:de:61:1c:83:11:0f:ec:92:
a5:3a:5f:5b:06:49:cc:ba:2a:65:4c:74:bc:87:af:
78:41:2d:4a:90:21:e2:cc:65:86:ed:2d:9f:ff:ce:
9d:88:54:83:84:c7:dd:f4:29:cd:c6:49:b1:24:87:
17:7a:e8:8e:02:b6:79:c5:83:12:64:88:c1:14:e2:
78:ba:09:5c:98:81:8b:4e:5e:d7:80:de:da:a4:e5:
ae:f1:17:51:1d:a0:fb:c1:46:b1:cd:23:ce:6d:58:
2a:ea:25:a2:ea:49:76:06:53:c2:71:c2:8d:e4:33:
8d:4b:1f:b5:b7:6e:dd:e0:71:bb:72:c1:08:13:5b:
86:6f:73:92:c2:a6:96:83:99:f6:7a:70:a4:63:29:
5b:8e:fd:7c:50:84:5b:53:ae:86:ca:b1:af:e1:56:
96:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:69:CC:9B:68:D7:A7:60:96:35:FA:F6:D7:8B:79:6B:26:E9:F4:B6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23f103f0-4be2-4443-9d34-0f0a05ff824e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f1e::/36
Signature Algorithm: sha256WithRSAEncryption
aa:2a:cc:b7:0c:08:3b:fb:b4:34:bc:71:3d:20:d5:73:f0:df:
01:3e:8a:a2:af:16:d7:06:e5:b6:85:f0:16:bd:fa:7e:46:b0:
56:53:96:9e:0c:65:c8:69:d6:4f:6c:09:a7:7b:37:f8:52:86:
cf:00:85:fc:05:12:90:77:16:5c:fd:48:4b:61:52:87:b8:36:
1e:52:14:de:70:9e:97:d9:0d:39:b3:f1:80:87:0e:b8:6b:aa:
e8:b2:ed:9f:f1:5b:f0:cf:47:05:57:2a:93:19:04:b6:bb:8f:
d3:1f:19:75:09:77:3e:1c:34:56:0e:30:ec:18:30:83:3d:d6:
5b:af:65:d1:96:0b:ca:9f:c3:d7:e8:21:60:2e:bb:11:5a:3b:
12:93:fa:04:22:b8:72:7b:92:0d:3d:d2:87:d6:a4:c6:39:32:
d3:3d:bd:8f:43:a6:95:1a:94:41:c4:57:d1:e3:da:00:2a:0c:
9d:59:33:e5:40:ad:b5:0e:dd:1c:e2:13:b4:3a:93:30:bd:aa:
08:30:de:28:56:97:98:da:0f:87:a0:ef:e7:ca:ac:6b:d1:c9:
6c:61:46:86:03:26:19:ec:a5:a5:34:80:02:87:50:dd:e8:e1:
42:5c:cd:bd:98:85:0f:e7:8e:29:00:27:3a:0c:ae:f3:92:9b:
9c:01:37:94
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:40:43 2025 by rpki-client