Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d37018f-b766-4576-9296-f8055fa87d2b.roa
File: 2d37018f-b766-4576-9296-f8055fa87d2b.roa (raw, json)
Hash identifier: kgiU5/GKvA8Vg9KmfgjIjPQal4SadaQjgH8mWjvYI90=
Subject key identifier: 69:9E:C1:37:D8:28:48:B0:C4:83:EC:8F:84:03:D9:F6:49:BB:C5:42
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 16B2E52E448C4CCD2D82B1CD6455E37FEED986DA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d37018f-b766-4576-9296-f8055fa87d2b.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 163.3.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:b2:e5:2e:44:8c:4c:cd:2d:82:b1:cd:64:55:e3:7f:ee:d9:86:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: serialNumber=01611e2f72727018d31aac53b8de629f5fc406ae41ebfaed84aa20db654c888b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ea:91:55:04:70:38:b4:8f:d7:c1:86:ba:fe:
c5:47:0e:20:2a:35:a5:c2:ba:62:eb:ef:cb:a9:c1:
c9:2d:6c:ec:04:59:3b:f0:ba:14:8c:c3:98:ff:fb:
b8:0c:18:b0:5c:ee:b2:f6:82:b8:dd:61:d9:a6:7c:
7c:28:c2:d7:28:51:89:4f:af:62:11:63:90:fb:0a:
1e:e0:4d:2c:f6:e4:ca:c2:41:3b:92:b7:99:92:cc:
b4:bb:b7:d0:f7:1a:bf:fa:61:a1:84:6b:bf:62:bc:
d6:ef:34:e0:5d:30:85:be:76:4b:97:d9:85:6d:54:
c5:ff:0b:ff:8b:57:b2:9c:14:78:d7:81:f8:3c:ca:
29:9f:be:46:29:f2:8d:99:94:46:7b:14:71:a6:a9:
54:ec:a2:a2:2b:61:dd:57:28:d3:e7:e8:af:0b:0b:
14:5c:28:87:e9:89:17:72:7d:45:8b:db:81:ad:af:
e3:83:e5:7e:ff:cc:06:c1:0c:50:c5:34:e7:c7:c5:
d2:1b:d1:23:45:eb:92:d5:b5:6e:c1:1c:e7:67:be:
75:d2:02:85:cf:a5:c1:d2:a6:12:c3:fb:a3:97:1f:
a8:2b:71:db:ca:74:65:4b:80:65:5f:00:b3:84:c2:
ed:78:5d:29:66:eb:85:5c:4d:be:7d:c3:81:6c:1c:
09:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9E:C1:37:D8:28:48:B0:C4:83:EC:8F:84:03:D9:F6:49:BB:C5:42
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d37018f-b766-4576-9296-f8055fa87d2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.3.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b0:ff:37:5f:6d:50:19:d6:54:b5:e4:28:4f:c2:3e:9d:d2:ed:
32:02:0f:1b:6b:c2:54:f1:a1:a8:43:33:1d:9d:12:d8:3e:32:
2e:ad:04:42:31:4b:c4:df:9f:44:c5:a6:c0:44:17:e6:ce:4d:
31:1a:ae:15:81:d2:13:38:4e:47:f2:86:8c:d3:59:30:6e:b6:
32:1f:1a:89:84:07:57:4b:9c:13:92:e9:41:2d:a2:9f:e0:4e:
68:3d:48:41:72:3b:f2:4c:4f:b4:1d:56:f0:72:7d:42:4a:c9:
a5:82:4f:5c:56:8b:07:51:72:48:45:1d:b7:f8:c6:b6:2b:f1:
68:eb:14:e8:64:87:d9:7c:b5:cc:f8:3e:3d:91:e3:2c:a8:43:
56:a1:99:ae:de:33:93:cb:07:fc:6e:b2:e8:56:b0:54:55:6c:
df:91:a9:dc:8b:1d:67:d4:80:7d:99:ae:83:65:5f:91:48:62:
ee:3d:d1:a6:0a:00:5f:c5:e7:11:5f:d0:4e:64:e3:da:0e:38:
91:56:48:0f:90:72:de:48:7e:45:63:9c:12:2a:02:9e:30:1f:
2a:e9:64:53:a3:a9:18:f6:a8:ef:52:87:2e:01:8c:10:de:e9:
d1:9b:ba:c6:21:e6:eb:85:79:27:2e:c1:62:8e:49:d0:39:51:
b5:f8:34:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:25:27 2025 by rpki-client