Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37a1287e-7819-402e-9c6a-a46f890f048f.roa
File: 37a1287e-7819-402e-9c6a-a46f890f048f.roa (raw, json)
Hash identifier: 0mztL8Nsu8V7005/kI/l3atJY5kvZSz7y3B0fn9mJ64=
Subject key identifier: C6:4E:7D:91:76:3F:BE:50:82:66:73:B4:A1:9D:5A:24:1C:46:B2:B2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 140E4CA66F317DEC5A4DA1095165C19A7D7836DC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37a1287e-7819-402e-9c6a-a46f890f048f.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 56.38.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:0e:4c:a6:6f:31:7d:ec:5a:4d:a1:09:51:65:c1:9a:7d:78:36:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=def1ae71e6a078aca389693c1d3f8c3d9b34de2026e39cb3d8b4269fef5f9683, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8a:de:30:ce:ec:e9:2c:4a:33:f7:83:b3:8c:
23:1e:cc:20:ef:cf:e1:c1:49:11:a1:ff:56:e2:ac:
43:9c:fc:34:24:85:33:2e:b3:82:ca:0c:2b:c1:3d:
e3:56:70:17:33:3a:a8:27:80:b3:c4:01:87:3b:b2:
55:0d:67:dd:dd:ea:e8:7d:ad:c9:38:76:4d:18:3b:
01:5d:06:24:0c:8c:73:2b:93:72:df:d7:f5:fc:11:
bf:d3:c2:4c:66:ff:5e:8b:44:2b:79:0b:fb:32:07:
ae:b7:cb:f5:2e:75:b4:8d:d6:04:da:36:70:03:70:
5e:83:da:75:3f:0f:54:f2:d9:f2:b4:95:77:88:cb:
b4:38:a4:1b:e1:2f:af:73:01:6d:4c:a6:41:d4:e9:
3f:43:a0:6d:dd:34:46:32:22:ba:a4:df:0a:05:8c:
18:72:31:be:4c:2c:ce:dd:30:26:86:7d:6f:ff:25:
a9:c2:c0:65:b6:2e:5b:87:af:8d:8f:d1:2f:1e:64:
31:3a:27:5c:a8:37:51:7a:6a:bd:af:1d:07:e5:af:
a8:e0:87:0a:59:d2:81:0c:92:af:77:a0:5e:24:a2:
0e:16:49:6b:62:aa:3e:05:78:f5:8d:eb:a0:03:39:
a9:fc:60:81:76:16:7e:29:1c:17:d2:d1:8a:18:e7:
9d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4E:7D:91:76:3F:BE:50:82:66:73:B4:A1:9D:5A:24:1C:46:B2:B2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37a1287e-7819-402e-9c6a-a46f890f048f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.38.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:93:d3:d3:cf:a5:ef:09:e5:34:5e:18:1f:33:e1:cb:21:62:
7d:78:cb:ba:61:a6:7c:3b:54:19:ad:a1:f7:bc:34:cc:30:8f:
b3:dd:ab:ce:66:20:05:30:99:32:a0:e7:c5:72:02:50:e5:99:
88:b9:46:53:ba:2e:aa:14:c7:9e:fa:bf:75:04:e4:f4:ed:83:
c8:c2:19:f5:9d:53:a3:99:1f:24:78:bf:ef:55:0a:10:d1:48:
28:65:dc:3a:1f:eb:6b:c1:93:68:c1:16:26:81:80:64:4b:73:
1b:d0:c3:59:cc:19:b4:68:49:a9:65:bc:2c:b8:3b:ee:15:49:
34:d7:a3:74:87:57:56:86:0c:86:ad:0b:49:22:fc:bb:18:df:
22:ce:6a:1e:d3:47:69:36:98:64:be:b1:d3:c2:25:9c:de:1a:
e9:8e:b6:d8:d0:d8:04:3e:39:8a:c7:1f:70:b2:a6:3f:b4:5e:
37:da:77:34:ba:6a:db:81:05:07:c4:76:09:81:b9:05:c6:e8:
e6:32:8b:bf:cb:a6:61:2f:45:df:f5:8f:be:7a:42:ea:0a:96:
9e:bf:66:9e:5e:e2:d6:d4:34:8d:91:eb:ec:c0:cb:6a:d8:9c:
36:68:8a:30:60:c9:df:08:1d:48:39:9c:ee:d2:91:3e:cf:71:
78:72:0a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:18:08 2025 by rpki-client