Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37edbd25-755d-4c64-aa1a-f88267694cd5.roa
File: 37edbd25-755d-4c64-aa1a-f88267694cd5.roa (raw, json)
Hash identifier: amuGLr/3hL2TADXTt9RKjNzsrCqvrcFEdP6K1GHpBRI=
Subject key identifier: 37:AE:89:0E:C0:04:2C:0A:96:AC:BC:78:31:A2:66:10:3A:BD:45:87
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 31A72EA365098427116AF9B7C451A6D543ED9584
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37edbd25-755d-4c64-aa1a-f88267694cd5.roa
Signing time: Mon 02 Dec 2024 00:00:00 +0000
ROA not before: Mon 02 Dec 2024 00:00:00 +0000
ROA not after: Mon 06 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 54.46.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:a7:2e:a3:65:09:84:27:11:6a:f9:b7:c4:51:a6:d5:43:ed:95:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 2 00:00:00 2024 GMT
Not After : Jan 6 23:59:59 2025 GMT
Subject: serialNumber=be0c92cadea27feb0742f58b65e10f0fbe524172be4466bfff0f822c406811bb, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:88:e1:f5:60:71:ae:64:02:02:22:f6:4f:2f:
56:f1:d8:32:2d:97:33:f6:59:3b:f4:76:a0:e7:1d:
1e:79:0b:65:1d:50:36:b9:9d:df:e0:7c:a9:92:6a:
eb:61:0b:d8:56:4f:68:68:12:66:f4:f2:1a:9b:e2:
08:0e:87:b6:6b:a5:0f:05:33:d6:27:d5:26:ec:e9:
6f:29:20:60:e1:b3:02:c3:ed:69:b9:b1:e2:b6:c0:
32:8f:84:27:89:33:2e:d1:d8:2d:dc:f5:65:5f:74:
86:c5:33:b1:86:f4:5d:ae:ad:cf:b7:15:f3:c6:af:
34:da:f1:cf:4b:0b:4d:37:77:01:5e:d0:1e:56:39:
fe:9c:17:03:94:5c:33:ad:b2:9f:de:9b:c8:9d:e0:
a5:23:dc:32:78:13:e6:a9:ef:ce:fe:a0:7c:1c:04:
72:22:e9:d0:6d:09:87:4e:bb:ad:43:02:ff:cd:49:
c4:c9:30:28:37:6b:c5:b8:d9:56:fd:e5:a1:55:9d:
40:fc:73:be:b9:58:03:a1:cc:f0:3d:4c:6a:e1:13:
52:1e:09:68:28:d0:52:d0:e7:4b:36:7f:8c:c8:82:
ff:33:92:59:99:88:ee:d9:be:90:fb:3c:7b:2f:86:
c1:00:ab:ed:74:ba:c2:54:eb:1c:0c:4b:2a:56:d0:
f9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AE:89:0E:C0:04:2C:0A:96:AC:BC:78:31:A2:66:10:3A:BD:45:87
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37edbd25-755d-4c64-aa1a-f88267694cd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.46.0.0/15
Signature Algorithm: sha256WithRSAEncryption
8e:6b:eb:c3:58:d5:3d:0e:69:06:c0:1c:c0:a6:25:e7:f8:33:
ea:1f:dd:9d:6d:92:94:82:95:37:2a:e6:b3:83:5c:50:c6:9e:
6e:97:f8:3d:96:0e:32:3d:df:54:a5:48:dc:15:f0:2d:ce:ac:
50:54:6f:ac:d9:5d:32:b1:09:f8:ab:4b:46:03:f9:d2:89:3c:
ac:81:5a:6a:00:9a:d2:33:4e:93:6d:2b:64:f1:b0:24:9e:ab:
ba:a6:44:87:27:6b:dd:44:83:e7:40:ac:9a:5f:a0:61:fc:35:
cc:da:d0:f0:58:71:a4:d9:49:25:ab:86:f9:41:7f:cf:9d:17:
23:56:a3:3a:32:ff:81:d1:17:bd:50:12:fc:23:69:c0:13:0a:
6d:9d:da:37:02:f8:16:d1:b1:ca:fb:65:a9:ef:eb:0a:50:9e:
cb:74:e1:f7:37:09:5c:8a:a2:ee:ec:43:cd:ad:4a:8d:1f:c8:
52:81:b3:0c:77:11:dd:da:f3:96:56:fc:25:ff:85:0e:ea:9e:
4b:24:83:8e:a5:f9:69:4e:60:9f:7b:1c:85:ec:0c:84:d2:73:
9b:08:2a:78:0a:1c:d9:47:65:37:ee:8f:d8:c8:cf:70:15:b9:
13:31:ad:fd:93:ca:b9:7b:e7:fd:f7:d8:c1:68:33:69:c8:5f:
6d:bd:f3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:50:03 2025 by rpki-client