Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39630e54-fa5c-4848-b11d-281d9e6e3f39.roa
File: 39630e54-fa5c-4848-b11d-281d9e6e3f39.roa (raw, json)
Hash identifier: YCY2OfWrDrqNhzhHulLH7zjixVccBY2xNcJdo17zccc=
Subject key identifier: 5D:3B:F9:3A:B9:94:C9:29:F1:D0:33:9F:72:5B:83:83:E2:EC:50:76
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 71D16741F4E2862F03EB9FAB6B07C9A4CB458E73
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39630e54-fa5c-4848-b11d-281d9e6e3f39.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 64.37.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:d1:67:41:f4:e2:86:2f:03:eb:9f:ab:6b:07:c9:a4:cb:45:8e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=7b9e22c4aef93caa2a99c1c0b970148afa0c1c0200f6caa562a8b7057915c55e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:84:73:7d:6d:d0:b3:61:75:0f:bd:c4:a8:ed:
2c:2f:cc:13:79:99:6b:0b:79:1d:89:a5:47:57:e0:
39:92:5c:aa:4b:95:c9:98:a1:b5:50:61:7e:a5:4b:
dc:26:9e:15:33:02:49:7a:78:cb:19:bb:6d:a4:78:
87:32:d5:32:95:18:09:72:32:56:a4:5d:1b:e4:d9:
cd:ef:24:13:35:ef:69:87:e8:ca:05:bd:78:e5:05:
74:e9:94:22:59:a3:77:cb:15:62:48:d2:17:ff:43:
85:33:91:f2:73:34:74:7f:e2:af:55:e1:40:b1:05:
42:2c:0e:38:99:63:0c:d2:78:40:d6:4a:ca:88:b2:
1a:9a:16:a6:3d:a1:92:e6:c1:3b:9c:3c:3b:4a:98:
85:ed:41:a9:c7:7a:05:9f:9b:e8:e8:c0:11:9e:3f:
40:26:57:da:e7:b3:ef:1e:ab:06:bf:88:e0:6b:06:
c8:38:72:26:31:1f:54:c1:5e:62:20:7e:60:4d:f6:
66:e2:ab:e7:82:5f:cb:0b:e7:ba:ff:f2:2e:90:11:
1e:4f:52:a9:47:7f:a0:14:0f:27:7c:e5:04:f5:78:
8f:4f:ee:a6:9d:d1:cb:c4:c8:ef:6c:66:8b:9d:23:
4e:2b:a5:46:bd:30:e4:1f:48:f1:1a:65:5e:11:a1:
96:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3B:F9:3A:B9:94:C9:29:F1:D0:33:9F:72:5B:83:83:E2:EC:50:76
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39630e54-fa5c-4848-b11d-281d9e6e3f39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.37.64.0/18
Signature Algorithm: sha256WithRSAEncryption
92:fe:74:a7:fd:d2:25:1e:85:1a:12:7b:db:20:d1:49:3f:e5:
9c:7f:3e:2f:ca:f1:f4:e6:ab:4c:ab:81:8f:34:fc:ea:a4:83:
55:7b:e5:e2:4e:16:75:a2:54:e3:5b:d9:e8:d6:b2:39:90:7f:
bb:b3:2a:96:ca:b4:9f:6a:9f:72:7e:8f:6c:d2:ea:62:16:0c:
34:22:33:6c:6c:d4:6f:32:30:1b:70:ed:4b:bf:2a:1d:76:bc:
b3:e2:6c:e8:17:60:d4:4a:76:07:32:81:30:b7:57:1c:62:41:
33:10:95:e4:e9:68:78:19:9b:76:02:b7:e0:6f:45:70:dd:17:
44:71:24:68:d7:55:f1:e7:fe:0c:97:01:ea:c1:46:06:66:94:
80:cc:5b:10:7d:e0:31:d9:5c:a8:21:e5:02:f8:44:7a:c6:cc:
1f:88:4c:31:c3:ca:b3:e5:d3:56:4f:17:a5:38:f4:fb:31:25:
97:ea:19:31:b2:c6:bb:e5:b1:0c:43:ec:79:27:b2:0f:51:59:
90:b0:4e:24:ac:ad:df:6f:d3:6d:46:02:c3:c6:a9:29:6a:4d:
cb:ae:1c:15:52:46:01:2f:ee:d9:54:65:4a:d1:12:2a:f5:a5:
52:b2:2b:e7:97:6b:a8:40:39:ec:24:33:f6:f6:de:8b:ed:9a:
a0:ec:bb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:30:47 2025 by rpki-client