Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c766b7f-e698-4e7f-8708-1c01042b5bcc.roa
File: 3c766b7f-e698-4e7f-8708-1c01042b5bcc.roa (raw, json)
Hash identifier: /2O2JtQ+3cvPwA3Z7WcNK40JffyIHLvqJYv7KG/knUc=
Subject key identifier: FE:BC:87:79:23:47:CB:D3:38:DE:E9:D7:5A:CF:AB:CA:DF:AD:1F:10
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2F0E2183BB39941B462D5284C17AA3C3F576E887
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c766b7f-e698-4e7f-8708-1c01042b5bcc.roa
Signing time: Mon 02 Dec 2024 00:00:00 +0000
ROA not before: Mon 02 Dec 2024 00:00:00 +0000
ROA not after: Mon 06 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 40.178.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:0e:21:83:bb:39:94:1b:46:2d:52:84:c1:7a:a3:c3:f5:76:e8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 2 00:00:00 2024 GMT
Not After : Jan 6 23:59:59 2025 GMT
Subject: serialNumber=d771b1c38610f125a85804a7f067b6e2cb6367649e917b560febcf5f696e7f68, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:11:f3:db:d5:5b:4a:ca:89:cb:25:40:13:
8c:33:d0:66:1d:87:ed:ca:35:4d:88:d3:ca:a9:8a:
a7:bc:5a:7f:e9:e9:c6:18:0b:77:f0:ca:78:21:45:
6f:b2:68:e7:7a:d7:e3:19:66:1c:4f:f6:57:43:4b:
44:85:49:a0:73:1b:3a:1e:07:4d:5a:62:a3:a9:51:
0e:61:fb:cd:4e:09:8f:d3:1a:2c:e1:be:48:32:c4:
a1:a4:20:ed:fc:9d:42:bc:9c:75:4b:e0:46:c4:bc:
3e:8a:c9:25:58:e6:3e:41:b1:dc:eb:f0:db:79:70:
be:ea:67:eb:c5:f0:21:16:7b:eb:18:8f:52:55:43:
0f:5f:33:a1:bb:2b:c3:0e:18:dc:db:2a:b8:28:b0:
88:5a:aa:eb:6a:36:bb:b3:54:d7:bf:d5:29:01:cd:
34:50:88:8a:f3:66:8b:56:c0:6b:3d:99:fe:1b:f1:
01:74:84:7e:d5:80:6b:7c:a0:0a:e3:01:bf:14:f4:
9d:30:90:44:14:8a:90:bd:de:52:e5:db:30:80:d2:
77:f8:3e:b8:e3:ea:54:64:b5:3a:ec:87:43:1c:41:
ac:c9:95:35:10:3a:ef:c3:97:c9:b9:c5:86:4c:62:
a9:51:ac:5a:87:60:45:6a:89:54:f5:48:54:6e:2e:
3b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BC:87:79:23:47:CB:D3:38:DE:E9:D7:5A:CF:AB:CA:DF:AD:1F:10
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c766b7f-e698-4e7f-8708-1c01042b5bcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.178.0.0/16
Signature Algorithm: sha256WithRSAEncryption
59:e1:68:0d:4b:d5:3c:c2:4e:d7:28:af:49:89:76:04:c8:95:
d5:9e:9c:59:85:99:0b:ea:e1:8c:5a:ec:ac:41:7a:8e:10:e5:
28:74:19:11:c5:bf:34:69:f4:9d:af:22:58:c5:c5:fa:f1:cc:
67:32:73:f1:ef:18:c0:61:91:56:7a:52:24:e2:85:92:b1:9e:
b7:e1:64:d9:46:4b:d1:c0:80:fe:db:fb:05:d1:df:a8:24:9d:
77:14:30:de:6a:7f:7c:af:fc:4c:54:65:d7:53:68:aa:4a:0d:
03:54:51:45:47:56:59:b1:f3:6d:d4:72:9e:c4:7e:7d:fb:64:
45:94:4e:d4:99:17:50:59:57:8f:08:e0:5e:36:0c:26:7c:64:
aa:37:3a:77:87:09:95:06:cf:6d:3e:aa:b5:e1:69:1d:73:e5:
46:c9:9a:5b:31:a5:15:12:a9:6c:7f:66:fc:37:10:23:20:16:
87:5c:d3:0a:c4:49:01:44:41:56:49:3d:70:26:a2:26:fa:76:
d5:ac:2a:fb:b9:38:42:a7:96:25:9d:1c:be:48:15:1c:c0:a4:
ee:22:f5:96:32:88:ae:b2:fd:67:24:90:02:71:8c:e2:b5:ed:
49:7a:b5:23:57:90:92:28:9f:2e:99:31:74:3d:c0:d4:11:86:
4f:a8:71:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:58:46 2025 by rpki-client