Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45756f24-c76b-4427-933c-4b701f142bb7.roa
File: 45756f24-c76b-4427-933c-4b701f142bb7.roa (raw, json)
Hash identifier: CLV9sqUsOKinv7+upqAlA0Y9j2TjG7TE3jBP0dUERTU=
Subject key identifier: A5:D7:E2:16:FA:C4:F0:DB:AC:48:A9:FC:1A:E0:C9:33:C9:6B:04:33
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2742B0CF179556D622454723D2C83F869FD9BCDA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45756f24-c76b-4427-933c-4b701f142bb7.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 107.179.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:42:b0:cf:17:95:56:d6:22:45:47:23:d2:c8:3f:86:9f:d9:bc:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: serialNumber=3f70135d38a08e57dc62e3f1fc65bf8cb3c80650959c93c2225006f1870358db, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6e:69:64:10:5b:3d:13:d7:32:7f:63:5a:63:
f6:35:e6:22:65:93:ef:09:fb:0b:19:de:20:7c:e4:
79:b1:17:20:f1:88:4b:1f:39:d6:38:e9:83:eb:a3:
53:ba:a0:a0:c7:ea:70:77:77:4e:ff:be:8d:92:83:
c9:8d:90:14:15:5e:2e:6c:35:75:e6:ab:7f:77:f4:
b3:31:9f:53:df:bc:18:11:2e:e5:c6:22:2c:4a:d7:
4e:2c:d8:26:4e:f9:3b:a5:47:ef:e9:7a:23:8d:e3:
84:89:67:e0:78:af:9f:20:ef:e5:74:5f:a3:87:c6:
fa:f0:98:28:3e:f6:62:9a:e0:ac:73:6d:7d:0b:7d:
01:18:7b:f7:48:2a:39:79:78:ad:e1:53:1a:11:34:
7f:3c:d0:58:fb:e4:83:a4:17:ee:00:e4:d9:a4:3f:
1a:fe:c8:a9:f4:45:1a:37:9b:58:0b:59:6f:f9:ca:
77:d9:19:60:4c:b2:ac:49:8f:d8:0f:ff:7b:0f:87:
90:9e:4c:6c:3d:cc:7a:49:a0:bd:ce:c8:29:96:f0:
da:a6:51:87:b5:b8:25:bf:ff:8f:ad:3f:ed:77:a4:
35:96:55:a5:98:71:35:cd:d0:82:a2:47:84:63:6f:
f0:ab:ca:b8:a4:1f:12:2c:f3:56:42:d6:a2:2b:3c:
3e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D7:E2:16:FA:C4:F0:DB:AC:48:A9:FC:1A:E0:C9:33:C9:6B:04:33
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45756f24-c76b-4427-933c-4b701f142bb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.179.0.0/17
Signature Algorithm: sha256WithRSAEncryption
32:d8:56:c2:ca:8f:97:b3:80:f4:a6:76:1a:b3:c0:44:29:0b:
0f:61:bf:eb:75:8a:a9:e1:57:95:65:66:b6:c3:b7:6f:e1:6f:
ad:5d:8b:13:2e:fa:d9:98:72:b7:fc:e2:a4:f3:ae:f9:03:bb:
c5:f9:da:1c:cc:65:ba:f7:71:40:75:c4:cb:82:9f:f9:bb:b3:
99:35:08:b4:94:9c:c8:00:e2:66:18:af:cc:a3:2a:4a:dd:d6:
03:77:10:3a:4a:3c:a9:76:59:a8:26:d7:7e:df:9c:73:bc:69:
57:df:8f:d7:07:6d:97:4e:c0:2f:d0:10:ea:44:6d:59:67:26:
53:87:9b:4f:bc:f3:d9:27:07:17:6f:3e:ea:45:ae:08:04:8e:
e5:2a:c4:ec:cc:b1:4c:fa:f7:40:b0:63:fa:82:95:66:a8:96:
9c:a4:dd:fb:be:eb:59:78:95:26:ec:17:6f:ff:05:f1:be:80:
66:7f:e1:b7:8a:71:29:83:22:4b:2d:4a:05:5f:74:f0:09:27:
51:22:bb:46:d6:c6:31:9c:74:55:a3:c8:b5:87:ea:3a:af:d3:
46:5a:3f:d4:72:ba:f4:f2:19:1b:f0:99:0d:c9:92:d7:ff:92:
46:54:0b:b1:c0:67:e3:7c:ef:ad:f0:88:4d:5e:23:59:48:92:
c6:50:83:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:09:07 2025 by rpki-client