Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/486b9f9e-125a-4ebd-a9d9-48955891ec5f.roa
File: 486b9f9e-125a-4ebd-a9d9-48955891ec5f.roa (raw, json)
Hash identifier: 23GuZZeTzG0U6hNTt21NUrWzVN83NtSHhJjo16My5Cc=
Subject key identifier: 26:CD:62:84:F5:BA:97:FA:64:18:FC:D7:16:09:7D:3A:60:09:B5:B1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 55951C8809EF3E24E6F6951DF15565B4FDF7CAFF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/486b9f9e-125a-4ebd-a9d9-48955891ec5f.roa
Signing time: Wed 05 Mar 2025 00:20:11 +0000
ROA not before: Wed 05 Mar 2025 00:20:11 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 22394
IP address blocks: 139.56.8.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:95:1c:88:09:ef:3e:24:e6:f6:95:1d:f1:55:65:b4:fd:f7:ca:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 5 00:20:11 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: serialNumber=941e5507dbc7791cb2600e9f3c5f7eddc5f1d21286866cecf808b07a1638e9fb, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:63:cf:0a:d6:e4:a4:df:a2:0a:d8:dd:cc:66:
69:8c:92:09:25:52:67:b8:48:48:e9:68:61:7f:e6:
4b:75:25:1d:47:5d:8e:ce:72:d7:e5:31:9c:f9:1c:
f3:1d:c5:1c:14:79:50:e3:d2:bb:84:c0:74:37:5a:
2e:16:83:a7:d7:97:6e:40:41:0c:5d:11:48:b4:1b:
1c:ed:33:42:d0:8f:cf:85:30:99:37:aa:a1:96:ce:
f8:73:15:a3:e7:dd:b0:d5:66:d7:6e:14:1e:64:06:
86:39:7e:08:ea:ba:a7:99:d2:a2:89:6b:d4:d1:57:
a5:90:da:b3:35:dc:a6:5e:95:1c:94:db:ea:67:16:
59:dc:52:55:56:cd:c5:de:98:09:3d:9a:90:39:1c:
da:07:4f:c1:00:dc:85:63:f4:bf:f4:3e:c1:31:93:
86:0b:c7:45:e1:2f:86:88:86:3f:51:ef:69:24:b3:
2e:ab:78:3a:d8:3a:d1:80:d6:5b:9e:d8:46:d8:1c:
37:1a:05:32:53:56:63:96:65:b6:4d:77:2a:b8:95:
e3:19:da:58:d3:03:9c:fa:30:0e:2e:43:f6:b8:2e:
d9:25:41:21:60:ee:6e:96:c3:69:f3:26:39:da:3f:
32:3c:96:13:16:ab:0f:35:66:4d:fa:25:15:64:ea:
30:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CD:62:84:F5:BA:97:FA:64:18:FC:D7:16:09:7D:3A:60:09:B5:B1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/486b9f9e-125a-4ebd-a9d9-48955891ec5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.56.8.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:73:40:84:7b:ce:f8:27:4f:0a:ce:2d:8c:aa:50:82:1a:4f:
48:47:b6:72:a9:37:76:90:42:6d:df:48:94:0e:32:09:41:a7:
9d:78:90:e4:69:cd:6e:f1:18:ab:ad:38:84:c3:cf:eb:dc:8b:
ce:5e:ce:78:76:5f:40:d8:0f:7f:64:a4:94:fe:94:6c:b9:93:
b3:c1:a3:07:e7:1e:69:2c:91:2c:a2:b4:a8:56:a0:87:ca:c5:
cf:ba:b4:58:32:8f:3c:ae:82:8e:35:06:aa:40:29:dc:fa:3a:
ea:ae:3c:40:68:ba:55:71:ae:a2:be:84:6c:9c:d9:52:42:b7:
6b:0a:93:e8:e6:8c:70:fe:b2:1a:1f:17:4c:0e:e8:05:14:23:
ea:bf:30:4e:66:b9:7d:51:0a:5c:cf:d0:ae:b2:38:f3:47:03:
fd:63:02:48:b3:d7:dc:4e:00:2b:77:e9:af:81:59:72:76:f8:
e9:b7:97:08:73:ff:5c:a4:b1:a6:80:c8:e4:10:1c:14:5e:74:
12:e2:88:f4:58:c5:be:b8:27:58:ca:bb:79:da:0a:7d:5a:ba:
5d:db:d3:0d:5f:de:4f:7a:86:e0:05:9c:da:32:70:b5:35:21:
d2:94:c2:32:63:93:6d:0c:3e:5b:54:4c:c3:bf:f5:a0:27:da:
e7:81:12:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:40:08 2025 by rpki-client