Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48b5c7a5-673b-4413-b61b-22af1286f5fa.roa
File: 48b5c7a5-673b-4413-b61b-22af1286f5fa.roa (raw, json)
Hash identifier: dmM5pCw+romekmfUQ41Eg06pqNwcHKwFxdKHKT+74cg=
Subject key identifier: C2:2E:B8:4B:49:D5:18:26:D9:FE:BF:87:05:5A:9D:8C:5E:BA:D3:B0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 33E91EB11EFB945D4CD209AF3E6C8D9A327FAEEB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48b5c7a5-673b-4413-b61b-22af1286f5fa.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 56.11.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:e9:1e:b1:1e:fb:94:5d:4c:d2:09:af:3e:6c:8d:9a:32:7f:ae:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: serialNumber=964065d7abc38b79fd45b368dce8446a346980fb2bd65cd6e90ad9b21365b11c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:93:da:11:45:a6:0b:59:17:f1:55:ed:66:17:
0f:40:4a:e4:01:3a:8e:49:c9:0e:d5:47:22:56:ee:
e7:6e:b5:ea:ac:06:e8:f5:b2:38:44:db:c7:80:62:
7b:f4:f0:35:53:c9:7b:04:d5:b0:4b:3d:2f:ae:f6:
26:56:67:eb:76:dc:99:c3:c4:aa:ba:66:ac:22:de:
70:c8:08:2f:7b:4a:57:f9:86:8e:c4:62:66:f4:84:
2e:28:3e:6e:be:7e:8e:a3:2c:51:0d:8d:6e:7c:87:
3f:f5:71:20:3b:53:63:56:9e:ae:f1:0c:67:9d:e8:
30:4c:30:4e:12:95:9b:db:cc:c4:5c:42:bb:51:bf:
f9:25:1d:24:cf:0f:42:d3:a5:af:b0:c1:ac:5b:3c:
23:fb:30:f2:4d:76:b0:5f:5b:75:48:4a:2c:b7:fe:
80:27:fa:e8:18:70:b5:68:b0:ac:c9:7c:7e:b7:37:
62:ad:0c:02:6f:d6:2d:b1:0c:85:21:2a:dc:11:01:
df:43:a7:97:bc:64:b7:c6:34:74:2f:05:b8:b1:09:
1e:9f:6a:59:e6:27:af:d9:e6:13:40:20:f8:f5:4a:
99:c9:6d:bf:55:ec:c9:4e:58:30:de:dd:22:1c:83:
71:85:e1:f4:39:3b:e7:8f:70:c9:76:44:62:49:cf:
e5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2E:B8:4B:49:D5:18:26:D9:FE:BF:87:05:5A:9D:8C:5E:BA:D3:B0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48b5c7a5-673b-4413-b61b-22af1286f5fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.11.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5d:19:71:d1:07:5e:26:31:f6:f8:2e:6b:66:c2:b3:6b:a0:2c:
75:48:bd:ad:eb:45:31:0a:3c:b8:17:1f:a8:9f:8e:a2:3a:5e:
84:8b:b9:68:24:fb:1f:9e:99:1b:07:21:a3:41:74:4b:39:67:
7c:a4:2b:33:39:00:b6:a0:e1:fa:9e:08:45:80:12:4d:d7:3a:
39:c5:77:11:7e:1a:22:88:80:e8:ba:37:25:17:eb:3c:68:60:
ee:77:33:bd:5e:47:54:75:75:b3:af:75:4d:49:52:df:f3:86:
db:38:3f:b1:85:62:3b:15:d9:5a:64:c9:35:dc:2b:68:5a:f2:
7b:be:d6:e0:11:5d:90:1a:a8:56:39:f5:be:95:01:1b:40:79:
e9:3f:d4:01:ae:09:b0:b2:2b:10:e0:36:3c:e2:4c:d8:f3:a8:
a4:18:f9:27:1a:c8:30:70:35:cd:03:62:f8:c4:f9:3d:0b:fb:
0b:a1:27:9c:5f:74:a5:52:8c:65:a3:47:e0:36:f5:13:84:ed:
1f:b3:ba:e4:9b:8d:26:75:12:5d:0c:35:07:2f:e7:de:7a:50:
f3:d0:21:55:32:72:2a:39:b8:58:71:59:78:a4:fa:70:fb:b1:
da:00:85:98:bc:fd:97:f3:35:83:56:8c:41:d2:9d:0e:b7:27:
e3:5e:98:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:52:18 2025 by rpki-client