Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f910349-9601-4810-bb65-2e261a7f1fb8.roa
File: 4f910349-9601-4810-bb65-2e261a7f1fb8.roa (raw, json)
Hash identifier: zMarsD0T4zo2tOLbF6G+NR5LMPduDTpf4LR38A2ojpE=
Subject key identifier: EC:A8:9A:E1:B5:4F:69:48:C0:AD:47:83:D4:7A:69:22:3D:D5:95:F7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 61A94D6BFB06D097D23CEE070B7A5459B705A343
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f910349-9601-4810-bb65-2e261a7f1fb8.roa
Signing time: Tue 24 Dec 2024 00:00:00 +0000
ROA not before: Tue 24 Dec 2024 00:00:00 +0000
ROA not after: Tue 28 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 16.131.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:a9:4d:6b:fb:06:d0:97:d2:3c:ee:07:0b:7a:54:59:b7:05:a3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 24 00:00:00 2024 GMT
Not After : Jan 28 23:59:59 2025 GMT
Subject: serialNumber=090fdda75abf33a00d53b6e22f926c4755487566d876ce100bc00bf627c7592f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:65:f1:d8:c3:59:bd:7b:4d:81:1b:40:6d:9a:
8b:1f:ab:02:d1:b7:61:b8:83:b5:f3:d8:cb:92:7d:
42:bd:91:1a:b4:c3:36:f3:62:43:a2:44:7d:2c:f6:
48:4b:b8:b0:ef:e7:70:2e:69:e3:b6:1b:93:80:9a:
71:a3:48:03:07:fd:f3:78:a1:bc:63:14:5a:de:8e:
a0:cb:92:9f:ec:e5:47:c5:c1:f5:76:7f:bb:3b:cd:
08:28:fd:69:4c:d8:5d:a7:12:bd:83:2d:18:10:0b:
ee:c8:ff:13:d4:a7:99:37:21:da:c1:3c:90:66:a9:
8e:3b:21:ac:e6:8a:49:ef:6d:df:f1:1b:47:1e:32:
5f:e0:ab:65:47:ae:db:7b:58:a7:4e:64:89:d2:e9:
d3:53:ba:54:75:34:5d:ee:6a:9b:69:c1:ce:7c:48:
52:b2:43:3d:3b:26:ed:94:b2:5e:ad:49:87:06:b5:
ea:21:5c:92:e9:c9:64:3a:3f:b9:a8:c1:f0:75:72:
a4:a6:bf:52:c3:1b:1f:b3:a1:f3:c5:20:c3:44:cb:
7e:13:b0:54:ae:0f:a2:79:c0:16:ba:80:69:9c:76:
2d:f8:8c:96:db:5a:e4:c1:d7:af:31:e6:0b:eb:48:
6a:64:c5:2b:3f:fa:21:cb:88:dc:ae:bd:b8:9c:75:
a9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A8:9A:E1:B5:4F:69:48:C0:AD:47:83:D4:7A:69:22:3D:D5:95:F7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f910349-9601-4810-bb65-2e261a7f1fb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.131.0.0/16
Signature Algorithm: sha256WithRSAEncryption
37:a5:c5:c6:34:02:f1:27:31:bc:fb:a0:d4:69:a2:84:74:0a:
ef:7d:cc:3e:6a:dd:96:93:6f:d0:a2:c1:9b:32:21:48:9d:28:
01:fb:1d:61:fe:fb:76:5f:d0:22:fb:ab:72:c6:4b:1e:43:9c:
69:55:9c:e8:a7:8a:72:9b:1b:33:1a:5f:5b:52:ab:0a:7d:a9:
dd:dd:83:ef:bb:c3:33:15:2c:9f:9e:35:70:e4:cd:a1:c4:84:
6e:50:59:6e:41:67:36:69:a5:40:05:3c:f0:cb:39:1d:75:77:
0b:18:74:3d:d6:dd:16:0f:57:96:79:5c:97:92:c6:5b:1a:4a:
46:22:c4:ce:67:79:36:14:cc:85:bc:a9:de:71:44:4f:69:8b:
1f:05:69:af:82:c3:a2:b4:de:91:c1:ce:6c:2f:28:09:2e:58:
67:67:d2:61:c2:3f:51:a6:f1:b2:2e:bf:d5:66:9f:d6:ba:85:
d8:68:da:ef:b5:2a:7f:89:53:10:8e:55:d4:e5:34:06:8a:e7:
c2:ae:30:b1:55:5c:69:68:c4:1b:ea:b7:6d:f6:93:ef:d8:f2:
11:b9:b8:5a:be:fc:ca:f9:46:8f:b8:e2:cb:25:cb:6a:8e:3b:
ca:11:12:29:8f:5b:d8:f9:ad:fa:3d:aa:21:4c:a3:74:be:d6:
eb:e6:b3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:47:51 2025 by rpki-client