Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52caf1bc-ecc1-40b6-ae16-839bdb42b220.roa
File: 52caf1bc-ecc1-40b6-ae16-839bdb42b220.roa (raw, json)
Hash identifier: ekC2uy1sBEv8cqYMXCvgXJZefbKsa2YttSb5R6LzsvI=
Subject key identifier: 61:2A:17:6E:E6:0C:4E:0D:71:93:23:0E:85:61:E9:89:4C:20:BC:F8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 62D838A9BC08A5E58CA22FE9B0881C315BD1A2D5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52caf1bc-ecc1-40b6-ae16-839bdb42b220.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 198.143.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:d8:38:a9:bc:08:a5:e5:8c:a2:2f:e9:b0:88:1c:31:5b:d1:a2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: serialNumber=912279c45c9d0fe5233ac7d457084a8be03cdad6c3dd2040c9f5f3b5d0344ec4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:c1:5d:81:55:06:76:65:ff:9d:af:85:57:
27:77:fd:dd:cf:e5:9a:51:4a:c7:f4:11:14:ea:db:
c9:6f:80:7d:bc:e8:1f:ab:02:e8:4e:0d:26:69:37:
f5:b8:b4:66:ae:f0:7f:19:8e:bc:e3:50:05:58:1e:
bd:6d:0e:ed:15:db:25:0e:81:2b:82:fb:c3:c3:5b:
f6:17:aa:85:d0:18:af:83:ee:fd:8f:d9:73:54:44:
18:80:e7:c3:df:fd:9d:b2:17:cb:06:e7:37:f5:14:
43:a9:57:1b:6b:43:d7:75:17:1e:ae:17:5c:20:bb:
b1:41:3c:19:37:d5:f3:8f:16:b0:b8:53:67:c4:33:
96:ef:ea:b6:58:5d:3d:2a:41:c9:38:85:c3:ee:d6:
c2:a8:98:31:fe:e9:3d:77:94:c1:06:a0:6e:f8:66:
47:4b:82:68:4d:52:2c:4e:ee:53:ee:b5:9f:58:cc:
30:b7:d7:2e:44:5c:f9:94:d9:a4:a4:2a:9f:19:0a:
e3:f4:b0:02:98:79:64:c7:af:98:6c:fa:58:89:ed:
b4:73:86:ff:43:26:d3:c7:6f:a8:79:b6:1c:59:28:
88:4a:a6:ec:96:79:2a:6f:3a:8f:bb:cc:78:cd:fb:
f8:9c:5a:ad:f0:05:55:a9:c1:68:f9:fa:3c:2b:0a:
e0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2A:17:6E:E6:0C:4E:0D:71:93:23:0E:85:61:E9:89:4C:20:BC:F8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52caf1bc-ecc1-40b6-ae16-839bdb42b220.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.143.192.0/18
Signature Algorithm: sha256WithRSAEncryption
91:84:1a:da:f5:04:8c:29:2d:f7:03:a0:25:d2:a9:00:51:ff:
57:84:67:b5:bc:3e:83:a2:c7:59:a3:0e:3c:61:69:07:69:3d:
06:b6:7e:94:42:a3:ab:00:bd:7f:27:78:96:08:48:33:43:27:
c7:93:e2:dd:74:95:6f:b1:c7:6d:22:83:b4:a5:3b:a8:ca:bb:
ce:90:2b:de:c9:67:25:89:25:88:02:c3:44:4c:15:7e:a4:02:
f1:77:28:bf:0a:ea:74:81:5f:a1:36:ca:ed:6f:39:11:66:7e:
a2:90:77:07:89:e3:8b:2c:31:7d:91:c7:21:fa:52:d7:b4:a6:
3c:3e:cc:00:38:b3:a7:fa:cf:16:36:12:ad:fd:5c:a3:ed:23:
a4:46:cf:f2:b0:88:0a:9c:27:94:af:29:55:eb:eb:e0:ef:8d:
45:c7:ef:86:67:00:b9:bb:41:b3:5f:f6:b0:1d:13:06:28:4d:
c4:b5:fa:b4:fd:22:4e:38:a4:23:29:6c:fd:59:21:e5:ca:ef:
8d:31:d9:2f:c2:87:43:36:eb:c0:6b:e2:bc:dd:a5:bf:f1:6d:
47:39:25:bc:d6:2e:3c:88:21:03:84:1c:36:1c:f6:cb:9e:57:
f6:72:21:80:19:ea:b1:97:ac:fe:f7:9e:ae:0e:fc:29:1d:42:
ac:40:6c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:51:47 2025 by rpki-client