Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5562005c-cb25-40fb-8eec-b0c09890ef86.roa
File: 5562005c-cb25-40fb-8eec-b0c09890ef86.roa (raw, json)
Hash identifier: bplridhY2lY/ch39YRCgWXswkARZEFa4Xuq/il53BVg=
Subject key identifier: 4A:61:05:81:F9:49:DA:57:B0:A6:D4:40:41:5E:87:14:F5:49:E8:01
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 199D4FBD5D202ECC69A5A5850AA410BE87331D7F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5562005c-cb25-40fb-8eec-b0c09890ef86.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 76.162.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:9d:4f:bd:5d:20:2e:cc:69:a5:a5:85:0a:a4:10:be:87:33:1d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=98164926d33f068fd55fc7c58e1f144dbfb2889d2111fb5e40a11d4aad5e9d2f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a0:c6:c8:37:db:f2:ca:f5:b0:06:98:ca:1b:
63:58:a0:4a:03:8e:04:ac:84:0d:dd:cd:cd:7f:b0:
52:ea:72:42:72:4c:0e:95:d4:ea:eb:bf:f1:9d:90:
c1:57:1a:f0:2e:68:f3:c7:a0:7b:8a:2e:8b:5b:00:
4f:34:f5:86:75:b9:71:cd:8e:52:e0:9f:96:02:61:
38:b8:51:f8:9e:b0:bc:ed:1c:be:2e:3b:8d:11:a0:
01:a2:26:14:d0:36:80:70:dd:cf:44:d2:87:d6:fa:
8c:db:b6:ac:4d:af:9f:bf:a1:c4:ff:74:f5:31:a8:
16:2f:f8:71:29:5a:89:9b:69:9b:70:82:64:1a:d7:
e4:29:c2:c3:d9:d5:d9:fd:7e:91:d3:e5:c3:d4:d4:
fc:49:4a:fa:3e:66:a3:35:07:5a:4a:63:9e:00:a5:
ae:35:1e:ee:1c:f0:3d:30:62:4a:15:30:6a:44:fe:
a0:8c:11:e5:ec:f2:5d:0f:e5:8a:c4:2f:71:88:9e:
e9:45:0e:83:f7:75:9f:a7:e0:ec:c7:a0:ce:20:22:
ea:d2:24:28:a4:26:f1:f6:21:7b:51:80:95:c9:88:
00:47:d2:f5:32:a6:81:79:98:a7:8b:06:30:85:97:
43:ac:b2:95:72:76:3d:8b:a1:f5:99:61:21:70:5c:
f0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:61:05:81:F9:49:DA:57:B0:A6:D4:40:41:5E:87:14:F5:49:E8:01
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5562005c-cb25-40fb-8eec-b0c09890ef86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.162.0.0/15
Signature Algorithm: sha256WithRSAEncryption
5f:5c:bc:42:3b:cc:98:d9:a2:4a:1f:10:ea:7a:ae:78:15:6d:
91:73:b6:27:19:e6:40:1c:de:73:a5:a9:76:09:c9:71:60:ef:
84:5c:99:4b:b5:34:9b:21:c1:61:30:0b:05:54:2d:98:24:64:
4b:f7:7a:22:ad:0d:aa:d4:81:80:69:76:9c:18:ad:bb:46:f1:
57:7d:86:53:9e:97:98:c9:8f:e3:ef:f4:ab:c9:13:58:5d:0a:
ec:1e:39:08:a7:16:27:99:25:4c:55:e8:9e:49:1a:a2:b0:63:
23:2e:ba:ab:a2:fa:84:4a:64:70:43:c7:8c:a1:d0:1b:70:92:
7a:96:2d:6b:59:83:87:68:58:0d:80:5c:8d:c3:48:7a:9b:8a:
50:f6:0d:5b:dd:e4:05:59:6f:95:eb:9f:3d:3a:02:ae:e6:92:
d8:3d:e4:79:30:f7:df:8a:1c:3d:1b:e1:da:bc:25:1b:5d:e0:
51:3b:9d:d5:25:7d:83:95:44:51:8c:a1:36:95:c7:88:f9:8d:
be:5c:f6:e1:df:33:15:e9:53:3a:10:25:73:19:b6:63:01:3b:
2e:a3:e6:f6:8a:31:f6:91:f5:c8:b0:fa:a9:68:52:a1:38:11:
9d:cc:b8:89:59:a0:df:af:02:bc:d1:3a:5a:41:17:39:db:57:
f8:47:c5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:09:36 2025 by rpki-client