Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57a69d18-4db8-4af1-859c-a4309151aedb.roa
File: 57a69d18-4db8-4af1-859c-a4309151aedb.roa (raw, json)
Hash identifier: b8lN9OHyVfDkQk9/iC3G1OeuFlVFocSu/E5cyg8IK5s=
Subject key identifier: CD:8A:A7:6A:02:72:39:72:9F:0A:54:5E:B9:FA:BA:81:9A:B6:4B:83
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 642E86FFC3424CFF26315BEFCF406AD302357AC5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57a69d18-4db8-4af1-859c-a4309151aedb.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 150.102.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:2e:86:ff:c3:42:4c:ff:26:31:5b:ef:cf:40:6a:d3:02:35:7a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: serialNumber=fbdfd28fb38ff45b34be8ac957ad23b0f895a65ca870de552e7fffc5e095fd32, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2e:9a:2a:04:0a:01:23:5e:72:2c:ea:d5:af:
20:72:5c:0f:d3:a8:5f:6a:bb:28:7e:32:3e:4c:08:
80:ff:72:52:61:f4:cf:5d:68:28:e1:e8:9d:f9:0e:
1f:f9:bc:6f:79:99:e6:a4:13:ce:dc:f1:4f:09:27:
ac:df:2f:7e:dc:d5:29:d1:fc:70:99:be:32:37:2b:
5d:8c:f6:7d:a8:e8:a4:31:ee:8a:2d:84:1b:85:78:
ae:22:f7:3a:d5:9b:f8:09:41:a2:29:2b:ee:d8:7d:
93:f0:14:2c:83:06:71:3c:8c:0c:e5:05:cd:c2:58:
8b:a8:01:aa:96:3d:66:0f:37:44:37:20:53:60:62:
b9:a2:e1:cd:fe:45:a0:7d:a0:28:59:76:8c:ca:f9:
92:eb:40:7e:ce:6c:6b:1d:70:54:f2:fa:18:62:27:
a5:8d:86:2c:8a:0c:e8:90:97:dd:22:d1:37:e6:a0:
70:60:f7:b4:2a:1c:a5:94:4c:65:9b:9a:bd:ac:bf:
0c:a5:a8:bf:23:3d:1f:e1:fe:20:02:0a:ac:67:9a:
f5:a8:cc:48:c7:9b:78:43:27:3f:f6:2a:bb:0f:ff:
ef:59:2f:26:52:98:43:70:8e:fd:c6:84:04:29:c6:
74:5e:91:46:6e:32:a9:db:8a:9a:4a:f4:5c:1f:d9:
cf:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8A:A7:6A:02:72:39:72:9F:0A:54:5E:B9:FA:BA:81:9A:B6:4B:83
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57a69d18-4db8-4af1-859c-a4309151aedb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.102.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3d:c3:bc:ae:b4:43:25:fa:ee:a1:41:88:b5:c2:b0:f9:e6:50:
15:ab:96:38:89:06:47:21:11:ea:61:14:16:7c:4d:93:62:e7:
ff:90:9f:af:22:bc:42:e8:85:bc:8e:04:8b:e7:58:5c:a5:bd:
9a:88:b0:fd:92:6a:82:e7:85:66:bb:37:d6:aa:e4:3a:2e:f2:
08:52:cc:1a:d4:30:11:e4:2b:bf:f5:8e:97:3a:57:81:85:fc:
57:0f:58:de:60:23:11:c7:92:36:21:14:fd:11:4c:0c:aa:14:
32:5d:ad:7a:01:3a:f5:d7:3a:d5:03:84:44:35:b4:4f:b9:8d:
8b:ca:f3:13:7c:f5:1b:8c:b9:b4:b0:7b:45:54:3c:32:e2:a6:
34:7d:f9:34:ed:bf:e8:4d:da:60:f5:25:2e:f4:b6:85:93:6c:
27:5e:10:01:aa:b5:b2:1b:3e:19:ac:75:74:68:41:89:07:da:
f7:40:1b:25:1b:4e:d3:3a:e9:f2:7e:e3:e5:8c:0c:b4:58:4d:
40:5a:38:41:5a:8b:66:63:d1:45:00:65:8e:4e:17:84:a7:a5:
28:3a:ba:d8:6b:25:40:e0:7b:89:a1:a4:48:f5:63:bc:a4:d2:
6f:9c:fe:9b:b3:57:f3:13:06:26:55:f1:97:9e:e7:0e:e0:2c:
45:5c:22:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:03:17 2025 by rpki-client