Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/581079aa-e45c-47a4-8220-b7349db46f20.roa
File: 581079aa-e45c-47a4-8220-b7349db46f20.roa (raw, json)
Hash identifier: lGxNUKSmXcJUXeW02PDayxF7Qq5vM+7/3KE/+pYUnR0=
Subject key identifier: 77:DA:BA:AD:48:EF:A2:55:8B:BF:1C:5C:0C:6D:32:C9:F7:57:90:D1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4A82A387C6143FA5C9D5E58530D18D701DD90FFB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/581079aa-e45c-47a4-8220-b7349db46f20.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f11::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:82:a3:87:c6:14:3f:a5:c9:d5:e5:85:30:d1:8d:70:1d:d9:0f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: serialNumber=11698edea1c27b4d559f150593f7c5b5530fac32feb92cee7f45b308b8264e7d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0f:00:94:1c:28:f8:45:3d:01:11:8d:51:e5:
1e:99:5e:e9:10:18:e7:8b:a3:23:87:25:78:33:c9:
d6:2e:4c:10:e5:90:bb:1f:24:42:fb:99:bf:81:89:
b7:5c:da:e0:e0:74:86:06:e6:f6:20:08:7b:d1:1c:
64:9d:7c:ae:31:86:8b:3e:4c:ed:6f:b9:c1:09:c8:
d8:58:7b:5b:11:25:9e:5d:f5:6c:8f:03:f3:1d:fb:
31:50:74:75:4e:04:78:b7:dc:b2:9d:1d:ad:02:36:
c0:a7:32:84:12:a0:06:27:7f:4b:ff:6a:f9:7f:c3:
42:75:ed:6a:9c:31:d9:d3:c2:19:a7:a8:1c:ac:ac:
cf:ea:ee:39:37:97:d5:79:c4:d5:18:42:8a:09:e5:
b0:2f:7c:9a:00:2c:be:31:73:a7:62:0c:0b:c9:67:
ca:3b:d3:c4:24:77:53:c8:31:0b:77:f1:63:ab:15:
e4:8a:01:66:40:20:50:88:cd:64:d9:e0:d5:c6:a0:
04:ea:48:6a:c8:ed:f2:71:1f:17:94:21:ad:ed:64:
1c:42:0a:9f:ed:cc:31:c1:ad:7f:62:68:75:10:e1:
33:c7:d7:e5:60:61:2c:44:d8:08:71:f0:2e:3b:ef:
3c:41:4b:01:f7:ae:cf:de:bd:87:2f:b1:84:86:35:
3f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DA:BA:AD:48:EF:A2:55:8B:BF:1C:5C:0C:6D:32:C9:F7:57:90:D1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/581079aa-e45c-47a4-8220-b7349db46f20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f11::/36
Signature Algorithm: sha256WithRSAEncryption
06:92:2d:ac:5c:2d:b0:fe:14:54:7c:ca:d5:fc:7a:03:12:4e:
22:da:81:e5:85:f9:14:7f:6b:d5:72:e7:11:01:2c:d4:72:16:
49:a6:d3:13:88:57:8d:90:d3:c0:60:85:bd:1b:3e:18:25:a0:
db:40:56:d9:4b:63:59:73:f0:1a:a5:a7:8d:03:7b:46:05:4f:
99:f1:35:0e:47:f9:10:5d:96:18:9f:59:f7:61:4a:89:a3:90:
42:01:a4:36:fc:13:25:5f:2b:4a:37:eb:5b:a6:3b:99:f8:6c:
e2:67:f2:01:1e:17:c2:71:90:fe:f0:2a:54:a1:42:f9:22:ea:
a6:d3:c2:60:e1:d9:b6:15:72:99:c4:96:81:ec:2c:d9:58:87:
8e:f9:99:55:9a:0b:d5:27:e5:40:2c:92:3e:b0:63:bb:4e:15:
3c:33:16:62:9e:d1:b6:5a:71:ba:08:b1:b8:22:92:f7:f1:b7:
92:f6:48:0b:17:98:9f:6f:e4:4e:4e:07:9a:c2:a4:45:45:af:
54:9c:6b:ce:43:66:2f:a4:c0:04:08:6d:3f:31:4f:9c:05:06:
ee:a7:f6:0c:69:50:43:ff:2b:f5:f4:31:93:5a:89:c5:21:55:
f7:91:a5:04:75:bf:8e:4c:d9:db:b7:e2:58:e9:28:26:41:95:
18:af:47:b5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:31:17 2025 by rpki-client