Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5aaba3a9-d88c-458f-b719-1987436188ff.roa
File: 5aaba3a9-d88c-458f-b719-1987436188ff.roa (raw, json)
Hash identifier: buZgWdEIBymq32zfqEtGYUjRWe9Vq7c6uqHrS+Fam9g=
Subject key identifier: 4C:F9:4B:F1:74:0A:C8:43:4A:35:54:0D:58:55:36:34:16:E2:5F:EF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 15229FC1BF147CC3E08D149842B456FABFDC5554
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5aaba3a9-d88c-458f-b719-1987436188ff.roa
Signing time: Mon 02 Dec 2024 00:00:00 +0000
ROA not before: Mon 02 Dec 2024 00:00:00 +0000
ROA not after: Mon 06 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 216.182.224.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:22:9f:c1:bf:14:7c:c3:e0:8d:14:98:42:b4:56:fa:bf:dc:55:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 2 00:00:00 2024 GMT
Not After : Jan 6 23:59:59 2025 GMT
Subject: serialNumber=7739d022aee4889da78025ccf0c7754210c10b8452dd30be0ec568cb0e19723c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a8:e1:59:7c:42:eb:a0:97:42:24:35:8f:01:
57:7e:d8:fb:37:2f:bc:6c:10:f3:9b:e3:06:b9:9b:
25:d7:0e:fd:61:cf:a5:09:78:32:7c:ce:ac:29:74:
c5:32:08:61:45:21:71:7d:e5:5c:42:4d:e0:2c:ea:
21:3e:9a:8b:26:78:54:f6:d7:6d:a7:1f:77:50:75:
3c:36:2b:0f:08:7c:f7:e4:21:a2:ac:36:4c:c0:57:
32:3e:9b:ec:19:68:49:5c:4a:1d:06:7a:b3:8c:95:
60:b3:7f:25:f8:a4:2f:b9:f0:78:7d:2d:a0:ed:e6:
fe:17:30:75:6d:14:6e:9c:51:29:0f:a2:a7:0a:c3:
c1:bf:ff:53:3a:52:ac:bb:85:e7:e1:41:a7:c6:32:
1a:37:30:d6:21:b5:a4:4c:73:6f:dc:ee:84:c4:26:
02:a4:65:49:a6:5f:2d:e4:19:1e:5c:89:2a:90:74:
c3:0f:53:7a:9f:ce:01:0b:af:31:f5:cc:cc:e1:e5:
f1:e1:94:7a:0e:bc:21:9a:5f:60:17:3b:92:62:af:
2c:ac:f2:69:b5:ce:32:f4:a3:03:04:8c:79:f8:31:
63:be:c3:8b:a2:a1:77:0b:99:ad:0d:82:43:24:24:
03:ab:14:36:48:63:35:70:6d:93:5f:e7:46:e0:b7:
d0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F9:4B:F1:74:0A:C8:43:4A:35:54:0D:58:55:36:34:16:E2:5F:EF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5aaba3a9-d88c-458f-b719-1987436188ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.182.224.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:e7:4e:3a:bc:16:aa:db:e5:f4:63:70:18:ed:ed:98:a9:01:
5e:2e:7e:33:95:93:8f:3f:98:bc:a1:73:01:cc:7d:3a:ee:df:
61:cc:e1:c7:a6:ed:9b:22:06:80:7b:92:27:63:99:ea:9c:00:
85:69:4e:98:73:20:91:5f:6b:9f:74:5f:4a:3d:7b:bd:80:85:
78:22:15:03:82:13:2d:86:77:0d:f1:fc:b9:a5:34:ad:4b:a8:
6b:8d:c5:c6:4f:2a:67:86:1b:27:8b:17:42:27:fd:8e:a3:ce:
c7:2b:24:ee:66:e1:85:b7:1c:73:40:10:f3:2e:44:1d:32:fb:
90:9f:04:3e:81:54:51:8e:f2:93:3b:e5:1f:11:ce:a1:b2:ee:
04:3c:95:a2:1b:cd:65:1b:17:ec:1f:83:f5:ad:85:fa:82:f9:
b9:c6:00:0c:bf:32:90:72:f8:60:a8:e9:fb:88:94:5b:ce:57:
ec:cd:8b:bc:a3:27:2a:98:0b:b9:55:38:f2:a9:83:c9:96:1d:
a4:1f:08:66:b6:46:fe:f0:bf:0d:8d:7b:65:44:bb:54:a5:13:
2a:84:21:fe:0e:79:69:30:3b:39:88:20:2d:0b:4b:3a:ef:20:
3f:ef:05:a8:60:2d:e7:04:aa:91:e6:c1:3c:63:d4:95:fe:dc:
e5:03:a2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:14:47 2025 by rpki-client