Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d4bf98b-6e08-4b78-84a1-1a577f90f420.roa
File: 5d4bf98b-6e08-4b78-84a1-1a577f90f420.roa (raw, json)
Hash identifier: ZrxcsMA5AN8JBJJCekYI0QOYykkwSDJBX3Meyj1Dovo=
Subject key identifier: B9:D2:F2:15:CC:82:C1:39:5E:79:C2:A1:64:A3:04:B8:77:A7:11:3B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2E65018897F359022C68834DDA0F6E8EC09EFEB7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d4bf98b-6e08-4b78-84a1-1a577f90f420.roa
Signing time: Tue 03 Dec 2024 00:00:00 +0000
ROA not before: Tue 03 Dec 2024 00:00:00 +0000
ROA not after: Tue 07 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 208.86.90.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:65:01:88:97:f3:59:02:2c:68:83:4d:da:0f:6e:8e:c0:9e:fe:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 3 00:00:00 2024 GMT
Not After : Jan 7 23:59:59 2025 GMT
Subject: serialNumber=8800e8f2ea5924be3c0f924d1cb702fed0d6fd52c3690d5e5b0160689eefe34d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:92:eb:2d:26:6d:ce:68:1c:62:06:89:65:d4:
69:2c:51:64:04:5b:11:76:78:64:8b:e0:19:43:d7:
b4:2f:8b:fa:2b:58:39:ae:37:6e:a6:c2:b2:88:c5:
ac:a4:b3:9a:49:32:d8:4a:f9:a0:72:2d:cc:32:cd:
7f:05:8f:ec:ba:95:22:89:bf:2d:5f:ec:86:9a:4d:
d1:61:13:56:41:00:8e:77:e5:73:c8:68:f9:3c:87:
b6:2b:0b:14:a9:83:bd:57:af:f5:78:6c:67:49:68:
ff:5a:c4:6a:84:f4:ab:ff:53:cb:65:49:2b:af:29:
c2:bf:84:2f:b3:58:7e:06:e2:15:72:d8:fb:7d:24:
51:7b:1b:4d:c5:01:de:f4:e7:8e:66:fb:d2:2c:32:
87:d5:df:0a:04:a8:c8:e4:cf:8d:70:cc:38:34:ed:
0b:db:ec:33:91:fd:e5:38:5d:a8:48:f4:56:10:07:
23:dc:b9:90:4b:6c:bb:e2:5b:b6:09:28:29:da:d0:
d2:46:ae:7c:09:4a:82:e9:36:b6:fd:0e:f2:84:9d:
ee:93:76:f0:7c:ee:cb:66:f6:a0:e1:4a:a5:a9:00:
ca:66:a8:6b:3c:b2:c1:4f:6b:2a:56:9d:aa:0c:82:
ee:3d:cc:cd:e0:4f:61:13:5c:29:18:86:9a:eb:40:
7d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D2:F2:15:CC:82:C1:39:5E:79:C2:A1:64:A3:04:B8:77:A7:11:3B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d4bf98b-6e08-4b78-84a1-1a577f90f420.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.86.90.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:52:14:0a:4d:59:4a:db:72:1d:52:73:f7:b3:19:52:28:12:
90:19:cb:fa:cd:e2:2c:c4:d1:be:39:6c:2c:ce:53:6a:ba:12:
21:09:61:7b:55:26:c5:a0:40:fb:60:c9:82:f8:12:6d:0a:e0:
55:a2:a4:49:46:e7:11:54:a5:83:a7:da:d3:b1:cf:0f:bd:71:
38:00:21:e2:8d:ad:9c:1e:45:79:bd:c3:38:4e:56:ef:ed:4a:
9c:89:63:09:72:a5:ea:c9:d4:9e:3e:bb:4a:29:d5:3a:d6:b1:
91:b7:3f:51:7c:5d:76:41:23:3a:e8:64:63:a5:74:9a:da:cf:
34:92:94:19:91:a9:98:9b:f3:29:ef:c0:c9:1f:cc:58:4d:39:
15:8d:3d:8e:b1:eb:32:99:90:dc:9a:64:39:ef:9f:6e:77:41:
39:41:7d:96:1d:78:3a:52:b7:39:bd:2b:20:92:4c:a9:2d:61:
a2:03:ad:d5:5a:40:9a:67:80:9b:02:cd:e3:1b:95:ca:fe:62:
8c:41:9e:e5:d7:5f:cd:bf:b6:60:9b:b2:ab:9e:33:ee:d8:43:
ca:7c:e7:a4:33:d2:03:7a:28:e2:27:ea:a1:72:ae:cd:90:dd:
cc:44:09:b7:65:71:e8:b1:ed:80:85:9e:61:c8:6c:ae:50:36:
d7:ed:3f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:06:09 2025 by rpki-client