Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ead0195-4a5b-473e-926e-3f1fd49916bc.roa
File: 5ead0195-4a5b-473e-926e-3f1fd49916bc.roa (raw, json)
Hash identifier: n2oj5bqctyBRp+hq/IGx5PT2bP4VS2yq8Wi9gtVjbHc=
Subject key identifier: CC:55:1B:0B:88:DB:C1:A1:E3:8C:80:A8:FB:38:50:DA:6F:2A:FE:E4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 44BF404F9A6D58FD8ED9B0B50C8C92D4B4A66BCB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ead0195-4a5b-473e-926e-3f1fd49916bc.roa
Signing time: Tue 24 Dec 2024 00:00:00 +0000
ROA not before: Tue 24 Dec 2024 00:00:00 +0000
ROA not after: Tue 28 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.25.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:bf:40:4f:9a:6d:58:fd:8e:d9:b0:b5:0c:8c:92:d4:b4:a6:6b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 24 00:00:00 2024 GMT
Not After : Jan 28 23:59:59 2025 GMT
Subject: serialNumber=93fb4b0012fb6dc54044d4c4eb7a25ba779e2fdc4bf9e0f83322e1260acdfb3c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9a:5f:74:bd:78:30:68:86:54:05:66:6d:70:
75:3e:a4:66:4b:50:01:ac:ba:a3:c0:75:5a:65:3b:
40:68:74:c4:0d:6f:17:85:b9:7d:be:8f:c9:0e:17:
af:e2:d1:fa:1d:51:14:f4:05:74:78:a1:f9:28:65:
2e:6a:e4:99:44:40:c2:90:3c:ee:0a:01:72:6b:77:
b6:e6:30:72:1a:8b:9e:18:75:cc:c5:c1:9a:83:41:
61:64:c4:72:2f:2f:27:4d:b6:e1:8e:b2:6f:14:d8:
96:fc:3e:17:1d:ed:27:bd:a8:65:7c:e6:bf:30:92:
df:b3:80:9b:e4:ba:e1:8b:17:24:75:2c:f0:88:de:
69:d3:af:a1:cb:a4:c4:0f:54:27:67:ad:67:fd:8c:
c0:4e:36:e6:d7:60:17:0e:1b:cd:cb:00:81:de:a8:
ee:ea:3c:36:65:82:08:63:b4:fa:5b:40:85:2e:d7:
fd:7c:65:da:70:21:42:d2:6b:56:b8:57:7c:4b:b5:
46:b0:b4:6e:b6:a5:91:fe:06:71:87:22:28:81:d0:
ee:ca:f1:9e:ae:ef:a6:ad:c3:d0:9f:12:6a:e3:2d:
33:21:3f:96:9f:e7:cf:10:3e:cd:15:df:a5:6d:9f:
b5:80:af:d6:b1:06:8c:b7:bc:58:12:35:b5:bf:90:
4c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:55:1B:0B:88:DB:C1:A1:E3:8C:80:A8:FB:38:50:DA:6F:2A:FE:E4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ead0195-4a5b-473e-926e-3f1fd49916bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.25.75.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:20:46:03:a7:53:5d:63:16:ae:62:7e:e4:3e:96:c0:f1:15:
fc:0b:7c:e8:2d:42:18:1c:6c:83:1e:e4:c8:d2:bc:80:3b:09:
e6:db:c6:51:21:06:68:a3:18:08:38:39:27:90:fa:10:44:72:
31:23:1d:ca:86:77:f0:0a:5b:5a:60:16:ac:bb:a2:18:64:5d:
77:cc:a8:cf:cb:7b:4b:a1:41:0e:84:06:13:36:57:3a:2d:be:
66:e5:c0:d5:ec:aa:b3:25:c2:e2:71:ae:4b:e3:0c:f2:4d:f9:
69:ec:a0:16:b7:0d:0a:77:4d:ad:2f:67:5d:a5:89:d6:f6:39:
ae:70:2c:c0:dc:f3:a8:5e:ca:37:0f:d6:77:31:70:81:d1:fd:
97:cf:46:1d:23:f3:23:50:eb:84:bc:71:a8:23:66:ed:6e:d3:
6e:8c:7e:41:81:a4:72:78:fd:e4:04:c0:3e:0e:7e:99:02:8c:
b7:d5:2a:e0:20:90:2e:12:17:bc:72:e5:ce:07:b0:7e:ad:d7:
36:7c:3f:48:03:4b:79:87:b4:b5:0b:53:b8:04:06:9d:d2:05:
dd:5c:7a:a1:e5:5d:72:8b:a2:cd:ef:32:a5:b4:93:84:1a:72:
32:6a:a0:05:4c:a9:55:3b:ca:b2:8d:e1:0a:62:4f:96:c4:6d:
c9:a0:21:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:52:09 2025 by rpki-client