Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/600936f3-5ed0-4b97-95ac-0c18cdaf5826.roa
File: 600936f3-5ed0-4b97-95ac-0c18cdaf5826.roa (raw, json)
Hash identifier: Qb0JUrFwmgIv9Ptp6E6jmlYdF27yw+lNTUQzS9ZrC+g=
Subject key identifier: 5C:14:46:DC:88:F7:2C:63:28:AC:49:86:C4:C7:8F:BE:71:38:DC:82
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 183C1B4E19BB5BDA7138215CCB8016287FC6E2EA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/600936f3-5ed0-4b97-95ac-0c18cdaf5826.roa
Signing time: Sat 30 Nov 2024 00:00:00 +0000
ROA not before: Sat 30 Nov 2024 00:00:00 +0000
ROA not after: Sat 04 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 107.20.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:3c:1b:4e:19:bb:5b:da:71:38:21:5c:cb:80:16:28:7f:c6:e2:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 30 00:00:00 2024 GMT
Not After : Jan 4 23:59:59 2025 GMT
Subject: serialNumber=0c00eab31a94d2add137c3e96fcdad3f179b120a188ec6f9735478f686d88371, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c8:32:49:ca:e8:1f:14:57:b2:51:15:05:b7:
f6:08:3c:38:9d:e2:47:68:d8:e7:99:a6:c9:a2:7d:
2d:88:26:a1:6f:c2:11:fd:71:4c:dc:75:7f:fb:f2:
fa:b6:40:f3:57:60:e4:8b:01:ba:86:dc:d8:0e:ae:
46:1a:f1:72:75:e3:9d:02:34:7b:2e:72:1f:82:5f:
c6:30:3c:01:e9:75:be:dd:f4:4c:8d:12:e0:91:f0:
28:1e:3e:bb:30:85:90:ca:02:08:da:cf:3a:26:7c:
97:2e:c1:51:bb:de:e4:a2:bd:85:ef:1b:19:a3:3c:
e4:b6:57:8e:61:c4:f7:14:cc:d2:5e:3f:f8:df:2a:
c9:ef:12:26:9f:45:b5:b6:f3:f8:b3:a1:3c:e5:47:
76:1c:2c:f4:40:2d:46:65:98:f2:91:2a:7a:84:f4:
ce:48:3f:29:cd:7e:0a:1c:34:b8:fd:82:49:83:26:
15:26:f2:a1:38:a3:96:1d:f3:da:1a:61:05:5b:e1:
28:e7:28:18:99:c5:cf:e9:97:64:c7:17:33:43:eb:
67:aa:d9:e5:87:3f:f9:c0:23:80:d1:3b:c9:32:84:
2b:fc:1e:00:ad:9a:4f:92:a5:3b:53:a8:37:d4:29:
1b:26:b9:cd:1d:43:4c:39:08:69:5f:46:21:46:02:
41:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:14:46:DC:88:F7:2C:63:28:AC:49:86:C4:C7:8F:BE:71:38:DC:82
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/600936f3-5ed0-4b97-95ac-0c18cdaf5826.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.20.0.0/14
Signature Algorithm: sha256WithRSAEncryption
c1:f8:86:1e:86:61:f2:b3:e6:04:c7:e9:48:e3:e4:44:66:d7:
69:ec:4a:67:8c:11:94:3c:c2:e7:91:f0:d4:68:0a:57:fc:c0:
ed:50:7e:94:20:13:4f:75:cd:b4:0e:97:ef:98:eb:c3:5d:46:
f6:43:6f:5d:79:ed:fc:0a:7c:32:88:26:5e:f7:31:24:87:af:
0a:33:26:9a:01:45:0a:dd:05:82:4b:ac:2d:63:30:80:98:a5:
32:fd:dd:8e:3c:be:2a:a8:4e:b9:76:21:77:55:88:67:39:bc:
72:bc:b7:cc:31:c3:5c:d1:76:62:5b:d6:07:6c:f4:41:81:8b:
24:38:ca:5e:ee:e1:de:c3:81:b4:05:3d:1a:f2:ce:03:d0:02:
76:30:26:43:b6:2e:3a:a3:a2:49:67:34:f2:0e:0a:f0:27:a3:
21:da:71:ff:f6:a7:6c:01:0d:a9:7f:de:28:36:15:d9:9d:b5:
ea:ed:3d:95:b5:aa:44:74:f1:cd:04:a5:2d:69:9c:d4:ff:c2:
f2:ad:ae:90:5e:6a:47:67:c5:5c:9d:cb:fb:65:13:36:b5:c7:
5e:a8:97:57:e2:e6:8d:6e:56:12:a7:43:a2:2c:d6:d8:4a:4e:
66:af:a4:bb:a6:7f:ea:f7:33:ce:cf:42:9c:60:13:34:54:c9:
a6:24:87:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:55:37 2025 by rpki-client