Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61287c07-80dc-4b22-b520-e074ae4e3667.roa
File: 61287c07-80dc-4b22-b520-e074ae4e3667.roa (raw, json)
Hash identifier: gVpmVdNvS9E6tdmY6My5kxVH1mnHXauEFdIFYA5Brwk=
Subject key identifier: EC:1F:6F:32:0A:35:07:70:0F:3F:E8:79:BF:2A:FB:D5:33:18:AF:DE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 40BF611315081EE39CA4566FBFFDB5AD561AFFA3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61287c07-80dc-4b22-b520-e074ae4e3667.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 204.31.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:bf:61:13:15:08:1e:e3:9c:a4:56:6f:bf:fd:b5:ad:56:1a:ff:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=a7ff2b6d57181f93daabea47a691aa8f7a53ad41910e085f0b6167b1a95e305b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:84:85:8a:89:4c:ec:fa:5e:95:d2:48:11:1e:
97:5b:b6:41:2c:95:bb:49:6c:9d:e6:46:30:bf:dc:
ce:dd:8b:4f:23:95:52:5c:91:62:50:13:b7:1d:76:
1d:c8:35:f9:4d:9a:a9:b1:f2:db:7f:fa:11:9e:2b:
f1:1e:90:82:2f:13:a8:a5:07:07:ca:e7:91:02:50:
90:a3:39:d5:16:e7:d1:88:77:aa:63:25:89:ef:63:
f8:e3:e3:3f:27:a8:bf:58:2e:01:54:b3:77:f5:ba:
91:bd:d4:76:ef:6c:0a:db:9e:23:70:34:b3:55:ba:
ab:4e:77:e6:ce:a1:55:27:f5:72:e5:80:e1:62:8f:
a2:6a:72:72:81:f5:84:ac:01:0b:a8:c2:95:a8:ea:
9a:c2:b7:58:74:af:66:80:29:f6:54:9b:d7:a8:7b:
28:57:9c:56:ee:0a:26:ec:c3:52:b7:c5:f7:ad:70:
87:10:7f:15:61:39:3d:b2:23:fd:99:f3:63:8c:b8:
7a:1d:fb:59:a2:30:87:00:46:8f:af:c2:5b:fc:c4:
99:5c:80:99:37:7d:ce:9f:72:8b:93:2d:ae:0d:67:
59:19:22:83:4c:b6:6c:df:90:94:f3:99:27:ef:95:
29:f8:bc:db:e2:df:39:33:f4:ed:c3:57:89:e1:fa:
ce:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1F:6F:32:0A:35:07:70:0F:3F:E8:79:BF:2A:FB:D5:33:18:AF:DE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61287c07-80dc-4b22-b520-e074ae4e3667.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.31.192.0/19
Signature Algorithm: sha256WithRSAEncryption
65:ec:10:60:ca:8f:7e:6a:2e:31:f9:6c:27:93:2d:4c:0c:61:
05:ba:c6:a9:d9:1d:b5:39:2e:96:66:62:24:86:7a:01:25:27:
d3:5f:07:53:ec:a1:04:7f:9f:ea:84:78:b1:69:43:8f:d2:74:
3b:91:c7:86:7f:e3:a8:aa:9e:36:68:67:e0:c8:aa:de:3d:65:
75:75:d9:d2:6c:12:a3:40:6f:f0:a5:d8:4c:4e:ef:0e:3a:d6:
66:f8:8e:54:5b:c8:11:a1:4c:89:59:ff:37:60:3f:c5:7b:34:
ab:6a:09:64:8e:c0:ca:79:c5:2b:eb:bf:28:77:b8:39:d6:6b:
cb:2a:33:90:5a:88:ca:16:43:47:1d:f2:8b:92:c5:16:e7:fc:
2a:7e:a8:a2:a6:d4:bc:b7:75:b5:b0:64:b8:d5:5e:6d:e2:b5:
a8:09:45:f1:a7:96:0b:7d:46:8f:a4:35:d2:34:a5:d3:f6:c8:
60:63:fa:70:d5:af:9b:4d:80:19:97:b0:f1:d0:58:0b:ef:0d:
06:dc:78:61:54:88:e2:06:2f:cc:c9:c8:09:fb:2a:48:43:50:
22:50:9e:30:b0:79:72:2b:09:df:cd:47:40:f0:d8:cf:37:1e:
52:bd:21:14:4e:4d:f1:c1:42:d7:ec:f8:2e:66:e1:d1:1d:10:
e0:b9:96:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:44:42 2025 by rpki-client