Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62d69af0-a8fc-462d-9bdf-d2320719808e.roa
File: 62d69af0-a8fc-462d-9bdf-d2320719808e.roa (raw, json)
Hash identifier: bYNcX9bXzlMUCILznZUcYAu0v7pqSJqnEgagEPZyAI4=
Subject key identifier: F9:CE:3D:BB:C3:5C:21:E1:5D:E0:33:4F:C9:61:81:62:8C:9C:98:AB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 58186A23BFA17675C4CF24BBEE84A7FF73BDA5AC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62d69af0-a8fc-462d-9bdf-d2320719808e.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 209.92.92.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:18:6a:23:bf:a1:76:75:c4:cf:24:bb:ee:84:a7:ff:73:bd:a5:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: serialNumber=ace3079cd4e0cfa28cf8909abc8fd7c93122e49c9684e4ca9b62e920e7ebe68b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:40:2f:0d:94:21:b3:23:24:44:8b:66:2d:91:
01:a9:6d:c4:19:f0:62:76:72:21:13:6a:5e:ff:a1:
7d:a0:47:72:fd:e3:c9:a1:fb:44:f6:89:88:52:4b:
8c:7a:d0:47:2f:7c:15:89:e5:f6:bd:13:8c:d1:86:
94:4c:7b:5a:be:2f:71:50:6e:5c:76:b2:3b:a1:0d:
24:51:ea:75:3c:9f:15:6c:16:09:53:ba:08:95:2f:
64:98:8a:31:53:61:f5:ea:80:1d:d1:31:eb:70:7c:
ea:56:79:09:51:d5:7e:15:41:d6:16:65:c5:e5:f4:
c3:b7:6c:b5:f1:90:4f:12:f9:f6:92:8a:0d:5b:04:
5a:c9:08:36:16:b6:d0:e8:67:57:e7:78:52:6c:c5:
1f:ce:d8:62:d3:99:91:ae:72:fe:c3:09:ca:7a:89:
9e:09:09:e3:59:d4:c9:9c:a4:ac:18:60:72:6b:b0:
f6:00:3b:b9:06:fe:00:5b:f1:69:88:01:a6:63:89:
66:d1:17:d7:dc:d3:fa:e3:6c:5a:33:19:66:f2:55:
8e:df:dc:5b:1b:fa:3b:fa:5d:88:58:1b:2a:c5:fc:
eb:14:22:8e:ba:86:26:b1:62:9e:19:64:83:74:02:
b6:fb:56:d7:b5:3f:d7:b2:84:2b:8b:6d:1b:87:5e:
3d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CE:3D:BB:C3:5C:21:E1:5D:E0:33:4F:C9:61:81:62:8C:9C:98:AB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62d69af0-a8fc-462d-9bdf-d2320719808e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.92.92.0/22
Signature Algorithm: sha256WithRSAEncryption
25:73:85:d1:32:68:26:61:22:4a:c7:6c:35:97:63:bf:13:cd:
da:74:8a:64:9d:0c:f5:cc:30:21:3f:f7:3f:2f:62:74:f8:72:
d6:c2:44:51:b3:8d:d1:9f:65:62:38:dc:90:ec:73:00:04:3d:
59:60:cc:ca:43:00:47:2a:76:84:1e:30:1f:c3:e2:92:73:4e:
c0:18:fa:96:ab:c2:b9:c7:dc:e7:60:b5:c8:c5:49:68:0b:b4:
65:a4:4b:55:9f:5b:00:f4:76:2a:cf:c8:fd:0a:25:86:06:86:
4c:a7:86:34:81:5a:15:2f:7d:ef:da:31:ba:b4:45:a1:1c:f6:
7c:b6:a5:af:4a:65:41:b6:54:a1:cd:48:b1:9c:ff:6f:60:0e:
0a:c8:72:4b:d4:b6:24:71:06:8b:ec:1c:9f:07:f0:d6:5c:5a:
32:72:1a:c1:17:93:c4:49:ad:af:c8:91:bd:29:06:3d:24:a5:
05:40:a2:b6:60:a7:bc:7d:92:7b:6e:ef:e5:db:3c:c7:ec:2c:
46:ce:4a:ef:0d:1c:1b:16:60:23:6b:38:f5:0d:39:26:cb:18:
19:34:f8:72:0e:1f:bb:9f:aa:a4:6a:b2:3d:48:e5:b0:4a:73:
ff:d0:35:44:24:63:8d:4b:e6:41:f7:d6:e6:66:b7:90:5d:1c:
47:54:e4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:26:53 2025 by rpki-client