Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65dfbdc5-881d-4b33-a93b-acfa4bff285f.roa
File: 65dfbdc5-881d-4b33-a93b-acfa4bff285f.roa (raw, json)
Hash identifier: Lc4F9gmE6HxAN17iFa0ZTyvGHfox+GqYxBEqfOFTfEY=
Subject key identifier: D1:0F:AF:E6:8F:F2:75:73:7F:1A:23:A0:57:B8:5C:50:0A:B6:5D:06
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0D5A383BCABF92DE37BC009929264B89962B3584
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65dfbdc5-881d-4b33-a93b-acfa4bff285f.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 13.144.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:5a:38:3b:ca:bf:92:de:37:bc:00:99:29:26:4b:89:96:2b:35:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: serialNumber=0616130284cf422774c70eaeaefad7c02153d4c94ea7e0b30fd6744234dc4340, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:46:1f:f4:fa:f9:1f:1a:4b:04:f9:ed:53:af:
51:ea:2f:58:24:bd:e8:89:a0:5b:65:d4:49:47:08:
3d:95:87:7b:2c:ff:e5:04:8b:f3:ba:f4:d0:82:e0:
54:f4:41:a8:06:85:02:ef:cf:ac:d8:be:c1:32:ef:
93:42:d4:e2:24:bc:30:de:a3:60:35:97:98:98:8b:
71:fe:39:f6:c4:cf:62:d9:2e:0a:5a:bb:2f:79:b0:
d0:ed:e0:e6:03:03:2b:b7:cc:91:5c:57:0b:1a:a3:
19:b3:d1:60:93:07:9f:2f:9a:39:5a:58:8b:f7:1d:
aa:f0:22:61:d1:d7:7b:d0:e9:2f:9b:d9:9c:7d:cd:
52:2a:2c:a9:23:ee:74:87:f4:4f:c6:31:dc:99:cd:
64:09:52:d8:63:54:0e:47:90:19:d5:e6:0f:85:6b:
df:87:d3:03:8f:69:d8:d0:1a:d5:db:88:68:aa:ad:
64:c8:73:a9:9c:e0:30:52:ff:2d:56:e5:9c:39:19:
06:a7:e3:c2:93:97:ea:1a:f9:fb:36:59:70:eb:25:
90:5a:9f:88:4e:d8:c6:76:5b:d7:bf:52:cd:e3:36:
92:f8:96:3b:ae:5c:02:cd:5a:f7:47:fb:1d:18:8d:
11:45:ee:22:3e:f0:fd:a1:71:a8:60:ce:67:b3:99:
89:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0F:AF:E6:8F:F2:75:73:7F:1A:23:A0:57:B8:5C:50:0A:B6:5D:06
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65dfbdc5-881d-4b33-a93b-acfa4bff285f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.144.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a8:af:0e:a6:9e:14:e9:4c:d8:22:04:66:d7:1e:be:35:22:38:
11:27:92:31:2c:bc:64:76:79:3d:95:c9:c2:6e:4e:d4:07:86:
fb:24:a5:63:a2:41:13:e1:39:f4:f1:e6:85:43:e9:52:8f:21:
9e:ee:03:eb:68:00:f9:30:c1:82:43:68:30:7f:6d:26:7c:b4:
ca:68:99:d0:7c:14:7e:b3:ba:a5:61:52:f4:54:9d:ea:17:30:
d1:1b:e6:b6:d8:40:19:12:35:54:68:69:74:3f:71:00:32:c0:
db:13:96:6a:97:eb:22:0b:60:1e:21:b7:dd:7e:ce:86:f6:22:
51:4c:71:ad:7d:f8:d5:9b:1f:7c:65:7d:3a:e2:15:4c:bd:77:
30:e8:4d:5a:5a:57:2a:4b:ac:13:d9:ca:95:17:07:a7:28:6c:
ac:33:d0:db:a5:42:9b:79:ff:f9:29:ab:18:12:f9:1c:de:58:
40:fc:68:ff:64:33:63:bf:01:b2:0d:f0:78:35:29:3c:3f:d3:
6b:19:ef:ab:f9:d9:45:ae:08:59:7d:ab:bd:cc:aa:bd:ae:65:
de:a5:55:1e:06:a0:84:ea:1c:5c:10:b6:ff:f8:4c:bf:d4:31:
81:14:de:5f:02:43:89:2c:2f:50:9d:38:c3:f2:c0:dd:8c:5b:
b0:5d:20:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:10:54 2025 by rpki-client