Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67107883-4914-4620-8e56-bee88849177b.roa
File: 67107883-4914-4620-8e56-bee88849177b.roa (raw, json)
Hash identifier: 7yOm9CUIDuLmsn7+i6UiYw29eGDAZRTk7y6SOwsEP98=
Subject key identifier: C5:89:C7:7F:45:9A:EB:7B:CF:31:C7:DD:E0:4C:2F:98:FE:29:1E:B7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2A2334027AE047150E0EABDFA64E0D6C510899FD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67107883-4914-4620-8e56-bee88849177b.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.87.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:23:34:02:7a:e0:47:15:0e:0e:ab:df:a6:4e:0d:6c:51:08:99:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: serialNumber=00d9e759b193832542553b0c5c83f43655fb131f029ee4d691e2584e09b94db8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:a9:ca:58:15:69:0c:c5:9f:c2:4e:b2:6b:
90:1f:4f:22:1a:b3:3e:a5:e1:bd:f6:c4:28:3d:f9:
8f:cb:e8:4c:59:34:54:e7:7c:f0:bb:ec:11:17:b1:
72:c5:7f:22:20:32:f1:47:76:c6:2b:75:c5:2a:bb:
4d:3c:26:b9:e5:b9:de:ac:ab:dc:c7:45:26:a4:81:
39:6a:12:41:a4:68:e0:f6:a5:79:6a:f4:cd:1e:b5:
47:e0:17:1d:95:27:a5:d6:c3:50:79:ba:b7:7b:f3:
9c:b3:66:57:6c:a5:6d:d1:fb:01:8c:4e:cc:44:d5:
42:86:1c:93:f7:4b:5c:21:d8:55:87:12:dc:9d:4d:
67:34:df:21:08:fb:37:98:f0:76:57:d2:c4:65:55:
09:2d:b8:01:25:71:05:10:cd:96:ec:ce:86:07:31:
6c:04:6b:94:8c:53:20:24:06:aa:1c:f9:9d:35:19:
1a:a5:3f:94:f1:ae:87:ed:25:28:58:db:63:50:1a:
50:ce:fc:69:dd:6d:67:c1:95:5b:01:41:27:0b:34:
c5:f6:e9:24:df:5e:80:73:9e:41:ec:9d:10:3f:37:
4c:0e:e1:f1:f7:dc:57:0b:1a:c4:93:c5:e2:68:1e:
2d:8a:f7:91:11:66:24:13:ea:59:6a:d5:d8:14:a4:
a3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:89:C7:7F:45:9A:EB:7B:CF:31:C7:DD:E0:4C:2F:98:FE:29:1E:B7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67107883-4914-4620-8e56-bee88849177b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.87.16.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:55:70:87:bf:ec:9b:c5:cd:88:8a:ec:86:de:e1:0f:a8:23:
19:03:09:f1:03:3f:c4:f0:b5:d2:fd:e7:47:a3:eb:4b:0f:53:
b7:fa:ca:1e:5e:79:fa:3a:f3:13:5a:ad:23:08:ea:18:64:7a:
9c:64:b2:ed:a7:40:57:df:b7:e4:30:5e:d3:88:9d:f7:0d:22:
c6:84:a2:c6:2e:34:23:2b:7e:1a:0f:a0:88:d8:74:ab:16:1c:
43:5e:3c:0a:96:06:bf:3e:21:f7:f2:55:ee:c2:29:a3:47:15:
5c:1f:4b:61:e4:a0:b6:5a:f4:af:b1:a6:fc:9d:29:18:1b:24:
fa:49:8f:7e:43:91:c0:e5:6e:42:dd:51:97:c8:6c:b3:c3:9d:
56:b2:b9:11:af:65:4e:6a:6f:fc:d3:f9:ec:a3:46:48:8a:c1:
c1:29:23:96:3f:bd:23:53:18:1d:07:f5:f6:07:fe:fd:0e:b9:
a8:9a:fa:87:53:cb:55:93:99:80:12:16:0c:37:c2:5c:a9:db:
d4:35:b2:8f:52:f8:3b:a6:04:9e:29:fa:a4:ee:9b:4d:ad:76:
fb:8d:7a:90:68:61:73:4d:ec:cc:74:c6:35:26:e6:5f:b2:06:
47:73:8f:ad:51:12:74:c6:4f:5d:0d:ba:12:b8:94:48:64:72:
7d:5c:6d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:15:26 2025 by rpki-client