Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/692310c3-6214-4811-8704-61b2e0f05d8c.roa
File: 692310c3-6214-4811-8704-61b2e0f05d8c.roa (raw, json)
Hash identifier: H4TXGyboUZkcG1b+PaMaasg5uyzgNJ5B3AL2NqlkkDI=
Subject key identifier: 22:2B:F0:3B:90:4E:BF:47:F6:3C:8F:3E:F8:DE:EE:00:58:85:21:22
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 67C6C24A9CF8FF225BCCFBA9A0F65E283F951817
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/692310c3-6214-4811-8704-61b2e0f05d8c.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 69.53.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:c6:c2:4a:9c:f8:ff:22:5b:cc:fb:a9:a0:f6:5e:28:3f:95:18:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: serialNumber=ed2d1fc595858fec46df2f23f9f05cb10bb5ee512caf8835628128ae425ff27b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f1:dc:d3:46:18:42:59:51:19:af:10:d0:d2:
15:63:eb:45:47:16:70:8f:24:64:f9:53:ba:ae:51:
60:70:70:a6:97:fb:df:74:bf:da:d1:8f:31:0b:15:
85:38:d1:40:6c:ad:33:05:eb:be:3c:b7:6e:07:63:
0e:99:f2:aa:58:e6:07:09:da:44:11:07:90:18:5c:
9e:9b:f7:4b:04:25:11:09:e8:4d:ea:8f:1d:fa:15:
73:fd:59:0c:49:5b:11:d8:e1:d7:41:cc:bb:c5:c0:
6c:dc:c5:ab:90:55:33:be:9b:55:e2:a5:72:e8:12:
04:81:67:d6:9a:ca:ad:d2:47:3f:4a:5c:9f:39:28:
1d:95:fe:d7:e2:e0:bf:ea:ae:ee:e2:41:ac:98:28:
ce:44:b4:88:2e:31:a6:6e:d0:d5:7b:f7:94:99:78:
6a:ff:eb:90:92:43:75:3b:fe:33:72:e8:c9:3a:d8:
95:19:1d:c2:1c:ee:f5:2d:8b:72:8d:d9:55:a5:0a:
05:45:16:a8:92:80:22:f3:02:d5:13:7b:eb:3c:6f:
d5:f5:24:05:d1:15:5d:32:0e:b9:86:9d:cb:db:ba:
84:8a:a7:42:71:a1:c8:06:01:cc:4b:f4:05:6e:d5:
1f:5c:02:28:12:63:bb:b6:b5:ed:4b:b1:f6:93:d7:
b6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2B:F0:3B:90:4E:BF:47:F6:3C:8F:3E:F8:DE:EE:00:58:85:21:22
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/692310c3-6214-4811-8704-61b2e0f05d8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.53.128.0/18
Signature Algorithm: sha256WithRSAEncryption
53:d0:92:70:da:94:15:a1:08:5e:e8:77:78:28:a2:1e:1f:25:
af:84:88:78:78:7c:31:47:29:27:94:ef:66:be:e4:bc:3e:20:
e8:0c:3a:14:c1:42:13:eb:54:c1:85:80:5c:8d:74:2a:7f:f3:
af:38:1d:f6:79:e9:14:0b:7f:b9:43:da:ea:1d:5e:b2:0e:f8:
53:b3:02:0b:18:f1:1e:04:4d:db:ac:bd:e5:e4:80:a2:5c:8d:
59:b4:ea:85:e0:c8:bf:cb:07:bc:5a:4b:23:89:58:c7:b1:cc:
03:7d:02:2b:ea:89:a9:64:e9:ac:e8:26:c3:fd:ca:cd:f3:2d:
dc:96:22:6f:2a:d3:6f:c3:9f:86:f1:1c:89:5c:02:ee:63:8c:
f4:73:c7:ab:36:b5:5a:35:9e:48:75:c6:61:89:4f:61:c3:d9:
28:89:f8:88:e4:5e:9a:2e:0e:cf:87:60:c8:f7:30:4c:54:72:
fe:29:5a:08:26:1e:7c:e0:e9:9d:f0:c4:0d:2d:88:02:35:30:
12:ad:fd:8a:f2:07:ce:83:9b:32:46:9b:bc:d0:3b:12:ac:b0:
2c:b8:ff:71:50:b4:95:f7:97:98:1b:51:b5:9d:75:c6:85:33:
e5:bd:d2:43:c8:37:d8:3c:f5:cc:74:dc:25:48:b0:05:af:2f:
28:5c:04:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:55:41 2025 by rpki-client