Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/713e4727-69ff-42cf-8566-cda1fe31289c.roa
File: 713e4727-69ff-42cf-8566-cda1fe31289c.roa (raw, json)
Hash identifier: pClOge9NkAyPdhIFIJBf3JFNdX8EknspPdTDpBZAd8M=
Subject key identifier: 62:DC:1A:C9:5D:0B:67:21:2E:52:79:EE:0C:A3:6C:05:95:E2:29:AF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3A73FE9C7402C28B4142AA587472CA022396452F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/713e4727-69ff-42cf-8566-cda1fe31289c.roa
Signing time: Sat 11 Jan 2025 00:00:00 +0000
ROA not before: Sat 11 Jan 2025 00:00:00 +0000
ROA not after: Sat 15 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 165.67.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:73:fe:9c:74:02:c2:8b:41:42:aa:58:74:72:ca:02:23:96:45:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 11 00:00:00 2025 GMT
Not After : Feb 15 23:59:59 2025 GMT
Subject: serialNumber=49f0fab37681a30287722a8ef1fc455410905cb0d726ae5e6eb23a664b70eb98, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4e:90:c0:c2:55:c5:34:3e:36:03:91:1a:6f:
04:39:b1:cf:e3:0c:e5:d7:fb:f8:b2:47:db:14:c2:
8b:f0:28:46:5e:0f:6f:4f:50:ee:d4:aa:23:e1:4b:
23:a1:42:71:0d:6c:54:34:e2:38:ba:65:18:74:b2:
4c:13:f0:4a:61:97:88:63:41:ad:64:23:e8:3b:9a:
da:92:65:eb:d0:e1:42:8c:ec:f2:b7:85:11:a4:eb:
51:57:b8:02:26:f0:57:5b:f4:ac:86:be:b9:ac:fb:
74:05:35:16:6d:48:77:f3:6b:20:4e:09:37:55:bb:
04:71:de:c1:43:e6:85:73:3a:26:72:cd:9e:24:1e:
01:7e:1a:d7:2c:87:f9:31:5b:ab:8f:5a:79:e5:84:
d9:5d:8d:3b:3f:ea:4e:90:82:25:48:b0:02:54:20:
8e:d8:e3:11:ca:eb:9d:5b:b3:ec:43:2f:c8:f1:2b:
5d:5b:93:cb:7f:a5:88:b1:cb:55:28:eb:b6:81:84:
cb:16:6e:e1:19:cf:65:d5:68:91:c9:5c:12:99:4c:
10:9c:ea:91:8b:8d:c7:b0:cc:3f:7f:5f:8d:be:8d:
25:98:87:3d:69:9f:8d:62:95:77:f4:e3:f0:b2:56:
af:d9:6a:e6:03:e3:bb:34:f8:43:6b:62:15:62:3b:
8e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DC:1A:C9:5D:0B:67:21:2E:52:79:EE:0C:A3:6C:05:95:E2:29:AF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/713e4727-69ff-42cf-8566-cda1fe31289c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.67.0.0/16
Signature Algorithm: sha256WithRSAEncryption
21:3b:3b:df:22:66:9e:60:6d:18:20:3c:39:63:c6:1e:b8:f9:
d4:23:f1:a4:6c:aa:17:a9:4a:0f:16:9d:e2:fb:bd:1a:37:08:
3e:38:1c:60:97:de:87:50:96:8e:1d:de:6a:24:2c:4d:43:f0:
c5:f9:f9:bb:41:21:78:7c:76:20:04:42:49:45:63:35:19:6e:
03:b1:c1:b7:78:48:43:a8:b3:19:9a:d1:dc:d5:2a:30:8a:c5:
c2:26:dd:71:9b:09:18:c8:0c:23:3f:d9:82:04:ac:52:93:17:
d0:21:11:4f:78:13:43:fe:11:b2:43:66:35:8f:66:0d:a8:af:
a8:f2:b1:b7:b5:25:9f:55:dd:91:7c:75:ce:2a:82:da:89:19:
10:8b:b3:af:23:ec:db:b3:f6:a4:95:16:37:ff:04:f3:83:05:
77:f0:e5:3a:6b:aa:83:8d:59:82:cc:46:e3:c0:d1:01:77:f7:
ec:7e:ca:8a:53:0d:7e:3c:e7:ef:51:65:e5:71:21:24:50:1d:
2d:2c:e4:90:9c:9d:76:4c:d0:a0:89:f4:cf:a3:7c:a3:97:68:
da:27:6d:fb:36:71:31:11:fd:b7:cd:80:fd:3f:8c:a3:97:bf:
43:a3:64:d5:7c:d7:cd:7e:84:12:bc:27:c3:78:32:e0:4d:ec:
12:0e:66:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:07:31 2025 by rpki-client