Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74f9effa-415c-4243-88ab-ace987f7c31c.roa
File: 74f9effa-415c-4243-88ab-ace987f7c31c.roa (raw, json)
Hash identifier: o9EOSjuAdWmo+i2ktb37B2iSaoc+nF0Tm+s/wJinMwI=
Subject key identifier: 51:A0:DE:2C:02:EA:FC:D5:6E:68:AB:64:66:53:F9:A3:18:67:93:45
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6D7E7FB571AF35FB03D97B69D1B9ACC820468C7F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74f9effa-415c-4243-88ab-ace987f7c31c.roa
Signing time: Sun 12 Jan 2025 00:00:00 +0000
ROA not before: Sun 12 Jan 2025 00:00:00 +0000
ROA not after: Sun 16 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.25.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:7e:7f:b5:71:af:35:fb:03:d9:7b:69:d1:b9:ac:c8:20:46:8c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 12 00:00:00 2025 GMT
Not After : Feb 16 23:59:59 2025 GMT
Subject: serialNumber=6094a154f52bc5872294431772a1c305a91a39612536fbd8491d8adbc45abda2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:24:7d:b3:e8:66:1d:72:92:37:cc:b2:7e:44:
1c:80:56:b8:da:7f:06:f9:e4:56:3d:32:a0:ab:10:
7e:56:9f:21:31:c9:a5:24:a4:cf:9d:a2:72:9b:b3:
4d:77:14:ef:da:77:a4:17:55:36:b9:02:24:27:a1:
8b:79:51:4b:5b:1f:e8:61:39:a8:db:6c:d6:6d:aa:
b6:eb:0b:89:40:49:6a:8d:61:a9:87:d3:48:22:1e:
a8:d6:30:be:8e:d4:6a:6a:5e:8d:dc:f2:ec:90:25:
ac:39:ee:94:bb:77:6e:55:5f:87:e0:32:fe:8a:fd:
fd:08:61:c1:17:c6:cd:51:48:0b:30:ec:e3:f3:8f:
1f:60:12:ca:8f:a9:14:c4:9e:7a:97:65:2b:62:14:
b0:b2:c5:1b:38:ad:48:a0:8d:da:91:4f:f4:9f:be:
4b:1c:d0:43:fe:51:29:d4:b1:b9:ab:84:48:1b:de:
50:ab:6d:a5:77:f8:28:87:7d:f9:ba:bb:65:cd:48:
cd:ac:3b:89:82:17:08:9f:ee:2a:23:89:ad:4e:03:
81:15:00:93:02:9d:e0:f9:ac:d7:03:d0:c0:5d:78:
fa:34:8a:d5:28:b6:61:ed:8a:0e:08:55:29:8c:bb:
47:3e:89:30:93:e0:a2:a9:fb:af:61:23:27:aa:fa:
f3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A0:DE:2C:02:EA:FC:D5:6E:68:AB:64:66:53:F9:A3:18:67:93:45
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74f9effa-415c-4243-88ab-ace987f7c31c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.25.70.0/24
Signature Algorithm: sha256WithRSAEncryption
70:40:b3:59:e7:87:7c:af:e8:e4:1b:8f:cd:0f:f3:23:e6:8e:
0c:7a:c0:ee:9f:30:cd:6f:80:66:3a:af:0e:5f:70:b9:fb:91:
76:1f:d5:f7:37:7d:1c:e5:e6:59:0c:29:00:d9:4a:ef:a3:74:
ca:8f:bb:5c:8d:9d:fe:11:a8:c2:2c:41:89:d1:7f:d5:fa:7a:
fb:68:cb:f9:d1:2b:d6:c6:6a:30:57:5e:e5:f7:3b:d1:0b:62:
ab:99:3f:a7:cf:1a:94:ec:fd:fd:84:ac:88:a9:cc:82:44:dc:
85:7e:d2:c1:2e:76:e6:c6:2e:02:e4:5b:24:8c:41:d4:f3:d0:
95:26:76:8d:b2:72:13:df:ab:71:cf:6e:00:ad:6a:8a:56:3a:
3a:be:21:9f:ae:d4:3f:da:71:1b:1b:28:80:24:97:c8:2a:ac:
c7:b0:0e:42:39:eb:43:3e:ad:56:da:f4:08:a2:29:3a:2b:42:
c4:ec:e4:79:67:f3:cb:d4:a5:7e:d4:28:86:ed:17:75:fe:b6:
41:82:ba:6b:54:66:60:0f:c4:ba:6d:5e:e2:a6:95:ff:ea:f6:
53:20:0b:ea:95:67:f8:ce:07:c0:6d:10:78:77:d0:36:3b:a3:
96:4d:05:af:c8:bf:22:b4:20:63:1c:a8:b7:da:d7:1b:06:c5:
85:99:07:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:26:57 2025 by rpki-client