Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/786bd745-dd1f-40b0-a7f9-d42c2416da06.roa
File: 786bd745-dd1f-40b0-a7f9-d42c2416da06.roa (raw, json)
Hash identifier: BFeDxVuW7XKYPZ9SbyUs6S/jAnFkL9rJwEo1BVqj4Uk=
Subject key identifier: 62:9E:A8:5A:4F:91:F3:D4:15:67:E2:39:E9:FF:B5:0F:4C:AE:11:9D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7FD6057F6A88808E400F3A2DCA929CFBA1009AED
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/786bd745-dd1f-40b0-a7f9-d42c2416da06.roa
Signing time: Wed 12 Mar 2025 00:00:27 +0000
ROA not before: Wed 12 Mar 2025 00:00:27 +0000
ROA not after: Wed 16 Apr 2025 23:59:59 +0000
asID: 22394
IP address blocks: 139.56.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:d6:05:7f:6a:88:80:8e:40:0f:3a:2d:ca:92:9c:fb:a1:00:9a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 12 00:00:27 2025 GMT
Not After : Apr 16 23:59:59 2025 GMT
Subject: serialNumber=fee3b85644791e6732e7934007eb8e0fafaeb5ba5b602a736b7a3150b445d292, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:49:65:31:4f:c5:b5:d2:41:4c:66:5c:db:
c2:14:d1:c7:64:d8:da:40:a4:e2:36:fe:ca:16:6c:
17:8b:18:87:84:ac:2b:e5:0b:a2:1a:e7:3f:64:78:
bd:fc:24:0e:23:f4:54:1d:a4:6a:d6:fb:16:66:b0:
7c:c4:6d:12:74:0b:51:de:db:5a:cf:a9:94:d8:a5:
4e:a2:0a:97:39:fa:e3:9b:be:78:a9:c4:82:c4:76:
77:c5:eb:82:79:62:fb:6c:a7:8e:44:cc:fb:b5:83:
21:63:e4:02:b2:2d:ee:60:80:3c:79:91:fe:ae:5e:
9f:19:e0:f0:6e:18:a2:b5:18:88:cb:b5:08:ab:f1:
5e:c2:82:8a:5c:27:b2:53:da:9a:af:4e:e6:77:b2:
27:c7:51:b0:35:42:13:36:cc:1c:dc:23:70:bd:02:
fa:2d:e1:b2:57:3f:7c:a1:09:1f:d1:88:9e:50:db:
02:4d:ba:61:51:78:ab:4f:4f:d3:88:69:fd:ec:da:
aa:81:18:7e:88:e0:a7:e2:26:e8:36:4f:74:90:a2:
ce:72:03:74:07:d8:11:0a:2d:c8:8c:78:37:42:24:
46:43:8d:7c:80:aa:db:c3:cd:78:4d:0e:48:ac:4f:
f2:81:a1:72:3f:bf:4f:81:43:89:bd:87:ce:ed:d8:
d6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9E:A8:5A:4F:91:F3:D4:15:67:E2:39:E9:FF:B5:0F:4C:AE:11:9D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/786bd745-dd1f-40b0-a7f9-d42c2416da06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.56.0.0/24
Signature Algorithm: sha256WithRSAEncryption
59:7a:a2:94:26:dc:9e:70:6f:94:af:d2:09:95:85:56:ac:5e:
a5:94:dd:65:23:cd:51:c8:31:a3:7b:69:3c:89:9c:17:6d:f5:
52:93:fe:fe:78:bd:41:b3:e7:27:f0:fe:f2:a3:f5:f6:a1:35:
50:1f:9e:6f:a9:96:b4:94:32:c8:2d:c8:d0:4e:18:35:e6:90:
9c:79:6e:43:74:08:4f:3e:eb:2c:de:ec:d6:f5:99:8b:2d:c0:
e4:fb:0b:4b:35:9a:7e:0b:14:93:5d:71:93:69:02:83:cb:2b:
50:a6:9b:08:d4:32:28:ca:7d:a3:ac:63:e5:64:d7:e5:63:eb:
1d:19:72:14:8a:eb:a0:57:0a:aa:c2:7f:6f:e7:84:00:12:6d:
36:84:8b:1d:6c:93:40:4c:a1:62:55:9d:2e:5a:2f:ba:be:17:
27:0e:d5:64:7c:f7:57:2b:ff:5b:8a:91:24:8d:5d:a3:9d:6f:
28:a7:95:5f:79:3f:98:ac:ca:a8:5e:02:7c:ad:7f:77:16:c5:
e0:a1:03:89:af:c0:09:b5:bb:c8:f3:4c:ee:f4:db:4d:4c:47:
73:a7:a0:43:dc:05:12:5e:83:02:db:2c:ea:33:e6:5c:9f:2b:
68:79:c8:9d:44:4e:d2:85:d1:2c:d3:03:ce:14:a4:7f:22:d1:
fc:71:b4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:06:13 2025 by rpki-client