Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d81783a-a3fc-4003-bfe1-7d69ff5ff8a9.roa
File: 7d81783a-a3fc-4003-bfe1-7d69ff5ff8a9.roa (raw, json)
Hash identifier: I9HR47qKrZ0NAJ/pQp84ziwGuxg9dI+UeT2cCwKWWTc=
Subject key identifier: 3F:F7:47:84:2E:3A:4C:81:5F:3E:E2:8F:5D:6D:B2:57:C3:60:CE:9E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4C3FE7DE91DC3FFCBFCB87015767218192AD8E09
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d81783a-a3fc-4003-bfe1-7d69ff5ff8a9.roa
Signing time: Tue 24 Dec 2024 00:00:00 +0000
ROA not before: Tue 24 Dec 2024 00:00:00 +0000
ROA not after: Tue 28 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 136.143.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:3f:e7:de:91:dc:3f:fc:bf:cb:87:01:57:67:21:81:92:ad:8e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 24 00:00:00 2024 GMT
Not After : Jan 28 23:59:59 2025 GMT
Subject: serialNumber=9499c47c67dd2503e6b41f43a9170e751a8e6bdf8a6c9eadc0dbba2caefeef21, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7c:5f:2b:cf:46:a3:43:cc:f9:e0:13:cd:f0:
43:c4:6c:f0:fd:e1:42:1c:bb:b2:5f:e5:a9:1f:4e:
63:38:de:e1:a9:cd:d8:d5:c3:ef:80:b0:74:52:b2:
21:9a:d2:ee:8e:b3:6e:1b:c0:88:99:3f:a9:65:c0:
7c:db:ef:53:04:8f:3e:c7:c2:aa:82:c3:ce:05:05:
58:18:a0:35:3e:73:dc:90:fb:c1:44:65:ff:fd:65:
4b:74:c1:aa:d0:bc:68:86:82:9b:29:6e:6c:93:7a:
ed:ed:57:90:af:6f:35:ac:85:87:6d:9a:8b:15:c7:
45:2d:bf:6a:36:bd:57:99:02:ec:c2:d5:2e:d7:be:
f3:49:43:b7:9b:52:9d:74:cf:8d:35:11:cf:22:1e:
9b:31:d1:72:97:dd:3f:13:56:df:29:ce:23:e5:3e:
d5:47:54:d0:29:d6:d2:28:14:70:92:61:e9:46:ae:
3c:3d:d6:b9:cf:75:1d:37:44:25:17:01:3a:71:b3:
d6:53:fc:14:b9:cd:82:0c:6a:7e:80:8c:71:cc:bb:
a4:64:39:6d:9d:a3:14:dc:12:cc:bc:77:89:18:88:
3a:9b:ba:59:ed:ab:e8:ff:8e:13:dd:c2:a4:6a:18:
e4:2b:7e:28:a9:e8:ed:2b:e2:3f:5c:39:23:dc:ed:
83:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F7:47:84:2E:3A:4C:81:5F:3E:E2:8F:5D:6D:B2:57:C3:60:CE:9E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d81783a-a3fc-4003-bfe1-7d69ff5ff8a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.143.0.0/17
Signature Algorithm: sha256WithRSAEncryption
3a:5d:42:7e:59:e6:6d:43:f0:36:d6:23:7f:bc:4c:f3:0c:44:
f2:6a:34:39:1a:83:b4:05:57:e9:76:97:0e:e5:5f:d5:e4:86:
0d:17:87:ba:65:00:61:3b:56:20:af:85:57:8e:95:09:b1:a4:
9c:55:67:4c:17:94:09:45:73:65:61:67:6b:3b:5f:cd:1d:6f:
35:47:9d:20:54:d5:40:e0:ef:94:fe:e7:97:97:d7:57:f3:49:
5a:ee:19:43:a3:83:20:20:52:c6:3f:11:60:24:da:34:75:f5:
a0:90:3c:72:ea:d3:4a:73:9e:17:c4:31:ff:f7:43:a2:e7:3b:
0e:b4:8a:2c:9c:fa:d3:59:30:a7:4b:f7:3e:94:2f:77:91:2d:
7c:b7:77:df:bf:59:a8:3f:96:c8:b2:eb:e7:9a:a1:52:a2:bb:
56:e6:4c:b6:1a:0b:50:ae:86:cf:3a:ba:b8:b1:57:c1:f6:b0:
de:c1:ff:14:f2:23:bc:1b:9c:1a:74:d6:a9:19:64:34:68:48:
38:47:ee:56:61:e8:04:cf:32:51:e1:fd:8c:e7:eb:72:4c:72:
39:e7:9c:e1:a3:3e:ee:38:1c:e9:0f:db:af:4a:4b:e0:46:ed:
2c:50:57:60:dd:4c:7c:32:32:1d:f6:c5:cd:f6:57:f5:ab:78:
1a:86:6d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:16:44 2025 by rpki-client