Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7fdc4239-d663-4289-b9e4-cad7fc92c09e.roa
File: 7fdc4239-d663-4289-b9e4-cad7fc92c09e.roa (raw, json)
Hash identifier: hTsODV82E9fUGnq8sm8WJGdVDdkWAe+l/kLzgB/vGtE=
Subject key identifier: 15:8E:51:22:5C:AE:DA:43:CF:9B:82:C3:93:5D:51:67:20:8A:CC:30
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3B5CC43B31628AE24D6C92C8EC9A98093770CD8F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7fdc4239-d663-4289-b9e4-cad7fc92c09e.roa
Signing time: Tue 26 Nov 2024 00:00:00 +0000
ROA not before: Tue 26 Nov 2024 00:00:00 +0000
ROA not after: Tue 31 Dec 2024 23:59:59 +0000
asID: 14618
IP address blocks: 162.222.148.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:5c:c4:3b:31:62:8a:e2:4d:6c:92:c8:ec:9a:98:09:37:70:cd:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 26 00:00:00 2024 GMT
Not After : Dec 31 23:59:59 2024 GMT
Subject: serialNumber=0b3c95e80a2d89c8219ae853298e765fd3f1db5870fdc615ab8fe53e38f0ac0b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:86:cd:68:e1:d7:91:cf:c6:a2:5d:d4:7e:32:
6b:9c:a4:65:61:9d:77:22:41:49:19:64:af:9e:23:
01:49:34:d4:67:18:06:55:57:02:f2:cb:ff:d8:ed:
29:7a:7e:74:9e:49:4a:d9:da:43:05:4b:49:ca:46:
a7:f6:3e:b8:fe:d2:9e:5f:13:28:1a:fe:3e:0d:8b:
8a:13:fe:05:93:d3:cb:a7:0f:12:46:4d:2f:fd:1a:
5a:63:d2:c1:09:c4:6f:a1:f1:fe:f5:be:82:83:0b:
2b:8c:49:cf:2b:70:90:de:9d:d1:a1:70:c1:8a:72:
a9:53:69:14:97:b3:bd:40:d5:2e:5c:12:f8:67:79:
2d:a5:96:cf:1d:78:8d:f6:62:ad:9b:d3:af:1e:ec:
33:0c:88:6b:bc:76:d0:63:32:8e:c5:53:58:52:40:
1e:19:51:d8:70:1b:d6:16:da:40:15:5f:df:dd:be:
8f:15:63:36:a5:7b:43:20:ed:bc:c8:0f:bf:0a:1d:
b8:ab:0b:94:c7:f4:11:60:ff:3e:b4:54:58:5a:28:
dd:dd:5f:4b:f1:73:75:b1:fa:92:c6:29:b7:07:71:
62:79:b7:af:27:a8:33:9f:87:f2:de:7a:bb:ef:5d:
9e:fb:0a:ec:12:b9:e1:7a:16:75:1c:e9:92:5d:9a:
39:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8E:51:22:5C:AE:DA:43:CF:9B:82:C3:93:5D:51:67:20:8A:CC:30
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7fdc4239-d663-4289-b9e4-cad7fc92c09e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.222.148.0/22
Signature Algorithm: sha256WithRSAEncryption
69:80:cc:83:7c:17:83:ee:13:bb:9c:85:ce:66:6e:f6:5f:ac:
79:d8:07:29:3a:3d:bd:b5:af:c1:f2:cc:d9:ca:dd:de:3e:24:
d1:bb:5e:87:7c:87:9f:b5:7d:a8:80:07:99:b3:f4:f3:aa:24:
a0:d8:84:ae:4c:25:a8:5f:ac:b0:b6:f8:29:b6:70:61:db:36:
cd:12:5b:98:dd:59:cd:9b:cc:63:86:50:44:6b:d3:9f:cd:de:
49:6e:69:28:bb:91:1f:69:91:eb:ef:cd:52:2c:89:67:3b:85:
23:c3:a2:ed:4f:4b:cc:d9:13:b5:05:96:a5:eb:1a:f5:db:02:
66:bf:63:7b:4f:eb:51:ab:5b:c8:16:a1:3c:cc:e8:01:a8:4e:
f9:77:19:ac:7b:34:21:95:ea:0b:34:ce:33:65:76:ef:55:67:
3b:66:49:09:81:d9:cb:59:b4:38:60:fb:e4:53:60:58:db:d5:
8c:94:ae:7e:a4:9f:f2:1d:07:4e:b3:a9:d4:fc:8f:5d:76:21:
1a:6d:73:37:c6:9d:eb:b3:1e:f3:0c:c1:b1:91:98:d2:bb:c3:
e3:3d:11:da:7b:27:06:7a:07:d2:74:ed:f5:92:d1:5f:f6:02:
f3:8a:dc:af:28:7f:da:20:3d:e7:4e:84:7b:c0:b9:1e:41:ac:
5f:f6:9b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:03:04 2025 by rpki-client