Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/885ae76d-2736-4d57-95d4-a2473d3f4750.roa
File: 885ae76d-2736-4d57-95d4-a2473d3f4750.roa (raw, json)
Hash identifier: oNAoPrRixr97zq5TW9sVbHohHpJxszZcGx3jTzgTT3M=
Subject key identifier: B3:46:E3:48:52:01:8E:7D:08:3A:23:12:C9:10:BC:2C:82:D4:44:9E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 42F5BCC51B6CEC66D2829A25D5C442C7DC373983
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/885ae76d-2736-4d57-95d4-a2473d3f4750.roa
Signing time: Sat 21 Dec 2024 00:00:00 +0000
ROA not before: Sat 21 Dec 2024 00:00:00 +0000
ROA not after: Sat 25 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 168.84.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:f5:bc:c5:1b:6c:ec:66:d2:82:9a:25:d5:c4:42:c7:dc:37:39:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 21 00:00:00 2024 GMT
Not After : Jan 25 23:59:59 2025 GMT
Subject: serialNumber=39d00035f036dffdabe1d4664f43f39d66dc0943ad932e86b445dccd0ac6375b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:2a:82:66:a7:91:59:b9:90:b7:77:13:f0:
dc:50:81:31:57:96:87:3d:1b:ad:ef:34:1f:71:7f:
6d:89:b4:e1:91:4e:08:27:96:ad:c5:9e:ab:cb:55:
23:12:04:bc:1e:a9:2a:11:2d:f6:5f:32:0b:41:7c:
a3:44:08:1e:05:2e:8a:df:fa:4c:dd:2c:b8:72:87:
2f:99:a7:f2:ce:e5:ca:a6:1c:4b:40:09:c0:af:ba:
f1:c1:74:86:a1:74:85:fd:a8:fb:21:a3:2b:e1:d5:
40:fe:85:a1:32:c5:5d:01:31:94:6d:89:ef:41:26:
4b:50:1c:c9:43:96:be:fd:47:87:41:66:44:14:0c:
e3:b0:08:9e:cd:a1:7c:ec:93:7d:2e:a1:13:e4:dc:
89:12:44:b9:d7:91:11:f0:84:e7:65:51:c5:ae:84:
70:8b:a6:dd:cb:f4:61:de:3b:ea:05:cd:d3:27:5a:
b5:b7:f1:c4:3c:5b:21:2b:09:d0:c2:5c:3a:38:4d:
c0:1d:7d:26:92:57:b0:b7:26:0f:13:1a:aa:01:33:
7f:15:6f:9d:8e:5a:53:aa:05:f9:f9:dd:b0:c2:24:
36:cf:5f:d9:12:23:c4:d1:3a:ad:fd:ed:fc:e3:48:
b8:7e:92:bc:5e:e7:b9:b2:91:3c:13:4b:a5:8f:af:
e0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:46:E3:48:52:01:8E:7D:08:3A:23:12:C9:10:BC:2C:82:D4:44:9E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/885ae76d-2736-4d57-95d4-a2473d3f4750.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.84.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4a:5b:a3:25:b6:ba:58:e9:a6:90:d0:d5:28:f5:aa:0b:f4:b0:
00:1c:c5:0c:1f:9c:57:6b:6d:84:26:06:ad:ae:e2:b6:98:e4:
a5:e9:03:b4:b9:48:2f:52:45:bb:33:88:47:77:e4:7a:f4:09:
23:fb:1a:e5:4b:63:f3:39:b7:8a:01:59:9d:88:66:4c:33:a9:
24:cd:44:60:44:b4:31:cb:5e:90:0f:6c:fd:69:e4:32:30:46:
ad:58:ec:39:db:5a:f7:a6:32:86:49:f9:ff:f1:c2:80:fb:cd:
2e:46:06:bc:0e:51:eb:a3:62:81:b1:fb:85:8f:0a:6e:35:c9:
5f:46:e9:44:f5:63:98:c9:a6:9b:d3:f3:3d:eb:9e:f5:26:58:
6d:9d:8a:0b:4c:4c:11:ab:12:c5:c3:2d:40:8f:4a:db:7b:7d:
52:01:e2:55:44:aa:22:24:8f:1f:d9:cc:56:cc:41:47:15:bc:
b0:c5:c1:36:82:d3:15:41:43:e1:21:b7:49:38:c7:27:80:33:
d2:98:0a:66:86:4a:9a:79:6b:59:2a:d1:ef:52:b2:32:8d:f4:
76:ca:0d:f2:34:99:eb:38:42:c0:ff:8c:0f:47:38:f6:d0:28:
4a:e7:a6:49:8c:71:e6:33:47:6b:7f:ca:88:32:48:90:6d:34:
33:f5:fa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:33:38 2025 by rpki-client