Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c6311db-f7c4-4ff7-8a15-53e3483289d5.roa
File: 8c6311db-f7c4-4ff7-8a15-53e3483289d5.roa (raw, json)
Hash identifier: jdKbaeAYfd4FqmHl0V2jmxJn48vQZ+HALWgAtj6RRRE=
Subject key identifier: 94:6E:31:B0:CA:3A:F8:5D:84:E0:CF:08:1A:80:0C:72:C4:1C:80:11
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5982DA9DFD0E33C4EAE62CFAD703A60C576FFA2B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c6311db-f7c4-4ff7-8a15-53e3483289d5.roa
Signing time: Sat 28 Dec 2024 00:00:00 +0000
ROA not before: Sat 28 Dec 2024 00:00:00 +0000
ROA not after: Sat 01 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 136.18.144.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:82:da:9d:fd:0e:33:c4:ea:e6:2c:fa:d7:03:a6:0c:57:6f:fa:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 28 00:00:00 2024 GMT
Not After : Feb 1 23:59:59 2025 GMT
Subject: serialNumber=a06723a44dc75973f1b6604264831efc2a2660fd865c737cf11497ba47013804, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:55:13:db:02:84:92:91:6c:07:43:4f:2d:
8c:da:f9:52:4c:e0:80:54:ba:68:74:37:40:e4:93:
03:d2:af:7e:33:78:7b:10:f0:8b:84:72:86:69:5c:
30:04:c7:ac:15:8a:49:50:0b:ca:69:00:a9:9c:c6:
7a:a7:69:bc:0b:35:62:a1:9a:4f:9a:cb:3d:31:d1:
dd:cb:74:a8:04:67:49:e6:17:9e:eb:60:45:0a:89:
31:54:57:98:55:c6:3e:d8:77:47:75:45:12:da:d2:
11:88:a8:6d:d2:7e:70:e7:92:15:54:e8:c8:05:6a:
e0:1b:b4:b8:6b:da:bc:cb:c1:70:83:6f:ef:9e:f5:
39:7b:97:80:f5:53:54:ed:af:07:f1:5f:7c:07:71:
13:6b:fa:cb:c1:da:0b:7b:23:e3:4d:18:63:d5:c6:
e8:35:a5:7f:15:00:28:52:d9:27:ce:3e:ca:51:a8:
49:4d:e1:56:16:ba:2e:a5:df:f8:14:73:0c:97:bd:
31:19:56:a7:39:e2:80:60:5e:ec:5f:39:ce:76:03:
13:71:c0:dc:2b:d6:cc:26:fc:d5:0d:83:5e:ee:56:
4a:a8:84:74:0a:03:1a:76:df:48:e5:55:5a:58:5e:
81:d3:85:05:f4:a7:79:cd:27:12:d0:8e:9e:50:8a:
19:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6E:31:B0:CA:3A:F8:5D:84:E0:CF:08:1A:80:0C:72:C4:1C:80:11
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c6311db-f7c4-4ff7-8a15-53e3483289d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.144.0/21
Signature Algorithm: sha256WithRSAEncryption
08:ec:04:3a:0d:e9:b3:ca:9f:e6:41:70:f8:3a:4e:77:45:a4:
88:cd:14:00:c5:8a:f3:db:0f:03:40:4b:84:5b:43:42:2f:ee:
ce:0a:c6:d1:85:38:8e:d6:95:87:38:49:5d:c8:47:71:b7:5e:
60:b4:a4:f0:6d:ef:12:ba:b6:ee:0e:84:0c:50:47:33:eb:1e:
e3:67:b8:7a:1f:bd:57:95:23:8b:4b:92:d2:57:ab:84:32:89:
05:5a:e0:78:bb:6e:e1:24:25:da:8d:7c:ab:ce:91:84:94:c6:
19:54:a8:fd:4b:e0:93:bc:ed:66:b7:92:52:c3:ac:96:4a:28:
da:53:57:d4:5b:ae:74:a9:75:cb:03:0e:98:85:f6:6b:ba:7a:
65:e7:6c:ed:8a:63:eb:9e:82:51:7d:3d:3d:87:f4:5d:67:fc:
06:6c:da:63:d0:f9:34:df:df:27:1e:53:46:d5:61:ba:b5:ea:
b8:d8:b4:ba:e4:e0:5b:4f:69:41:f6:fa:8a:03:27:67:43:be:
ed:11:fe:7f:cc:b2:7b:38:bd:6c:a1:ed:24:16:e4:23:00:19:
7c:05:df:79:f4:5a:cd:2c:48:8f:71:ae:f5:b7:f6:93:11:96:
55:ae:b2:38:76:15:4b:1a:bd:ea:55:e7:52:ee:ea:92:cb:ab:
18:4c:c5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:41:30 2025 by rpki-client