Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8eea77d0-9e60-40e8-8699-63b1b0a753c4.roa
File: 8eea77d0-9e60-40e8-8699-63b1b0a753c4.roa (raw, json)
Hash identifier: 5CJICIFx0s8hZMcErKnqOB+z2NB/Tk1znFqXb6tSDDY=
Subject key identifier: 0F:A6:5C:A6:E5:E5:4C:A8:3B:1A:FE:42:30:CB:DE:C5:82:97:82:35
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6F7DCB40B948D62BBE75615839258F4C17E27E87
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8eea77d0-9e60-40e8-8699-63b1b0a753c4.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 56.10.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:7d:cb:40:b9:48:d6:2b:be:75:61:58:39:25:8f:4c:17:e2:7e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: serialNumber=09c5ebd7708f5fefd82f1013d489f815f27155651c9ad0044edb1a62108602cc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:14:f9:17:e3:92:d6:cf:83:50:0d:78:56:21:
b3:16:eb:e8:8b:d5:59:0d:b3:d4:f6:a8:52:18:f0:
9a:8e:82:2b:f2:dc:4a:61:94:d9:15:3d:7d:fa:35:
70:c0:f1:11:df:82:02:57:63:ae:e0:4b:93:5d:67:
cc:6f:96:db:10:cb:2c:a0:5e:93:4a:34:17:62:f3:
eb:5c:62:7c:66:b7:cf:55:96:43:7e:91:ee:d5:54:
83:d3:e1:9d:51:65:8f:cc:5f:87:27:a5:a3:c0:b7:
ef:58:7e:be:f2:ee:30:0f:01:19:1c:c4:2f:46:bc:
30:ae:00:ea:20:a1:a8:28:09:bf:01:00:40:3b:d0:
62:13:c7:3e:26:30:4e:0f:ba:e0:52:dc:d8:17:99:
a3:eb:bb:5a:73:57:86:84:a6:73:6a:41:2e:b3:ff:
cc:7b:fe:f8:40:75:c0:59:3b:f1:a9:3b:33:d8:88:
18:78:b1:49:4e:cc:82:5c:ba:92:03:94:50:80:4d:
7e:96:65:c0:62:7e:98:6a:64:05:fd:b2:d0:cc:ab:
db:60:ad:17:02:35:82:b1:1a:ac:7d:d9:3e:86:67:
36:a9:1b:86:88:0a:cd:8f:4d:e9:28:48:33:2e:1a:
2b:aa:ba:26:7b:df:b3:0e:53:f3:7b:5b:97:c6:db:
34:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A6:5C:A6:E5:E5:4C:A8:3B:1A:FE:42:30:CB:DE:C5:82:97:82:35
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8eea77d0-9e60-40e8-8699-63b1b0a753c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.10.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:8e:e8:83:1b:77:48:f6:4c:bc:05:34:6f:56:31:ae:a0:21:
1e:87:7c:60:05:0f:a0:51:b4:60:8d:bd:3f:60:5d:5a:41:60:
79:0a:57:8a:66:a8:15:40:32:59:38:0e:35:7a:c8:5a:1a:c3:
15:1d:70:88:7b:95:3f:5f:f8:04:0e:1a:4e:90:a8:b9:a2:2d:
60:50:04:c1:a6:51:01:40:87:cf:f1:7b:da:a8:3d:bf:3d:6b:
cb:8d:79:58:aa:c3:2c:56:37:54:ec:99:a9:57:b2:f6:24:63:
a7:da:4a:50:b6:67:dd:b9:78:7b:2f:30:3f:48:ff:27:1a:58:
19:00:d2:af:18:61:40:04:e8:71:3e:a8:46:7c:66:3d:c5:75:
07:19:09:62:74:15:ad:2e:d7:9d:c8:b5:0b:34:5f:a6:bf:b6:
40:05:35:ce:6c:41:15:1a:6d:a6:53:bd:be:10:f4:fe:ff:bb:
25:a0:d9:20:23:3e:6d:57:6e:59:45:56:bc:a8:92:ae:82:6a:
ca:35:e5:e2:5c:30:85:8a:ea:28:ea:89:4c:d2:12:a6:15:7b:
11:ee:15:0f:67:0a:80:79:0b:7a:a6:09:d4:c8:70:be:bb:75:
5a:3b:c8:17:f6:19:00:03:1d:dc:11:2c:da:0f:10:e0:18:35:
15:4c:f8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:47:44 2025 by rpki-client