Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97ebdcba-db86-4ea2-8b43-07a8e5ad35aa.roa
File: 97ebdcba-db86-4ea2-8b43-07a8e5ad35aa.roa (raw, json)
Hash identifier: 4PxqXjjJDhfIsh+DTl0u1LIsNwb3UStnmpOFfRpWcKY=
Subject key identifier: C1:49:40:33:CA:3A:D0:85:E7:9B:21:B0:FA:71:CD:F4:22:95:F5:99
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 217B8FEEE5BE7FED5EA1F2791FBA72B241FADA01
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97ebdcba-db86-4ea2-8b43-07a8e5ad35aa.roa
Signing time: Fri 14 Mar 2025 00:02:09 +0000
ROA not before: Fri 14 Mar 2025 00:02:09 +0000
ROA not after: Fri 18 Apr 2025 23:59:59 +0000
asID: 8987
IP address blocks: 205.187.160.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:7b:8f:ee:e5:be:7f:ed:5e:a1:f2:79:1f:ba:72:b2:41:fa:da:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 14 00:02:09 2025 GMT
Not After : Apr 18 23:59:59 2025 GMT
Subject: serialNumber=672d5717b44b1671173dafdf31d773600805c1b908609459a0638c26a2daeab4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:24:3b:e0:38:d4:b1:af:69:61:20:6f:8e:1a:
c5:44:5b:cb:ae:d4:a9:b2:0d:45:3c:b3:12:cf:fd:
7a:46:a5:50:ff:9d:07:14:cd:51:54:46:51:a6:af:
4d:55:92:2d:67:cc:cd:04:fc:53:02:74:a8:1a:f8:
5c:ee:d9:3d:e2:e3:9d:9e:55:5b:62:76:d6:1a:04:
42:78:d3:26:e1:c5:26:3d:6f:41:30:f3:99:b1:93:
b1:38:76:63:cc:5c:b8:e2:72:0c:d9:04:fa:2f:2a:
18:f7:0c:da:74:b5:58:c6:51:a3:0f:48:f0:e4:58:
44:8c:55:78:b4:b0:98:d1:ba:16:74:e6:40:52:0a:
3c:f8:f9:ab:c9:6f:bb:b9:43:30:65:30:62:cb:ad:
5b:62:82:73:26:78:59:d4:e6:98:d4:51:af:6f:dd:
e2:a8:37:17:10:1d:f0:eb:b6:80:ab:b6:6a:2d:fb:
e2:19:05:2b:bc:6e:03:15:f8:bb:cc:65:28:61:cd:
42:d6:61:26:f5:44:a3:6e:dc:22:60:b4:08:4b:fe:
9b:53:7d:3e:95:38:d3:c7:a8:3d:d1:d5:b5:a1:56:
39:34:09:2a:06:bf:82:da:49:d6:b4:c3:a3:dc:07:
14:b0:d2:3a:19:04:06:a0:9f:9a:84:8e:90:2b:eb:
de:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:49:40:33:CA:3A:D0:85:E7:9B:21:B0:FA:71:CD:F4:22:95:F5:99
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97ebdcba-db86-4ea2-8b43-07a8e5ad35aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.187.160.0/20
Signature Algorithm: sha256WithRSAEncryption
43:37:f5:d9:f3:6b:e0:96:5b:db:94:a5:a8:77:75:08:77:d2:
fc:ac:6c:2a:c0:ad:0d:f0:61:1c:10:e2:74:53:a1:85:d3:2b:
40:85:94:d5:53:6a:1b:5e:30:06:ed:e3:b2:b8:7c:b9:9c:a5:
f8:e9:1f:39:c3:b1:11:b2:8a:40:8f:5a:86:30:53:27:7f:bd:
18:da:7d:84:b6:7f:89:ee:f0:af:f7:36:bc:9b:14:b9:45:3e:
79:8c:72:08:85:c6:85:7f:55:58:bc:99:4e:4e:eb:79:4d:25:
fa:86:a8:78:5a:83:fc:8f:84:65:6a:cf:e8:15:7b:e6:31:af:
73:92:63:f1:ca:c5:c9:6e:34:48:ff:c8:3b:18:c7:b7:58:30:
7b:95:9a:35:5a:f2:ed:22:9b:fd:97:aa:95:63:2e:a3:33:5a:
6d:4c:d2:d1:97:0f:74:5a:ae:0c:2f:d0:69:80:be:9b:aa:28:
94:52:a1:72:b6:ee:2e:bb:c2:fc:a4:c1:71:6e:36:b9:fc:51:
ff:51:04:45:5b:af:c5:05:d9:1c:04:cd:0d:55:a5:ed:b0:c3:
fd:26:ce:2c:26:cd:d5:e9:db:05:89:fa:51:fd:e0:10:8d:3b:
ae:cf:51:13:f9:2a:00:59:12:7f:46:a4:f9:03:8b:bb:7a:d7:
45:39:e2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:07:35 2025 by rpki-client