Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98ec5786-67e1-423b-8bf8-8b6446c69b47.roa
File: 98ec5786-67e1-423b-8bf8-8b6446c69b47.roa (raw, json)
Hash identifier: N8nBY+/8lqXHrWuI3riPzSvmUn1YxYlneL1mh05AX+I=
Subject key identifier: D3:62:59:45:43:A5:7C:CE:AF:93:87:5A:DE:13:B8:3C:5C:AF:3A:6B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6451A14ECBE8B3783D0C05304BDE0B9F099445C3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98ec5786-67e1-423b-8bf8-8b6446c69b47.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 54.25.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:51:a1:4e:cb:e8:b3:78:3d:0c:05:30:4b:de:0b:9f:09:94:45:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=aa9cd471ba82dfb70364ea2643bc351fea092232e4d787e56d1778f7ec27afc1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:5d:b1:4e:f1:e9:b1:17:d2:ec:c3:7f:a5:6d:
ac:91:e3:ce:10:e9:ad:34:6b:bb:83:87:ea:9f:46:
b5:e6:3f:db:6f:b2:2c:ae:04:ea:73:8b:71:0b:15:
15:bf:4d:80:22:7f:05:8e:eb:c6:24:2e:c2:0f:3b:
96:33:32:96:01:8e:9e:40:9f:a9:2e:f5:87:36:53:
b5:cf:c5:a2:44:4d:3e:15:4e:d4:11:3a:d2:7b:6c:
ca:52:b1:82:3e:d1:32:63:9e:d4:28:05:48:54:fe:
4e:8d:54:2b:6d:40:8c:c2:4c:0c:e0:70:17:e2:83:
d4:11:11:1a:b1:5b:72:6c:f9:52:8f:ac:48:76:3e:
09:56:79:f1:59:a8:39:b4:cb:59:cd:76:76:b3:6e:
5c:1a:2e:ca:24:be:e0:d9:55:85:2a:aa:d4:5a:67:
29:7e:5c:f6:b7:3f:e1:15:0d:1a:6a:ae:a3:43:8f:
9e:49:70:6b:8f:22:d5:e8:2b:30:f6:74:24:4b:c2:
fa:7b:3b:34:8b:d6:21:e5:9a:b9:09:b0:c5:ec:ef:
da:f9:d6:40:93:9e:4e:26:de:99:4a:05:97:21:23:
9e:2d:2a:e3:30:bb:d2:47:c7:55:9d:9b:9e:e2:09:
4f:13:19:c6:af:74:cb:13:79:3b:f5:f0:64:63:74:
f6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:62:59:45:43:A5:7C:CE:AF:93:87:5A:DE:13:B8:3C:5C:AF:3A:6B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98ec5786-67e1-423b-8bf8-8b6446c69b47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.25.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d7:61:62:88:61:42:2d:8f:e0:17:c5:3f:2f:14:65:4e:46:47:
03:0a:90:5b:14:48:ef:2c:6e:32:e8:9c:89:ba:6c:29:d5:ba:
07:25:f2:6b:a4:71:11:37:90:5c:4f:fa:7f:50:e3:56:46:08:
8c:f0:e3:d0:d2:fa:46:82:61:12:1c:e7:8c:5a:c6:ef:ed:4e:
73:6a:d5:a1:84:7a:45:17:bb:12:da:bb:48:83:5e:8c:d0:1f:
07:35:a4:04:90:94:64:9a:6a:2d:5c:94:a5:61:10:55:45:14:
7f:fd:81:25:99:d9:86:87:99:b5:ca:70:60:c7:fa:e0:2c:ec:
0b:c1:06:31:ef:7f:bd:83:74:6e:a8:8d:82:9e:91:46:68:39:
99:53:9a:86:d5:87:a7:96:9f:03:bc:f1:07:f4:35:59:7b:af:
26:b4:c3:2c:59:2f:0c:68:39:bf:76:d4:76:88:45:bc:6b:65:
e4:b5:37:7e:e9:54:70:33:ae:cd:cd:74:04:8c:d1:a3:44:be:
5d:8f:46:7d:7c:cd:e5:98:02:0c:9f:a3:5d:07:7f:46:28:65:
67:bf:a8:f2:d5:34:e9:4c:3a:92:b0:30:84:8c:1f:1a:45:b8:
45:e2:7e:2e:d8:6e:90:4f:4b:48:48:29:f6:6f:c6:f3:40:12:
d7:48:9f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:30:14 2025 by rpki-client