Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/990eb16f-e20b-459b-afff-7598ba0da188.roa
File: 990eb16f-e20b-459b-afff-7598ba0da188.roa (raw, json)
Hash identifier: xXqqrt9QAaeuZT7VwFv2rZdWeg1VwF0o2PBQXpU4oNc=
Subject key identifier: F2:CF:D6:D0:73:FC:20:0F:6F:ED:42:3F:7C:09:B3:35:AC:06:F1:B8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6561990DE95CE37923636FAAF1C7FE3056FDCFA2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/990eb16f-e20b-459b-afff-7598ba0da188.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 64.59.0.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:61:99:0d:e9:5c:e3:79:23:63:6f:aa:f1:c7:fe:30:56:fd:cf:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: serialNumber=5feab1e1c50f589a639950252f85561eba72b762bc1d9016080b5441d21e5f9d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:61:30:bc:72:4d:51:7b:e6:ac:f8:c3:8d:86:
2c:f0:0e:16:0a:48:4d:fd:50:a5:b7:8b:93:5a:62:
bd:e3:5d:a3:0e:36:f8:59:b0:b5:8b:44:45:2c:36:
51:81:e1:86:55:36:ce:44:68:7d:be:4c:a5:2e:2b:
85:52:1f:b6:3a:50:dd:10:68:76:7f:18:16:f8:38:
7a:79:7e:b5:27:7a:b8:07:7a:72:8e:16:65:47:08:
40:bf:65:13:6b:ac:7f:fe:6f:7c:41:bf:8d:75:0a:
fe:71:9c:8a:a8:0b:db:62:3d:33:6f:00:5d:af:45:
5e:e6:53:f6:b5:e5:59:51:59:34:91:79:65:ce:3e:
93:14:93:e0:6e:6c:f7:ac:f6:f3:ba:c5:5f:c8:70:
dd:e3:fc:33:f7:2d:49:ce:11:31:17:20:ba:2d:a1:
4c:64:18:5b:d4:1b:17:67:22:a3:87:f2:36:d8:fe:
3e:5c:f6:1f:e5:6c:86:c9:76:61:2f:84:7e:e8:69:
d8:a1:55:33:26:e1:f1:3f:24:a5:f8:74:21:58:0c:
3e:86:59:d6:8a:95:0c:0a:31:01:22:54:93:e9:a5:
b3:02:73:51:60:e7:87:d2:2c:b7:7d:7c:be:ba:ce:
f9:ab:1c:0e:3a:e2:d4:04:0e:06:38:cd:9b:1e:9d:
a0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CF:D6:D0:73:FC:20:0F:6F:ED:42:3F:7C:09:B3:35:AC:06:F1:B8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/990eb16f-e20b-459b-afff-7598ba0da188.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.59.0.0/18
Signature Algorithm: sha256WithRSAEncryption
12:d7:02:31:03:74:6e:72:7f:2b:1d:df:55:f2:0e:45:3d:24:
db:8a:44:e5:f2:0c:00:53:6e:e7:45:f0:c5:da:f3:6d:51:75:
7e:84:33:56:44:a2:b5:df:fa:8a:2c:4e:f6:65:6a:d1:b7:ce:
5f:81:2f:b9:1e:90:5d:f8:06:01:f0:7c:a1:67:28:80:92:f5:
e3:04:47:9f:e1:e0:6c:a5:dd:4a:70:82:08:21:0a:d2:f3:fc:
be:b5:e3:e5:79:ed:79:e2:4c:c6:31:a3:3f:9e:f3:c3:d9:4b:
b5:3e:8c:a4:96:10:61:45:b0:c1:fc:37:43:5e:f9:a1:ef:84:
d9:ac:6f:a2:19:60:a4:84:01:fc:f5:ab:f0:49:a8:58:07:89:
9f:f5:e9:8e:2e:33:4b:c5:04:e1:9d:c3:4b:d8:ac:da:6f:50:
cf:bb:e4:f2:db:d9:29:3b:44:40:30:0f:3b:9d:60:76:41:7e:
4a:4d:9b:59:a0:10:46:e5:c6:26:6d:85:1e:0b:77:55:4e:4a:
8f:2b:11:1f:74:e8:10:32:d2:94:70:59:31:67:21:f4:73:19:
fd:0a:a1:61:f9:a2:64:cc:6b:8e:38:d2:d5:be:dc:11:8b:aa:
6b:75:2e:c7:f3:3b:4e:11:4e:f9:f0:af:28:c9:50:3a:22:5d:
9e:22:31:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:50:54 2025 by rpki-client