Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/994b8ecc-0677-4289-a88f-52dba500efff.roa
File: 994b8ecc-0677-4289-a88f-52dba500efff.roa (raw, json)
Hash identifier: aXpZgopC2XOtYUkvzSM9aYGDznyOggnAsim0O+CcGNk=
Subject key identifier: 09:96:32:E8:AF:35:EF:18:28:93:A7:55:5F:BD:C8:96:B9:47:FE:AE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3996C5FFB2E5CC4C4F2E07D53E3156F8B2B20C9D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/994b8ecc-0677-4289-a88f-52dba500efff.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 209.173.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:96:c5:ff:b2:e5:cc:4c:4f:2e:07:d5:3e:31:56:f8:b2:b2:0c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=88eddfd607dc1032e8358e4fdcc9a424a8f69e10d18475d61e750694f5f8a63e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3a:6e:fd:7f:92:01:53:a5:59:f2:1b:61:ec:
d6:04:51:64:91:26:18:61:48:a7:50:a9:43:5f:ee:
bb:33:b9:77:28:ec:25:4f:9c:c0:09:20:c1:9d:65:
c8:16:4b:fb:ab:0e:d6:38:14:c7:14:e4:ac:1b:1f:
fb:79:38:86:66:7d:39:0e:2d:1f:c1:fd:cb:c5:ad:
a0:d0:94:f6:76:da:dc:31:78:63:66:0a:af:3d:1a:
31:13:da:27:62:db:fd:28:ae:95:84:c8:c4:c5:5a:
58:50:ec:6e:a3:77:99:53:fc:b0:75:50:38:2f:61:
7c:57:e5:a8:5f:64:9d:86:98:2d:dc:e7:c0:b0:12:
af:11:10:31:1d:96:87:ab:96:66:6c:e3:ca:86:93:
94:ef:50:59:72:8d:c8:da:40:2c:7e:70:c0:e8:78:
2c:ac:10:1e:05:8f:86:4c:b0:c5:90:c4:77:fc:67:
a6:f7:06:52:0b:dc:6e:5c:a4:91:09:1f:de:12:a4:
e8:f5:e3:f5:84:9b:3c:25:3f:47:06:52:33:c2:1a:
ec:94:c5:35:33:65:7d:b3:bc:23:21:d9:be:1a:52:
57:8c:f6:93:4e:49:48:e5:16:14:da:12:ef:5b:35:
6e:19:e3:55:e6:55:c6:66:0f:cf:f3:ae:57:03:eb:
02:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:96:32:E8:AF:35:EF:18:28:93:A7:55:5F:BD:C8:96:B9:47:FE:AE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/994b8ecc-0677-4289-a88f-52dba500efff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.173.64.0/18
Signature Algorithm: sha256WithRSAEncryption
53:09:37:4c:72:8d:9a:2f:79:b0:38:6c:4e:86:22:24:0a:f9:
2c:14:5d:0a:b0:65:6a:88:5a:24:9f:a6:12:4b:fc:68:68:34:
25:f0:ad:06:e4:ae:64:81:a8:ff:e9:a6:ba:da:e1:02:a3:f3:
0d:b9:cd:c5:d9:a0:5d:ee:6a:8d:53:6b:0f:4b:ff:d1:7c:d6:
93:09:fa:94:b5:07:d6:17:ab:57:df:bc:f6:ac:d5:44:d7:4e:
e5:06:16:b4:1a:55:3e:86:88:50:b6:73:fe:ef:0c:d9:9a:cd:
dd:ad:1f:d6:8e:ba:30:0a:0b:35:ba:b8:eb:4e:62:f8:8d:27:
78:92:52:42:63:24:85:1f:73:c6:80:87:92:4e:88:44:d7:af:
49:db:d4:7e:40:03:5f:b5:a8:39:4c:4a:92:f8:44:16:db:ae:
6c:d2:12:fe:8d:b0:b2:17:8f:49:8a:21:12:a5:bc:b9:79:eb:
0d:fb:77:a0:52:f5:21:29:12:d1:32:bb:dc:d7:94:1b:e9:58:
77:db:3e:29:91:78:8a:e1:68:6e:c3:aa:e0:02:ce:a1:f3:2d:
27:f4:69:3c:99:34:91:35:9c:b4:a9:21:88:22:0a:5f:7a:77:
1e:3e:b1:e8:78:a8:55:45:9d:c9:32:fb:8b:49:10:5d:58:ef:
db:87:f6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:16:31 2025 by rpki-client