Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bf2efac-12de-4901-b282-08e6702e1a1a.roa
File: 9bf2efac-12de-4901-b282-08e6702e1a1a.roa (raw, json)
Hash identifier: lUWwzhA+RIljZ6FZpDCGSexHbwEkKMVtUn1yZBcybss=
Subject key identifier: 67:F3:9C:78:67:76:ED:EC:6B:A7:E8:56:3C:B6:9D:6A:62:99:69:A7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3CBEB168AD526C34E70FCB7241458C543AD09785
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bf2efac-12de-4901-b282-08e6702e1a1a.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1f36:5000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:be:b1:68:ad:52:6c:34:e7:0f:cb:72:41:45:8c:54:3a:d0:97:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: serialNumber=cfba525d40adc44137c1340f0ba7bfcba2378a408de24774c82f30b8ffcd55c5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9d:47:e4:c3:a1:39:68:ac:36:04:d2:b3:16:
9b:49:61:44:04:12:92:21:ee:0d:16:4c:87:c7:36:
d2:62:1d:3c:f8:56:e1:77:25:60:5e:32:db:a5:d2:
15:e3:09:a1:f9:43:a8:4b:40:24:27:29:d7:e5:63:
8f:e2:97:ed:79:d7:3b:5c:d7:ff:a8:54:81:86:ed:
c8:64:00:a5:bd:73:19:f6:0b:92:46:b2:68:9e:e8:
cc:d0:3e:20:98:45:fb:22:70:2b:78:6a:65:41:bc:
20:ee:64:69:f0:f2:83:96:8f:4a:2f:37:a5:4f:90:
7e:19:00:ca:25:47:3e:a2:c0:7f:16:e5:c3:4e:34:
97:fe:ed:f8:6f:fe:ec:3c:ee:94:f0:d3:d9:d3:e0:
ae:9b:01:b9:ae:61:e5:7f:0b:99:46:bb:8d:86:b3:
ef:e6:8f:eb:ef:89:7f:6d:6b:ad:14:cb:cb:4d:52:
c6:5e:d1:fb:48:3c:3e:97:fc:5d:07:dc:54:79:b3:
94:ad:84:3e:c2:a6:8b:fd:ce:98:2f:ab:bd:a3:d8:
da:c7:3a:c6:09:a7:58:e4:7d:be:06:a3:78:7d:f9:
1d:9e:18:67:94:a0:da:9d:87:0e:45:31:e4:62:fa:
c0:32:ba:9c:83:92:6b:ef:5d:41:f4:95:87:c7:8d:
ec:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F3:9C:78:67:76:ED:EC:6B:A7:E8:56:3C:B6:9D:6A:62:99:69:A7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bf2efac-12de-4901-b282-08e6702e1a1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f36:5000::/40
Signature Algorithm: sha256WithRSAEncryption
c0:46:49:35:a7:fa:cf:53:5a:10:9a:a9:e0:3d:c0:21:0f:18:
00:15:22:0e:61:a7:53:98:6f:f4:cb:ed:8a:10:72:c3:5b:ea:
26:e6:f3:8f:f4:81:8f:a3:b6:c1:8a:3d:38:9e:2b:63:1d:87:
8d:36:b9:17:d3:c7:e1:33:87:04:ec:e1:c2:75:9a:66:67:e6:
b7:0a:63:3a:ab:fb:00:1e:fb:10:30:44:4a:fc:a8:31:f3:7d:
fd:de:c4:d5:81:ec:e6:5e:2b:ff:92:79:87:a0:81:58:b4:7c:
5f:3e:c9:ea:8a:e7:3a:67:47:2f:d6:13:cd:98:53:d1:72:2a:
e6:fa:a2:12:6a:72:a4:30:c3:ec:aa:ca:4e:75:86:6d:bd:a2:
63:36:55:77:a2:8a:99:dc:d9:14:91:83:33:ca:a7:0a:62:a6:
35:16:f8:85:fb:be:c8:bb:d9:64:ab:4c:d2:74:20:ec:07:67:
e8:15:06:d1:2d:56:e3:c6:4b:3b:4b:8c:28:d7:30:08:ea:c9:
8a:5a:9a:65:7c:fb:77:36:a1:67:e8:22:58:5a:a3:30:89:d9:
30:1a:2a:13:1a:63:8d:f1:51:a8:f6:83:25:1c:24:59:e2:79:
d5:40:0f:bc:39:a4:5c:14:bc:a8:e9:da:23:a7:33:12:d9:62:
c9:c0:09:67
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:55:42 2025 by rpki-client