Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a06ff9ea-1ebc-4876-8cce-8b9ca3b605d8.roa
File: a06ff9ea-1ebc-4876-8cce-8b9ca3b605d8.roa (raw, json)
Hash identifier: /3zRqFWnzoPGpC/7X9m3teCelsR3P57/tiLbkrVS/YU=
Subject key identifier: B5:04:20:B6:23:20:87:E0:D3:88:86:B4:5F:FD:81:95:05:43:02:66
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 02C92579C0E157A8E2D9D796EF8C3A3A4D1282A2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a06ff9ea-1ebc-4876-8cce-8b9ca3b605d8.roa
Signing time: Tue 03 Dec 2024 00:00:00 +0000
ROA not before: Tue 03 Dec 2024 00:00:00 +0000
ROA not after: Tue 07 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 63.246.112.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:c9:25:79:c0:e1:57:a8:e2:d9:d7:96:ef:8c:3a:3a:4d:12:82:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 3 00:00:00 2024 GMT
Not After : Jan 7 23:59:59 2025 GMT
Subject: serialNumber=dac3f9c3be4f638f8fd9721a5a914de862f35fdfa742b73b19842a21962d6948, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:97:b0:92:e9:96:40:a2:c6:13:4d:d5:a4:62:
27:59:b2:47:ca:9a:c0:ca:0b:ef:74:5f:8b:3b:5b:
c6:18:22:3e:ef:5d:d7:d2:2c:e2:b4:9c:fb:58:a2:
11:cf:a3:b0:37:e3:a6:bf:84:3c:25:01:32:8e:40:
0e:eb:d0:94:34:02:23:5a:a1:96:2f:97:33:3c:b2:
af:4e:5b:6e:be:71:d9:81:47:2b:59:9d:f1:a8:95:
70:11:d3:9a:c0:3c:9b:b2:4c:89:5f:77:93:ad:d6:
68:bd:2a:7d:b4:73:7f:29:e6:30:f6:87:87:14:82:
9a:3c:80:4a:82:94:a1:a7:4a:2c:dd:c2:08:a1:de:
73:3c:27:b7:b6:f0:b1:a0:88:ed:32:72:c8:3a:21:
3d:60:bb:70:b3:b8:62:2b:7e:72:2d:6d:56:78:e1:
68:a0:15:83:5e:4b:f3:20:f6:30:19:c9:60:b6:cb:
77:bf:5b:10:67:93:33:33:0f:d8:74:24:4e:be:d8:
23:b5:f7:42:7c:78:0a:8c:80:1f:92:da:9d:cf:a6:
ec:6b:10:b1:fa:be:35:f7:f7:e8:c6:2b:28:a1:d4:
c0:54:df:c2:7e:e7:f1:16:4b:a3:23:d4:e2:f9:18:
0a:5b:e8:8b:94:5e:da:bc:1b:e4:49:c5:f1:cc:36:
ec:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:04:20:B6:23:20:87:E0:D3:88:86:B4:5F:FD:81:95:05:43:02:66
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a06ff9ea-1ebc-4876-8cce-8b9ca3b605d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.246.112.0/20
Signature Algorithm: sha256WithRSAEncryption
ba:e2:9c:e3:d0:cc:2b:b9:88:3b:d9:e9:75:77:69:71:6d:24:
da:2e:6b:70:89:48:f5:29:11:9e:d4:38:ac:8e:0d:5b:3c:bd:
fe:44:cd:81:bd:93:29:19:ac:f6:30:67:4e:55:fc:1c:15:f1:
27:60:4f:84:27:4c:e2:eb:62:65:4e:d0:27:93:16:30:08:69:
c4:2d:2e:13:26:20:c2:76:01:fc:60:5c:cc:d9:4c:d8:9d:90:
c1:e1:92:76:33:9b:06:59:c0:db:9e:ef:d4:57:c6:7d:52:50:
3d:25:e6:68:b3:68:1e:78:f1:f2:3a:f7:c6:2c:e8:b2:b1:36:
71:44:c1:76:d4:43:81:80:a8:e0:ce:7e:bf:57:0a:7e:45:e2:
d5:ab:80:fa:08:2e:35:8c:72:1e:09:ef:02:ea:95:f5:45:ee:
32:9c:22:5b:d0:89:d7:86:10:ee:f9:73:09:f8:65:b2:8a:81:
43:3c:fc:af:35:8b:a3:f3:ce:20:af:2c:b8:2c:bd:3d:6c:92:
8e:e6:3d:48:e1:63:4d:db:49:a4:cf:de:c4:d3:fc:03:ed:f6:
06:e9:1b:cd:07:d4:92:d6:8a:98:9a:28:c7:1e:4c:b5:fa:ca:
f6:8a:71:3b:f0:a7:77:21:03:de:b5:10:d9:5a:29:5a:8d:05:
36:14:c8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:07:42 2025 by rpki-client