Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0c078c9-7b20-422b-9516-014927144bbb.roa
File: a0c078c9-7b20-422b-9516-014927144bbb.roa (raw, json)
Hash identifier: Y/rqXQGvVv2EJC+zZiWYKw0OfvFkVjdwxhz3/hZ0W48=
Subject key identifier: CD:C5:4D:BA:1B:B8:4A:71:57:7E:0F:2C:7D:70:C7:08:DB:96:F5:DA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 68074F6D630436357CF05B264D9F5CBF53DA96D6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0c078c9-7b20-422b-9516-014927144bbb.roa
Signing time: Wed 01 Jan 2025 00:00:00 +0000
ROA not before: Wed 01 Jan 2025 00:00:00 +0000
ROA not after: Wed 05 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 56.119.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:07:4f:6d:63:04:36:35:7c:f0:5b:26:4d:9f:5c:bf:53:da:96:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 1 00:00:00 2025 GMT
Not After : Feb 5 23:59:59 2025 GMT
Subject: serialNumber=608403ea2775bc1010bad0343957da4a1952d343a3f4416e97c9b8622ba33485, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:60:c9:5d:7c:4d:e8:0f:33:67:dd:bf:ec:44:
ac:b0:1f:f9:35:66:d9:bc:55:52:2d:82:34:20:ba:
b4:cb:b5:54:62:42:bc:fa:a1:d1:f8:4c:7f:cd:54:
cc:c3:18:30:37:44:ad:c8:80:03:92:2f:0c:0e:9a:
c5:dc:c8:b9:98:f4:ec:60:08:eb:61:ce:fa:ba:7c:
fa:28:44:b4:4a:f5:9e:5c:fc:94:6c:6f:b9:ad:4a:
24:27:ed:f6:a8:ce:95:2b:29:32:52:02:32:43:6f:
2f:82:13:74:b0:af:60:b9:a6:84:8c:29:e1:b2:d4:
23:4d:51:49:90:cd:2d:99:58:33:06:56:bb:1a:f6:
3b:f1:1c:db:29:45:3b:fe:d7:d5:f0:fc:0d:d3:d6:
c2:ab:15:a4:3e:2d:52:38:8c:e7:5c:80:f1:f6:b0:
7f:14:c1:05:29:75:fc:71:24:ee:da:5d:21:5c:3a:
c0:d7:67:7d:1b:cf:c8:05:42:e3:5f:b5:cc:9d:8e:
d2:c5:76:6b:25:83:2e:0b:81:66:a2:e7:d3:a3:c5:
1b:a1:06:65:ea:9c:48:0d:0a:d7:4e:49:7b:42:3b:
19:c1:92:e9:65:60:da:10:0d:06:cc:5f:d3:45:40:
c5:48:d3:7e:ba:d5:4a:b7:e9:4f:53:78:dd:04:36:
bf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C5:4D:BA:1B:B8:4A:71:57:7E:0F:2C:7D:70:C7:08:DB:96:F5:DA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0c078c9-7b20-422b-9516-014927144bbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.119.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c1:cd:3c:6d:59:e1:72:6f:2b:f4:08:50:74:05:14:80:a3:c2:
3f:85:96:e4:ee:f6:7b:4e:d1:46:db:d3:36:14:61:20:6b:ee:
6c:64:bb:e3:75:4e:f5:1c:e2:91:02:f6:28:af:16:6e:b8:62:
a6:39:44:75:a6:26:c0:df:69:bd:e5:df:0e:81:9c:aa:89:51:
03:6a:e2:78:77:15:14:b4:68:64:e7:7d:e3:24:4d:60:b7:77:
a6:37:90:a8:54:70:87:6a:23:b3:4e:fc:14:12:a8:53:83:87:
84:9a:07:68:20:8e:4b:f4:b7:57:ae:87:5b:be:3e:dd:22:e9:
92:d3:62:1e:59:6e:75:dc:9d:38:d6:bc:73:ed:fc:39:8d:78:
4d:47:d0:56:24:7c:72:69:92:41:ab:5b:31:35:f1:ae:ee:4c:
46:6c:8a:73:f1:18:fb:11:f3:bf:05:f0:1e:1a:8f:78:9e:56:
2c:6c:a8:45:f4:0f:df:dd:ea:fa:6b:82:d9:41:5c:92:88:bf:
ec:df:af:96:01:a2:f9:49:d3:ff:aa:b2:2c:74:f1:a0:7e:f6:
4d:ba:a5:8d:bd:09:4a:0b:57:ac:ac:fc:5c:57:0d:09:84:1d:
c0:b4:ba:fa:81:e3:fc:48:e0:3f:dc:80:8d:41:56:fc:d0:52:
fe:ec:b0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:41:53 2025 by rpki-client