Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a70abc79-28d2-4d25-86e6-b9648e48d72f.roa
File: a70abc79-28d2-4d25-86e6-b9648e48d72f.roa (raw, json)
Hash identifier: quYJhxiZltPWcP3WcjoAutpUQ1+Qk4e3CaYhKvQBNMs=
Subject key identifier: 4A:5C:1B:7C:44:6E:5F:CA:AD:A9:F3:AE:16:93:9F:0F:68:2A:F6:7C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 69890F1AA12CEB1F3F026A33C747010984446386
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a70abc79-28d2-4d25-86e6-b9648e48d72f.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1f38:5000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:89:0f:1a:a1:2c:eb:1f:3f:02:6a:33:c7:47:01:09:84:44:63:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: serialNumber=52ab520ab9de8a9df90f9ac53b0661241003a121dadc664d3bfc8ad7e2a90f16, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a8:84:62:7d:8b:8f:d2:3c:68:4f:43:c7:4f:
23:4e:91:b9:02:42:0c:7c:e8:18:b7:f8:27:9f:6a:
7a:af:5d:d3:72:d3:7c:0f:fe:a5:8a:93:e2:71:cc:
43:01:ff:ff:5a:d8:45:5a:74:e7:f0:19:41:a8:5c:
38:be:26:f2:fd:99:04:76:5c:62:7f:f1:96:9a:a1:
19:58:dd:b1:dc:46:f0:86:7b:34:2c:18:70:e1:2c:
ed:33:98:65:ec:f9:cc:a9:e1:b7:f5:57:b7:42:1b:
62:7a:d2:0a:bc:7c:93:f3:61:a8:c6:4b:43:56:0b:
a8:9a:3d:de:3b:eb:06:d1:e7:bd:0d:17:aa:38:c4:
d2:81:bb:dc:64:e0:9a:d1:aa:a9:d9:35:ac:5e:fc:
15:6f:ca:1f:eb:44:55:fb:a4:8c:fd:64:67:13:f1:
9a:b6:10:c1:41:e0:a0:b5:41:f2:a0:1d:29:15:4f:
59:c4:c1:20:c9:bb:1f:7b:6d:76:4e:91:1f:5f:34:
06:cc:5d:ff:15:c2:63:dd:fb:cd:5f:77:2f:66:51:
c0:09:13:99:a3:30:03:ba:16:65:52:89:55:41:76:
d9:8d:e0:84:17:d5:18:65:2b:37:4b:64:2c:2f:4e:
70:c3:7a:89:e1:66:09:e9:a1:80:62:20:09:dc:e3:
21:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5C:1B:7C:44:6E:5F:CA:AD:A9:F3:AE:16:93:9F:0F:68:2A:F6:7C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a70abc79-28d2-4d25-86e6-b9648e48d72f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f38:5000::/40
Signature Algorithm: sha256WithRSAEncryption
4a:84:5c:90:47:c2:48:ee:6b:5c:5e:aa:ff:ca:94:32:c9:e0:
f0:9c:30:47:b3:55:5a:71:9c:59:f4:d2:dc:d2:0a:5d:65:79:
8c:c1:52:a6:e4:0e:df:ff:1d:1c:d3:40:1f:47:82:df:65:6b:
fc:16:67:51:02:7d:ac:2b:51:60:af:f1:7b:27:6d:32:84:88:
a6:0d:ad:fd:79:aa:37:e0:18:b5:40:b2:14:1b:85:62:9e:4c:
ad:6e:5a:b9:c9:91:28:5e:4e:be:d7:be:03:87:2d:30:13:74:
31:8f:32:81:1b:58:4a:aa:a8:ea:6f:3f:09:86:ef:a4:13:bc:
23:af:57:78:00:a7:86:20:a4:90:ad:89:29:e2:36:52:d1:af:
ef:30:52:45:7c:85:4d:76:a9:1c:ac:c3:c9:8c:4d:a2:63:1d:
83:37:00:b0:d4:ef:51:44:9d:00:73:bd:7e:80:7a:98:a0:43:
e5:1c:76:2e:55:45:49:e3:af:70:ef:b5:46:2f:55:28:cc:26:
c4:bf:9e:2f:0d:6f:8e:3f:65:62:92:d6:ff:db:12:63:09:44:
2b:df:74:28:4e:c2:e6:0f:92:58:8a:66:60:3f:1f:1d:09:62:
0c:5d:cf:a4:74:40:7e:73:57:f4:30:2c:f7:fe:80:e7:ae:de:
85:d2:94:ae
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:06:28 2025 by rpki-client