Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac5a5cd5-c2ed-4b78-ad68-e9c9418e6af3.roa
File: ac5a5cd5-c2ed-4b78-ad68-e9c9418e6af3.roa (raw, json)
Hash identifier: c/5E63z+ofa4kvgR1SCuz21ChXek6oL6TUSASE3WzcI=
Subject key identifier: 83:B0:61:F5:7B:AF:E8:80:2F:CA:19:AE:F8:E5:EB:8B:03:8D:64:BE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4F3D6360ACF36D5FB6CB0CE46F38D7B971410845
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac5a5cd5-c2ed-4b78-ad68-e9c9418e6af3.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 13.130.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:3d:63:60:ac:f3:6d:5f:b6:cb:0c:e4:6f:38:d7:b9:71:41:08:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: serialNumber=755071993a78056e5b3b39906d45a35776e86d529272b415890ed5cfc068711a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:46:aa:c2:c6:26:a0:ac:78:ad:6c:a0:5d:f0:
c8:17:22:e7:ae:19:b3:5e:8f:33:12:eb:74:59:7a:
07:99:c2:1b:1f:34:8a:cf:ee:2f:39:0e:a2:9c:5a:
ad:9b:76:f2:a2:e2:07:fd:9d:82:cc:9d:fb:24:39:
f0:13:f5:d0:a1:27:a3:52:51:21:a7:a7:56:8a:62:
96:b7:6a:af:08:31:d5:a0:98:1b:16:a6:92:51:90:
d8:e1:92:14:33:ba:83:37:75:55:d6:e1:a5:6d:d7:
1b:8e:98:7b:57:e3:0e:b5:3a:fb:4f:92:80:c7:ce:
c9:01:ef:13:32:83:af:ab:15:4e:35:d7:1a:53:14:
1b:5a:37:b8:89:51:a1:31:e4:cd:80:eb:07:d2:dd:
d7:60:33:84:68:e5:f9:55:d6:d0:68:89:9f:1c:ce:
32:02:f5:a7:2d:91:f9:6d:f0:bb:f3:93:7b:b5:b9:
c7:4e:51:7f:8c:f1:08:16:13:3a:4f:d9:3d:a6:72:
bc:18:09:84:46:5f:77:2c:dd:e3:04:10:57:91:d2:
7e:bb:4c:ed:9c:17:29:3f:17:c1:5e:f7:2e:a1:b0:
6e:9d:2d:a4:45:91:72:09:b0:5d:c1:e7:41:f6:d8:
75:07:25:d3:59:5d:45:6a:4a:7a:ab:0e:df:c5:d0:
e7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B0:61:F5:7B:AF:E8:80:2F:CA:19:AE:F8:E5:EB:8B:03:8D:64:BE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac5a5cd5-c2ed-4b78-ad68-e9c9418e6af3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.130.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:f6:52:29:43:a5:d5:70:71:72:e6:15:3d:36:27:23:a6:94:
7c:4a:f6:54:7a:c0:e6:c0:c5:c7:1d:07:9b:69:97:5f:89:82:
18:21:8b:9b:57:77:c4:a2:e2:1f:4f:84:94:0b:72:80:b2:93:
ed:f7:ab:7e:b8:b5:2c:36:d0:96:98:1a:97:1a:0e:d5:a3:07:
8c:00:f8:ef:f6:58:bd:c5:d0:92:b0:2b:83:19:cb:e1:4d:5b:
ae:c6:b4:42:ca:52:c2:13:1a:c8:98:10:60:0b:64:76:2c:50:
49:84:f2:92:c4:bd:a9:41:a8:32:8d:84:1f:2f:f8:7c:b5:e1:
96:d1:c4:03:07:e6:12:0b:81:dd:56:cd:34:6a:cb:e1:81:39:
3e:70:4b:00:92:8b:ad:9d:a2:38:b3:de:1e:dd:b3:a8:8d:e6:
63:61:64:ef:79:ab:00:1a:11:c7:cf:de:d5:d9:f1:72:b5:b8:
a7:de:bf:84:fc:ac:f0:77:e4:1d:ab:dc:d8:28:57:ca:8b:84:
28:6b:36:ef:e1:ee:3d:84:10:ba:4b:fa:ab:dd:e1:04:46:f9:
85:82:31:22:5b:05:40:ee:0f:46:64:27:85:a8:ee:71:3f:30:
a5:b4:f0:63:75:c7:47:cd:be:ff:07:79:b8:6e:07:b8:68:8d:
77:72:02:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:21:31 2025 by rpki-client