Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad9d188c-279f-4fa8-a2e4-88912a4b55db.roa
File: ad9d188c-279f-4fa8-a2e4-88912a4b55db.roa (raw, json)
Hash identifier: dBwr41D6LvwinXWluIdStqzKvrpMZsRXu/QKwRwAFhI=
Subject key identifier: BF:9B:D6:63:01:1E:53:01:CE:22:03:E0:49:90:B8:C4:75:D8:AB:0B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2902A503EF19F9EE3A1E307D137C439D8A243011
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad9d188c-279f-4fa8-a2e4-88912a4b55db.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 209.86.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:02:a5:03:ef:19:f9:ee:3a:1e:30:7d:13:7c:43:9d:8a:24:30:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: serialNumber=79ac9fb592d22079074ccb048c383f37ffd425cd3e4890090cb81344d8446b55, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8a:9a:0c:c3:35:a5:f2:0b:b6:d6:a8:6e:ff:
61:6b:ff:fb:40:71:7b:4a:a6:12:00:94:a9:fc:3e:
77:6e:86:95:5a:27:db:93:69:52:8a:38:ca:cf:c9:
79:32:cb:0e:c8:60:19:5f:79:aa:50:66:f9:ba:41:
46:01:3c:fe:75:0f:98:d2:73:76:b2:60:ac:8c:12:
66:d9:3e:87:5e:90:a0:b8:fb:49:97:87:03:b6:c9:
21:7b:e0:d7:9c:bd:fc:52:94:3d:eb:9c:f9:f9:ce:
54:57:1d:3b:10:f0:e3:b6:14:05:bb:8a:0e:00:ee:
bb:c9:e5:7a:99:a8:45:bc:77:c4:22:3d:bb:c6:c0:
f6:1c:86:c0:33:37:81:98:24:b9:f1:3e:45:94:2e:
ee:f3:d0:71:d4:6b:a0:4b:eb:d8:45:7c:5b:8f:f9:
47:ba:17:2e:5e:7e:d4:f2:df:64:25:e2:5b:e6:90:
c1:df:08:2b:c0:93:86:d2:be:da:84:fe:26:f0:a0:
61:7d:47:52:d2:31:2b:e6:41:5a:a5:23:94:8e:1f:
8d:62:71:28:b3:b7:64:9c:e3:33:00:55:73:50:60:
db:c3:5b:22:a9:5a:6f:c2:ff:65:cf:ff:1b:af:8f:
f0:ed:e9:96:48:03:7e:fe:43:57:ac:f7:44:34:16:
94:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9B:D6:63:01:1E:53:01:CE:22:03:E0:49:90:B8:C4:75:D8:AB:0B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad9d188c-279f-4fa8-a2e4-88912a4b55db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.86.0.0/16
Signature Algorithm: sha256WithRSAEncryption
53:4f:2a:cc:3b:0d:57:73:cc:d5:d7:f7:bb:f9:73:fa:77:27:
b3:9e:dc:a2:b1:e7:c4:ac:6f:10:9c:50:6d:1f:80:76:da:3e:
cd:69:03:47:38:8b:94:d7:c8:e2:25:56:34:69:d1:a0:b5:09:
7b:b0:c6:cd:c4:04:3f:a3:71:cb:06:06:cf:68:b8:29:ed:8a:
c9:7e:d4:e2:4b:cd:07:63:01:ee:db:4a:3d:ba:d5:14:f6:6c:
98:a3:b2:d3:b8:84:d9:cc:ee:4e:60:a3:86:03:0c:7e:a4:f9:
e7:95:60:00:c6:a0:a1:b5:53:00:42:32:59:33:6a:c9:fd:72:
b8:e0:31:ea:30:f3:5e:32:59:6f:7e:f9:99:14:4f:38:23:19:
87:c8:f4:31:2c:10:08:44:55:18:05:4f:d2:23:52:02:65:27:
13:55:15:c5:3d:53:da:06:23:e6:38:60:80:4e:e7:87:ef:f8:
0d:15:f6:86:36:e6:cc:dd:87:69:38:b0:f7:6e:11:9a:9e:de:
d7:10:49:3b:a6:c0:e1:1d:7c:52:0c:81:e5:a4:cd:cc:ce:50:
a8:ec:e8:3f:8e:1f:5b:b1:8c:16:01:35:c3:f3:d6:b6:5e:41:
f8:71:10:88:7c:40:5e:56:5f:48:d0:9a:da:e3:87:2c:16:2e:
90:24:bd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:00:00 2025 by rpki-client