Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b03ec765-f68f-4369-9e54-c2a8007aef9a.roa
File: b03ec765-f68f-4369-9e54-c2a8007aef9a.roa (raw, json)
Hash identifier: 85vfSF+JWSCWqZZwCez/L6E03Na/FL9M7PZLYRRxGUw=
Subject key identifier: 18:FA:01:81:EF:2C:21:95:31:03:82:86:15:6D:EF:5C:41:70:1F:E3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4609C00608FA96469504F732E5B51D0839E39715
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b03ec765-f68f-4369-9e54-c2a8007aef9a.roa
Signing time: Tue 03 Dec 2024 00:00:00 +0000
ROA not before: Tue 03 Dec 2024 00:00:00 +0000
ROA not after: Tue 07 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 161.178.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:09:c0:06:08:fa:96:46:95:04:f7:32:e5:b5:1d:08:39:e3:97:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 3 00:00:00 2024 GMT
Not After : Jan 7 23:59:59 2025 GMT
Subject: serialNumber=901417a0d7423b2ceb37df85bb480787e3a787cceecef1f9f9d620820bd300c4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6c:71:2e:25:15:19:63:b5:53:cd:85:d0:23:
9c:8c:d5:58:49:2f:c3:31:01:12:e1:83:48:ae:36:
5f:3a:24:b4:70:a4:f0:32:ff:9f:2b:9f:63:80:94:
94:0e:f0:23:0a:5b:72:14:e9:33:11:98:c2:8e:ec:
a3:a2:74:a9:0c:ab:96:a0:c4:51:9e:b0:ec:9e:51:
93:01:0e:5b:26:16:b9:ee:d2:c3:19:7d:d4:d6:56:
4c:05:ce:6a:a3:72:03:fd:cd:2d:ca:bb:f6:fb:d6:
e3:44:fc:ab:b0:ac:d7:1e:29:2a:89:9b:3f:12:25:
fd:43:51:18:e8:c0:51:bc:20:9a:be:b0:eb:cd:9c:
fb:0d:6f:e1:df:f9:32:68:ea:01:f8:1f:9a:27:c5:
ae:d4:12:6d:d4:6b:c9:c1:eb:d1:81:dd:67:f2:9d:
e2:4b:88:7f:b6:86:2f:bc:b3:88:a6:9c:5c:5e:c9:
16:d4:9d:31:45:72:e1:b2:c9:c0:4c:fe:26:40:67:
43:99:32:c5:63:28:69:5b:f6:e7:8c:3c:6b:9c:43:
08:92:b8:72:1e:39:61:d6:2f:b8:dd:19:08:13:b1:
58:d2:5e:6c:8a:30:33:99:c9:02:1c:d6:c2:13:b4:
de:06:ea:8c:9e:88:ec:92:30:00:dc:2a:b8:3a:55:
6a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FA:01:81:EF:2C:21:95:31:03:82:86:15:6D:EF:5C:41:70:1F:E3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b03ec765-f68f-4369-9e54-c2a8007aef9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.178.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cf:50:d5:f6:f7:2d:4d:5c:48:f0:cd:c6:d2:88:de:51:98:4c:
69:df:9b:79:16:e8:c9:5a:b2:91:3c:20:ae:b4:d4:7f:0b:4e:
24:d6:c4:2a:55:3e:3d:93:80:40:24:00:b9:6d:6d:70:16:5b:
b4:80:b5:51:d7:a9:f1:85:c1:68:a9:c1:d9:72:e7:5c:3b:04:
20:7c:10:04:72:41:56:22:ad:e9:2f:a2:10:ac:c1:1f:cd:47:
ee:a7:07:c2:00:97:4b:73:fc:82:b1:34:34:63:9a:87:73:c3:
ea:2a:c9:af:fa:7b:63:72:83:b6:86:46:d0:d8:d0:0a:95:1a:
8a:bd:b2:32:67:9b:19:5a:a6:b2:a4:ad:a5:00:8a:54:78:9b:
6f:06:22:62:d9:72:ea:f1:6f:c4:a5:85:c4:20:e7:15:80:98:
ed:56:54:b8:7b:73:c5:4c:10:73:d5:d8:28:aa:f4:a7:b1:f3:
a3:cb:a3:17:d0:6d:ed:ad:34:06:44:38:a0:d9:19:53:b9:08:
fd:09:17:8a:77:8e:aa:6e:a9:31:e3:23:d0:e2:5f:3e:99:df:
f5:46:ec:0e:7c:ef:22:34:a9:5e:12:5f:5c:c6:92:20:39:73:
3c:0e:dd:68:15:ae:b9:b5:95:5f:f8:2a:ff:9d:f4:b3:5b:6e:
fb:38:c6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:07 2025 by rpki-client