Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b095a660-86ef-4f14-b408-359633b8d706.roa
File: b095a660-86ef-4f14-b408-359633b8d706.roa (raw, json)
Hash identifier: /Z3i8p48McNHKYgnuEveG6/qmb9blSoftO4CRW6AgZs=
Subject key identifier: A2:9A:A9:BA:F4:30:29:97:94:1C:D3:04:AF:E8:4D:E1:F4:EF:21:A4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6C533889DB726FE2B0AB6101BB208794A4295648
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b095a660-86ef-4f14-b408-359633b8d706.roa
Signing time: Tue 03 Dec 2024 00:00:00 +0000
ROA not before: Tue 03 Dec 2024 00:00:00 +0000
ROA not after: Tue 07 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2620:107:4000::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:53:38:89:db:72:6f:e2:b0:ab:61:01:bb:20:87:94:a4:29:56:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 3 00:00:00 2024 GMT
Not After : Jan 7 23:59:59 2025 GMT
Subject: serialNumber=3d8ba6fa7472f56a861e64a9f986e7ed94c64f52d123e777b27d39b4110fcf99, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:50:bf:ed:cf:1b:54:4b:56:c0:58:db:9d:
d5:1d:3e:ca:d3:fa:8d:78:13:04:94:de:58:84:2e:
5d:90:76:9e:cb:87:aa:79:b0:50:d8:98:77:d6:e9:
57:9b:f6:73:6c:ad:22:af:25:25:f0:70:88:c4:71:
00:9d:04:cc:8e:22:bf:2c:a1:10:39:30:5f:eb:71:
2d:2b:9f:c7:4c:36:1b:08:d0:d2:37:c1:7c:9a:b6:
af:d1:81:67:a9:2b:cf:8e:01:0d:24:29:5b:4c:b2:
4f:bc:16:50:54:d2:91:97:c4:b8:38:8f:0f:12:e2:
82:9e:7c:0c:91:91:0c:99:d5:f0:02:07:3a:0a:12:
58:ae:fe:61:38:f9:fe:e3:ba:f0:70:66:5e:95:95:
73:1f:11:58:68:a3:57:f2:b2:49:71:d7:82:0c:bd:
57:22:23:c3:d1:f9:f3:5f:7c:5b:2b:65:65:aa:dc:
ae:74:b7:a3:55:3b:f0:1e:f3:08:47:28:80:4d:f4:
09:92:f1:45:83:0e:91:6f:82:c7:45:da:af:35:bb:
3c:15:03:dc:93:b9:af:11:36:1a:b8:f4:cf:41:07:
98:08:a5:a7:66:f1:2c:fe:3a:71:ab:0c:cd:ff:6b:
2d:2b:77:38:8f:0d:50:b2:e1:63:55:81:fa:e5:c3:
57:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9A:A9:BA:F4:30:29:97:94:1C:D3:04:AF:E8:4D:E1:F4:EF:21:A4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b095a660-86ef-4f14-b408-359633b8d706.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2620:107:4000::/44
Signature Algorithm: sha256WithRSAEncryption
97:bf:61:53:98:a8:53:ee:2d:09:22:4d:b3:5e:7c:b1:ac:e0:
71:bb:48:68:c3:d4:a3:96:31:9a:1d:d7:a0:a0:22:f6:6e:2d:
5f:b8:be:f5:56:89:63:a3:47:bd:aa:11:ec:73:84:aa:cc:a9:
ce:cb:f0:0c:e8:bb:fc:b4:b7:a4:cb:98:d4:70:14:70:2c:c2:
c6:4a:5e:4d:36:82:a3:bc:d9:4f:64:69:cf:6d:54:bd:e9:da:
e6:5f:e5:0c:49:6f:b4:1b:02:d2:17:fd:6c:2a:d1:27:56:aa:
8f:75:b2:33:c6:9d:11:2e:4c:15:79:a0:21:af:7b:f0:e9:d8:
de:ba:0d:2b:88:b4:fe:d5:0b:44:f3:38:44:23:df:b9:c5:4f:
9a:c6:93:ce:e6:ca:ad:bf:71:d5:a4:b2:1c:26:7c:76:27:4b:
f7:81:bc:70:2f:58:92:79:81:fd:2b:7f:5f:ec:e5:a5:99:0a:
5a:5f:df:4e:8f:bd:8f:49:20:45:48:ae:e9:f0:fd:57:ad:3d:
bb:5a:98:c7:6e:60:86:23:9d:a7:2a:77:ff:ac:cb:b3:26:9f:
91:bc:33:ec:13:c0:f5:0b:1b:06:c7:6b:35:ff:6c:d5:6b:b5:
cb:d4:db:34:dd:81:bd:0a:68:25:94:34:de:b3:a1:b3:ba:af:
6a:60:02:1a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:51:58 2025 by rpki-client