Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0c24b63-c55c-4b90-99dc-6e57aaf114c2.roa
File: b0c24b63-c55c-4b90-99dc-6e57aaf114c2.roa (raw, json)
Hash identifier: jslgIxJUiUDOogqvGo8pDxZILVWDC9fVXp1XsnAeEtY=
Subject key identifier: 00:0A:56:C6:69:DD:3D:B9:3C:68:60:E9:7F:39:2A:C0:50:33:21:1C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6F82194EAC1B49B95177EF6FF3A17D1A54F20E98
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0c24b63-c55c-4b90-99dc-6e57aaf114c2.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 104.255.56.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:82:19:4e:ac:1b:49:b9:51:77:ef:6f:f3:a1:7d:1a:54:f2:0e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: serialNumber=07073a1afcd611db762dc31374992a128d9ee7e2b89351f6284b30b46da72656, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e5:66:43:5c:25:90:01:26:0c:a8:21:56:2e:
bf:9a:e3:30:e7:9f:d3:39:3b:31:fd:e6:d6:20:a0:
04:80:26:02:51:08:e0:21:e9:4e:e8:58:72:1a:d2:
43:1a:f5:31:90:93:4c:ae:d5:4d:8f:bd:9c:0f:49:
64:9b:ea:44:e6:53:28:9d:61:d1:40:b1:ce:ee:4a:
41:e5:2e:fd:ef:56:a3:56:77:76:b3:84:fb:ff:e4:
ea:59:5e:8b:d4:4d:73:a2:39:22:48:d5:7a:1d:98:
af:db:71:8d:f7:d4:02:8e:3e:99:b8:96:ac:c1:1b:
ff:5b:30:92:98:59:39:3e:34:84:d4:2c:5a:82:58:
4d:bf:be:8d:09:3b:26:01:95:a8:68:e2:00:c2:41:
20:fd:c1:4f:19:6d:2c:d7:ac:c1:b9:8b:10:9b:74:
ad:2c:c8:3d:76:76:cf:8a:db:df:de:74:a9:3d:df:
5e:9c:e8:e5:31:7c:19:7e:b1:c3:8e:5c:80:08:6b:
e4:53:f6:09:7d:77:ce:20:73:59:a8:b5:bc:6c:7b:
22:0e:e3:4c:05:3f:b2:d4:82:95:f1:bc:dc:f3:78:
4e:8a:10:fa:1b:1b:75:e7:5c:eb:4c:8f:a8:d6:b9:
01:3e:e4:44:34:54:bd:bf:6e:57:70:83:46:9d:71:
49:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0A:56:C6:69:DD:3D:B9:3C:68:60:E9:7F:39:2A:C0:50:33:21:1C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0c24b63-c55c-4b90-99dc-6e57aaf114c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.255.56.0/21
Signature Algorithm: sha256WithRSAEncryption
27:e6:ab:cf:6d:36:65:97:0c:2a:b9:3b:6b:16:8a:ee:b0:47:
74:0b:03:af:14:37:ad:4c:60:e4:ec:f2:6e:37:72:ee:46:fe:
65:61:47:20:2e:c9:64:0f:80:00:a2:c6:e9:38:70:ec:04:bf:
f2:bd:32:78:1c:ad:fc:2b:64:7e:51:2a:93:96:9b:a9:20:0e:
93:ab:d0:58:c2:ab:3e:39:8b:f5:ec:2c:d6:21:c9:97:f9:a7:
73:31:57:8a:8b:f0:d9:a8:a6:a0:6e:24:71:35:bd:58:db:31:
33:80:5d:80:3b:5c:16:db:58:f9:ef:f9:8a:2f:f5:92:ac:1c:
cf:d3:b6:e6:7a:8e:8d:ab:33:99:aa:12:c5:95:9c:fc:ba:e1:
64:58:65:4a:ea:e2:97:cb:84:fb:26:f6:10:f8:42:3d:90:42:
ab:03:04:c1:dc:1e:d0:be:09:86:e6:1f:cf:f4:2b:05:2d:94:
21:1c:3e:10:45:6c:f2:ca:3a:16:94:01:76:78:b3:20:2e:54:
3a:09:36:58:04:95:81:20:57:bc:26:d4:9d:5c:c0:53:9a:cc:
e4:15:43:a4:8d:7d:fd:03:80:aa:39:57:bc:61:f5:e6:6b:32:
dd:a0:06:66:a2:fe:2c:ed:7e:48:74:5e:8a:45:70:ae:aa:ba:
3d:38:67:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:13:34 2025 by rpki-client