Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6ef1ef5-050c-4d23-80fe-dfcf21a646d8.roa
File: b6ef1ef5-050c-4d23-80fe-dfcf21a646d8.roa (raw, json)
Hash identifier: OV/OGdTm8ZT8bouPM/Q1PVJzD/T2cFlbhXXsmHWjvrk=
Subject key identifier: BC:03:A5:E9:E9:BA:36:45:DF:B3:2F:81:56:D4:36:65:2C:C5:63:0E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 258A6A3302297A59F534DF6230246852E312B824
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6ef1ef5-050c-4d23-80fe-dfcf21a646d8.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.78.212.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:8a:6a:33:02:29:7a:59:f5:34:df:62:30:24:68:52:e3:12:b8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=f5a56c451de7a380e3dfbb664094a7918692beb754fe70a368b8737e3800b7f3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:55:e9:21:45:07:dc:79:48:3e:54:d3:79:ab:
fe:f3:ac:c5:05:9b:2e:1e:90:a6:99:ed:c3:a5:ae:
5d:4a:fc:d7:f4:fb:84:ed:26:49:89:5c:d7:26:e7:
76:a0:6f:6a:a0:8a:87:5d:02:44:36:c7:d6:97:37:
8a:99:03:ba:55:8e:70:7a:03:59:82:24:af:bf:90:
98:5e:f9:f1:f8:bf:1e:93:dc:56:ca:ce:3e:d4:d1:
63:52:fa:3e:8d:f3:be:8e:e4:1d:50:bf:9c:69:21:
7d:f6:45:72:07:22:32:97:26:cb:39:72:4d:1f:09:
97:46:94:82:06:f2:3d:6a:9a:b4:90:c8:30:12:3d:
21:72:75:a4:cc:c6:18:75:2e:64:70:00:14:4f:2b:
9b:8c:8f:93:04:9c:87:5b:07:f1:d9:5c:53:d2:e7:
53:92:da:88:c0:14:02:f8:12:11:41:82:8f:c9:27:
9d:dc:2a:63:bb:62:90:91:0f:4d:94:39:95:6d:c7:
ca:89:64:89:d5:92:e2:eb:77:4f:06:11:e1:cc:82:
e2:66:84:5a:f5:a8:9f:76:de:f3:87:f9:81:1c:61:
bd:2c:ed:50:85:d6:e4:83:d9:02:22:1d:7b:87:62:
b8:87:79:ed:7e:c0:95:24:6e:13:b2:96:ab:17:62:
d4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:03:A5:E9:E9:BA:36:45:DF:B3:2F:81:56:D4:36:65:2C:C5:63:0E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6ef1ef5-050c-4d23-80fe-dfcf21a646d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.78.212.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:46:c6:af:ae:f4:bc:d7:4f:af:f7:cc:ed:9f:9f:1f:6e:63:
53:58:0f:0f:2f:e7:5d:75:b8:4f:78:ed:43:31:62:f1:d9:85:
d4:22:f3:5e:77:b6:96:a3:45:ea:90:f1:4d:10:3f:53:da:c2:
bd:f8:fb:a3:9f:b2:b1:e3:e4:c2:9d:2b:48:86:54:6b:23:b1:
60:fb:ed:78:5a:52:e2:53:1e:57:38:37:9c:86:03:0b:3c:80:
1d:98:80:8b:27:47:d7:ca:e5:b9:9f:7e:a4:06:8b:f9:3c:8e:
c6:93:33:a2:63:57:92:2d:44:1b:4b:3f:61:df:a1:81:30:6b:
18:a2:82:9f:35:95:be:57:b8:9e:21:8f:9c:a8:34:7a:0c:6a:
5c:34:40:56:43:59:a5:64:91:25:86:9b:a5:db:32:ec:c5:93:
d5:b0:ae:1c:40:4c:81:8b:75:a0:72:1c:5e:02:cb:56:46:90:
94:cc:15:ca:50:f2:cd:a2:0e:76:c1:ff:14:02:ea:94:60:77:
cd:5b:9c:ea:29:20:bd:c4:d3:3a:bf:3a:32:49:21:1d:3a:27:
05:2f:7b:b1:c5:83:53:db:8c:1a:34:d3:b9:2a:cb:d7:c1:4d:
b2:ae:d5:8d:47:21:83:2d:3c:86:e3:a3:af:53:13:78:ed:62:
87:d7:d1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:59:43 2025 by rpki-client