Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0e1a1b0-16af-422f-87f5-f4b32d0fd57b.roa
File: c0e1a1b0-16af-422f-87f5-f4b32d0fd57b.roa (raw, json)
Hash identifier: BWQatnL79iwybdJbMioAro0AMQnpfwbAK8WXtPEaowg=
Subject key identifier: 8F:E6:AD:A1:FC:99:65:9C:21:11:ED:47:49:D1:42:D7:CD:18:8C:F9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 08FAE7C52D09704344112275274C8D9B91A03E76
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0e1a1b0-16af-422f-87f5-f4b32d0fd57b.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 56.184.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:fa:e7:c5:2d:09:70:43:44:11:22:75:27:4c:8d:9b:91:a0:3e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=3123010db8d80beef12ebe145df92fc7e0722bf6e3d791ac382aa7a671b3a240, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:29:ba:77:ef:0b:5e:ad:a1:78:d8:0a:95:ed:
71:ec:ba:6c:9a:03:24:3b:ff:9c:95:10:e8:ff:83:
03:bf:df:48:88:de:61:f6:ba:9b:89:31:e0:76:de:
9f:42:95:5c:97:9a:93:c0:47:87:16:32:cc:7d:47:
dd:0c:5e:cd:e2:11:17:59:a3:ab:57:e0:28:67:56:
13:62:c1:c8:c2:1a:2e:7b:2b:48:14:0a:64:e0:d7:
1b:63:73:e8:27:f4:07:f9:c0:fa:61:87:11:10:04:
a2:49:ca:f7:34:2c:92:e7:26:e5:cd:d7:cd:40:b6:
ca:95:69:08:d8:06:2e:d0:0f:e0:25:d7:94:df:83:
ef:fd:ed:25:22:b8:4e:79:27:1c:1c:09:b0:fe:8f:
09:9a:72:20:6c:91:31:37:e1:38:57:a5:d0:8e:92:
48:8c:c1:d1:3b:67:63:a0:77:06:a1:97:a9:ae:71:
df:28:c8:34:29:c3:c4:1b:28:67:30:e9:17:46:d9:
d6:77:55:f7:c8:55:8e:7a:21:f4:95:d7:83:63:16:
b4:dc:65:dd:88:dd:d9:34:cc:ff:c7:ff:37:8b:a0:
83:f5:de:5d:69:0f:71:24:7a:f9:94:bb:c6:1a:c8:
b8:aa:a0:c4:ff:c2:13:c9:c6:f9:c6:73:26:c6:90:
2d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E6:AD:A1:FC:99:65:9C:21:11:ED:47:49:D1:42:D7:CD:18:8C:F9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0e1a1b0-16af-422f-87f5-f4b32d0fd57b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.184.0.0/16
Signature Algorithm: sha256WithRSAEncryption
18:ae:4c:ce:26:18:a0:88:0b:14:04:dc:70:4d:79:6c:ac:77:
d2:dc:4b:bc:a6:72:3c:0f:33:e8:23:1a:29:ac:57:20:88:32:
b2:c4:18:78:94:a4:fe:1e:7c:45:f5:9f:24:c5:37:76:f1:8b:
dd:f1:21:bf:9a:16:d0:c6:15:90:90:19:2b:66:e5:cb:0f:46:
0b:dc:3f:a9:1d:50:d0:cb:f8:4a:5e:c6:c0:37:2f:40:63:8c:
0a:38:9e:c8:9a:3d:8f:bd:2e:fd:33:df:9c:18:ef:c0:51:a4:
8d:cd:83:11:81:b4:c0:32:a3:76:08:06:a5:77:b8:f7:c2:57:
c4:57:61:18:f6:73:87:0a:ad:63:e8:d2:e8:3a:77:27:78:03:
62:d6:25:dd:67:8f:29:f3:8f:bc:5b:fc:57:87:9c:e2:1f:52:
31:f9:99:03:43:cc:ad:e7:cc:1a:41:0a:ac:bb:42:4a:21:ce:
5f:db:5f:c2:52:1d:c6:a4:2a:6a:d0:9f:f1:f7:2d:69:cc:ac:
81:59:e5:d2:32:be:9a:0e:72:12:68:25:02:91:e6:44:5b:d5:
87:75:01:a3:ba:02:e4:e5:74:a0:31:42:82:7b:1f:31:a0:c5:
4e:d7:4d:b7:c2:ed:4b:5c:1d:e5:ec:ea:cc:9e:cd:83:8f:ec:
d6:cb:4e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:20:32 2025 by rpki-client