Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8384fab-b30c-47c5-9c5e-5cdf2bba1cb3.roa
File: c8384fab-b30c-47c5-9c5e-5cdf2bba1cb3.roa (raw, json)
Hash identifier: PNAFmAhZ04kwehuzi5RTi1q29whIYKVw+AnHgW+kmS8=
Subject key identifier: F1:40:26:72:5F:2A:93:6E:68:0E:BE:2D:D4:69:C6:16:87:46:44:DE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7C9F0674134B8FCA7ACD76EAC5D6B30B2A8F2DCC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8384fab-b30c-47c5-9c5e-5cdf2bba1cb3.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 16.52.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:9f:06:74:13:4b:8f:ca:7a:cd:76:ea:c5:d6:b3:0b:2a:8f:2d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=0cd19136e07687a142058864458f9ff4f4197f3dd1d7ff4ce19e7996a067f52a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bc:97:31:8c:c9:c7:eb:f2:b9:ec:53:74:4a:
f3:91:49:18:90:93:d0:ae:04:19:82:74:60:d8:5b:
99:dd:29:65:a2:1a:56:31:64:71:1d:85:50:ef:83:
ea:6e:47:c5:85:af:97:98:e1:f5:56:55:29:4d:ef:
12:b7:6a:5b:da:8d:84:ec:de:48:49:ee:8e:46:86:
cb:e4:93:b4:8b:dd:f6:63:2f:70:e1:28:06:ee:94:
26:9b:85:05:e5:8c:44:c9:90:2d:68:88:00:98:8c:
37:f9:c7:02:88:b2:1c:ac:81:98:26:9c:da:5b:17:
3c:0b:b4:df:a7:e4:1a:e7:3c:df:68:03:1f:a1:06:
d1:e8:4b:8b:df:fd:7c:93:62:ae:88:b1:f0:4e:c0:
a6:72:dd:13:13:54:42:c5:38:c4:74:ec:ce:68:4d:
8c:77:97:b4:98:8d:bd:97:92:94:28:c6:19:27:4c:
ad:a1:be:20:6c:7d:7e:66:83:31:d3:56:a5:e3:07:
05:84:de:04:93:b1:4d:21:8d:e5:a1:4f:f1:aa:fd:
4c:b0:6d:5f:09:78:3a:1f:15:05:e0:c8:52:07:63:
e8:d3:e6:00:65:50:25:c8:ef:e0:a8:3f:67:9e:a3:
b6:96:4d:0f:f0:43:37:27:a4:d6:45:f8:5a:6e:c7:
7b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:40:26:72:5F:2A:93:6E:68:0E:BE:2D:D4:69:C6:16:87:46:44:DE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8384fab-b30c-47c5-9c5e-5cdf2bba1cb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.52.0.0/16
Signature Algorithm: sha256WithRSAEncryption
22:06:fa:22:2a:76:5a:34:33:0f:cd:5d:95:0e:ca:3d:e4:d8:
2f:0b:9b:29:b0:3e:fa:59:d8:97:f8:46:f2:93:ff:bd:a1:15:
dd:2c:ca:d0:dd:f4:90:25:03:c3:a1:93:a2:48:84:d8:89:b1:
1d:d6:d2:f7:9d:f9:eb:ac:7a:24:ed:64:ed:f6:c9:b2:8b:88:
13:d9:30:6f:db:1c:bf:fe:bb:bc:43:6d:89:05:15:d2:46:fb:
d5:f4:41:2d:cc:fd:dc:d0:76:4f:c3:a8:86:59:45:2c:bc:d8:
2b:c4:aa:ba:50:4f:43:25:81:44:9e:ac:c0:c8:80:4e:cc:dd:
1b:5c:c5:d4:c4:fd:67:b4:e9:5c:70:13:09:7d:97:03:fc:db:
c6:e5:ca:12:c7:c0:58:74:70:10:43:ff:7d:b5:57:b5:e0:02:
df:00:29:8d:90:f7:c4:56:35:5a:b3:52:22:8c:20:86:69:cd:
40:78:8b:d4:82:d5:89:f2:01:7e:73:a3:de:ad:12:39:36:71:
a7:e8:51:15:25:50:9d:64:59:8a:77:67:89:83:1d:ce:7c:d1:
cb:8e:a1:bb:2e:b7:7a:c6:47:17:79:b0:7e:e3:9e:84:67:df:
5b:60:84:6b:a0:51:eb:78:31:b5:32:37:8f:0e:14:eb:44:58:
36:95:64:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:46:55 2025 by rpki-client