Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8a268af-6ffb-4e9a-8b3e-e30511039071.roa
File: c8a268af-6ffb-4e9a-8b3e-e30511039071.roa (raw, json)
Hash identifier: gXqotoDXrejqxIfZTtuF7c1AhzpGydwpd7xZM6A/7qI=
Subject key identifier: 84:CE:4D:AD:F0:D0:AF:23:07:7E:66:BC:F7:6D:73:AA:1A:10:AD:31
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2EF410E0FCCFD621FCA061C22F66358A0232A34B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8a268af-6ffb-4e9a-8b3e-e30511039071.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 204.169.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:f4:10:e0:fc:cf:d6:21:fc:a0:61:c2:2f:66:35:8a:02:32:a3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=e4692a748904d19f13ba9a5d04e71476976f102acf6f8526d55756dc181aefaf, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:09:82:8e:fb:92:d8:be:e2:e0:5a:16:a1:
1e:f4:e3:0c:19:44:ec:92:68:d8:a6:d0:e4:2e:1e:
d6:db:a3:84:3b:be:ab:bf:7c:2f:1d:a6:25:56:03:
92:1d:2e:a5:49:46:3a:22:80:27:f3:15:87:b6:70:
8c:99:fb:8f:b2:ff:4c:97:ed:60:12:f7:e2:92:88:
0d:1c:63:bb:ec:f2:57:45:16:59:c1:be:f3:f4:22:
63:3d:2e:4a:2e:db:df:f0:7d:31:32:b3:ce:10:f5:
db:0a:11:7c:76:85:cc:e2:f7:40:80:b5:85:9e:ad:
b2:08:82:4a:d6:18:2b:5c:fd:04:05:74:14:ad:36:
2d:a8:9a:97:ae:80:48:bc:7b:e9:8d:29:c5:89:aa:
85:a6:75:8c:80:1a:7b:5c:3e:58:b2:5a:fc:f6:2e:
ca:58:96:60:11:84:d9:97:26:f7:01:a3:6d:64:e7:
da:dc:21:c6:6e:74:79:54:80:46:e1:7b:04:83:64:
7d:b8:6d:86:35:cc:77:52:86:40:ec:4c:bb:dc:0c:
9d:bd:20:25:3b:9a:82:a5:33:7d:ef:1d:bc:7a:4b:
6d:a3:e5:90:75:93:75:63:96:a9:89:e4:0e:d9:ca:
43:30:0a:a2:6a:0a:4b:09:46:88:2f:c0:6d:64:0f:
e2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CE:4D:AD:F0:D0:AF:23:07:7E:66:BC:F7:6D:73:AA:1A:10:AD:31
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8a268af-6ffb-4e9a-8b3e-e30511039071.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
29:d6:c2:b6:1e:6b:7d:2c:ee:85:80:b1:11:0d:43:cc:22:cc:
9f:f9:da:89:67:9e:a8:a4:32:22:f4:58:b8:27:ae:c7:08:e4:
bf:93:8c:ba:6d:dd:52:89:ea:a8:06:02:5f:d3:3a:63:e7:80:
32:ae:a4:8b:0c:08:70:6e:08:4e:cb:c3:d9:08:0e:50:4a:ec:
7e:a5:41:7e:82:54:a7:5d:a8:00:a4:7e:f5:15:25:c6:40:aa:
7d:33:b5:82:cf:ca:0b:5d:66:eb:82:48:6f:c0:05:d4:66:6a:
37:1c:48:f0:36:a5:53:da:aa:6a:89:55:ed:ef:30:ab:36:56:
f7:2c:df:67:a8:8a:d4:50:5f:71:b8:3c:07:e4:80:e6:e6:94:
8c:05:8d:19:02:33:4b:be:f7:ec:cc:3a:16:14:0b:f6:41:0b:
b5:ff:1f:f2:1e:57:9a:ec:3c:75:d8:38:5f:2f:17:d8:f9:80:
02:ff:f1:e1:6e:ef:e1:40:90:6d:5a:38:01:86:08:77:ec:4a:
0e:16:15:9e:98:ca:b8:ee:45:9f:ca:6f:c4:67:67:28:3b:92:
cc:e8:fc:c2:20:eb:d3:5e:84:db:dd:22:b2:e5:9e:f6:ca:95:
ea:ad:b1:5c:fe:f1:75:c0:e2:78:8c:4c:ab:aa:93:cb:3f:ae:
29:13:e7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:47:36 2025 by rpki-client