Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8b9a095-9620-4454-802c-74eae6364424.roa
File: c8b9a095-9620-4454-802c-74eae6364424.roa (raw, json)
Hash identifier: opDTKiQ+62ZD4T9gfAzwyhDJy1o3r4DnFAmQC8nOkkw=
Subject key identifier: 24:21:3C:49:F9:37:F7:3B:EE:5F:4F:7C:C1:02:65:67:1C:FA:7C:30
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0DCD06A293B26F8E9CE64CE66F3E313DFEFC807D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8b9a095-9620-4454-802c-74eae6364424.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ffc:1000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:cd:06:a2:93:b2:6f:8e:9c:e6:4c:e6:6f:3e:31:3d:fe:fc:80:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: serialNumber=3a74fd56065fd836bf7c5e12d6b339301cd2a5019d77c8de1ecc523d994aac10, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c4:b0:28:a9:a8:51:f3:dd:57:74:55:29:c4:
02:6b:24:f5:c1:16:ca:2f:88:bf:a8:e2:cb:2b:5a:
c0:43:f9:8b:b1:91:db:d4:bb:8f:49:31:a1:fe:07:
c1:e2:bf:84:33:83:79:ca:5d:99:dd:e2:92:43:c5:
f9:e0:d9:38:ef:2f:25:fb:02:4c:eb:d8:ec:8d:27:
f8:ac:d3:4d:34:aa:50:01:a7:dd:f7:84:e3:8a:0b:
7b:12:d9:44:83:af:9f:34:24:6e:13:e8:9c:0a:58:
50:ad:74:d9:cf:2c:97:cd:32:79:cd:58:76:c5:4a:
44:47:cb:ce:5c:a5:58:21:a6:47:b8:f5:91:aa:be:
64:08:79:bd:44:a2:39:62:4a:12:de:e3:13:25:c4:
49:a1:66:fa:c7:ee:8d:87:e0:d9:59:08:c5:09:74:
46:31:6f:c0:ce:88:07:e9:28:48:ca:61:63:86:fc:
9e:f5:e8:10:72:9b:c0:c9:84:67:ef:0e:11:89:2d:
25:21:b2:39:c0:7f:1b:85:df:d7:b2:9d:11:aa:dc:
a3:af:aa:cd:7d:83:cc:65:c5:d9:7f:73:c7:f3:52:
0d:ce:6a:8e:15:96:c3:75:f2:f6:ae:2e:bc:78:da:
77:dd:30:c0:87:cb:9b:5c:71:45:cb:20:ee:1d:ed:
9b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:21:3C:49:F9:37:F7:3B:EE:5F:4F:7C:C1:02:65:67:1C:FA:7C:30
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8b9a095-9620-4454-802c-74eae6364424.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffc:1000::/40
Signature Algorithm: sha256WithRSAEncryption
1c:dc:37:db:6a:f5:bc:47:7d:d2:33:b4:3f:34:05:dd:af:3a:
b5:0b:ef:ba:d2:a5:19:b7:14:5f:00:40:db:18:0a:fd:30:63:
89:51:2f:6f:d8:6d:a7:90:ef:09:fb:08:83:fd:18:4d:83:13:
45:c9:81:ed:49:6f:51:01:b2:a7:e2:50:aa:92:e3:c3:ac:0f:
4e:80:65:5e:ab:f4:e1:55:80:9d:bc:15:13:12:29:b7:de:08:
ae:c0:31:9b:63:66:0d:a6:4e:07:6c:25:52:48:0e:7c:a4:ae:
ab:90:d3:11:ea:8c:f4:44:4b:f4:88:5a:f1:2b:52:98:a9:f3:
a4:5e:06:0e:0c:d6:5b:c2:57:2f:8f:ae:bb:92:1d:36:07:3f:
79:91:91:61:d2:c6:83:09:39:09:5b:5e:3b:f8:f7:dd:7c:36:
d3:9d:cb:d1:d0:70:5b:26:64:a1:c3:ad:ff:55:98:22:8e:94:
53:6a:f8:40:16:ef:ba:f8:e3:4f:8d:d1:b8:20:3e:81:a5:28:
ad:6f:e4:04:d6:4d:ec:59:df:21:16:97:5b:e7:27:19:ae:59:
06:e3:35:3c:79:e8:6f:54:1f:25:b4:b5:69:82:ec:85:38:4f:
9b:fd:40:b1:1a:25:05:a2:5c:ab:6d:e6:13:35:45:1a:9e:d2:
55:60:9e:ea
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:01:26 2025 by rpki-client