Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9f65bea-8ca3-415d-b0e3-6b568f8e01ba.roa
File: c9f65bea-8ca3-415d-b0e3-6b568f8e01ba.roa (raw, json)
Hash identifier: ZwBk03Ai2FNT/1TIGNEYcDGPHp4sF/TNPnCyzxKPZNc=
Subject key identifier: 4D:7D:B2:93:BC:32:F9:CE:55:FD:B1:98:43:08:20:43:41:46:B0:86
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 475E815A037AAD0DE01C3989A52FADA95E3BBFB6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9f65bea-8ca3-415d-b0e3-6b568f8e01ba.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 96.0.120.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:5e:81:5a:03:7a:ad:0d:e0:1c:39:89:a5:2f:ad:a9:5e:3b:bf:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: serialNumber=332de7eddbf8d50596ee95e31f24e5ebc87aeb842309eff267a3ee6b39dd1b09, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cd:27:c7:c7:1f:ab:db:b7:8a:a3:62:fd:4d:
d7:78:a0:b2:e8:82:3c:d4:e6:a7:f1:c7:39:e1:51:
a7:3c:b5:c8:1b:48:e7:43:22:db:87:5b:74:77:7e:
67:23:d6:e9:3f:7d:46:9d:e1:ab:4f:18:34:e1:35:
af:bb:e5:ab:3a:04:c4:d3:ba:df:df:fc:99:1c:55:
56:3f:ef:a0:1e:85:ba:b1:be:08:af:91:89:d0:b8:
1a:e5:f2:92:7c:12:9b:a8:25:43:59:b2:fd:d8:d9:
f9:c4:cf:00:ba:78:fd:06:09:96:f8:ec:4f:4b:fc:
0f:16:53:c0:9b:29:71:a4:0a:23:da:b1:d9:c8:8c:
b8:f2:29:86:b1:79:40:4a:a7:e3:fb:b2:1b:e2:eb:
9d:64:84:77:3f:2e:32:19:b3:5e:de:67:08:7d:e3:
76:00:9c:22:78:38:b7:7b:7f:47:0b:e7:8a:f2:54:
9f:f8:07:46:04:3b:ee:4a:fd:bb:da:cb:d1:a2:2b:
84:c0:3f:62:78:a1:1c:53:2c:fa:a3:12:54:b5:d6:
3a:21:86:42:41:a2:44:d7:e7:b0:75:fa:28:39:33:
9d:b0:39:87:f2:80:72:bc:31:24:53:e0:06:d3:27:
f3:46:30:99:7e:c4:e9:8f:dc:31:32:2b:20:75:00:
0d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7D:B2:93:BC:32:F9:CE:55:FD:B1:98:43:08:20:43:41:46:B0:86
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9f65bea-8ca3-415d-b0e3-6b568f8e01ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.0.120.0/21
Signature Algorithm: sha256WithRSAEncryption
30:d1:6d:e4:aa:14:22:25:09:0b:5c:74:f5:16:f4:d8:9b:f1:
35:ea:15:0d:73:36:10:11:a3:6f:11:35:01:9f:b8:34:57:18:
45:f9:d5:8c:7d:25:35:73:f9:7c:d2:39:bf:6c:9a:97:9f:8c:
74:2b:a1:0c:4b:eb:f6:46:f8:f9:4f:50:35:0b:e1:ee:10:12:
28:5a:21:70:81:d3:3b:a6:a0:8d:d5:a4:30:b7:bf:5b:a5:ad:
8b:0b:1c:f0:b5:02:9e:d8:73:07:e0:0b:c0:e8:e3:47:9b:37:
88:21:43:98:44:8e:55:25:15:93:e6:1f:b1:3a:7c:29:d8:45:
3e:39:8c:7a:9e:13:c2:3f:7c:22:05:7a:c5:b3:d4:b1:0e:f7:
57:1f:d8:55:e2:cf:f4:97:0e:9d:de:ed:4d:1b:55:2a:83:0a:
a8:a8:f9:ff:c6:d4:e9:3f:2b:f6:0e:92:ff:9d:ed:c6:1b:13:
e3:a2:be:11:9c:7a:0a:47:b3:43:48:76:33:09:2d:95:df:0f:
8b:9b:21:2b:df:6e:f6:43:4c:13:3d:8c:6a:48:c9:e0:69:df:
b6:0a:b3:03:08:14:68:d1:2f:e2:f6:7c:70:22:b1:00:f7:b3:
29:e1:00:4e:94:7c:37:54:a5:e1:bb:c6:72:20:4d:f6:48:7e:
bf:39:cc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:20:33 2025 by rpki-client