Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/caa8821a-8780-44c9-9694-a0adb3e8010a.roa
File: caa8821a-8780-44c9-9694-a0adb3e8010a.roa (raw, json)
Hash identifier: VDRYGKjKIQJzSqRlcga5B6bqMOF2YCWixpDjptXEi0A=
Subject key identifier: 66:30:A7:79:A7:AA:E0:C9:6A:7D:74:51:FE:DE:5E:1B:6D:7A:86:4C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 06092B9EB6FC4A57F16E02CEA6ED8EA15F182D33
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/caa8821a-8780-44c9-9694-a0adb3e8010a.roa
Signing time: Tue 24 Dec 2024 00:00:00 +0000
ROA not before: Tue 24 Dec 2024 00:00:00 +0000
ROA not after: Tue 28 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 16.29.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:09:2b:9e:b6:fc:4a:57:f1:6e:02:ce:a6:ed:8e:a1:5f:18:2d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 24 00:00:00 2024 GMT
Not After : Jan 28 23:59:59 2025 GMT
Subject: serialNumber=8de2a1f04d4bab8f1954b79653f5d570c90da8a2268c85a516f3ffd2b15dcd0a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:c0:86:bb:7a:4e:bc:20:65:3f:c9:51:a3:
78:7c:73:e3:c5:bd:a3:57:18:4a:1a:59:ba:59:56:
6a:79:3e:8d:0c:5a:52:5a:91:d5:97:ff:bc:b0:0f:
3e:ec:71:bc:f4:d5:54:27:f4:22:86:37:90:13:56:
b3:da:9a:3a:74:c9:75:c9:97:5b:0d:c6:10:21:1a:
9b:b7:13:d6:f3:6b:80:05:8c:18:f0:1d:8b:03:77:
3f:a4:2f:0c:43:47:b9:b4:69:7e:1c:ff:fb:ff:ce:
6f:24:c8:fc:e6:37:50:30:32:9f:14:90:23:d3:09:
5a:5f:96:cb:5b:ec:3f:f1:7b:53:66:e4:ef:f0:00:
6e:fd:24:4e:99:c1:52:ea:d5:89:14:17:0f:3a:f6:
9b:42:29:7b:91:47:c7:12:c6:56:fc:bd:1b:2e:4f:
76:c0:92:64:1a:05:1d:80:5c:c1:6a:ff:ca:e9:f0:
cc:ac:66:62:33:cd:50:c7:bf:d1:68:55:40:07:80:
c9:d3:91:04:3b:72:bd:df:94:9e:3e:3a:3d:ae:8c:
67:bd:90:f5:ac:91:e3:9e:49:56:34:26:b1:30:94:
00:b2:1a:00:fa:ca:d6:0a:74:74:8d:10:3d:ab:47:
5d:89:80:a6:c5:f9:75:8c:a2:b5:a6:dd:ce:a2:40:
90:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:30:A7:79:A7:AA:E0:C9:6A:7D:74:51:FE:DE:5E:1B:6D:7A:86:4C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/caa8821a-8780-44c9-9694-a0adb3e8010a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.29.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a2:45:b6:ea:16:89:d4:ee:8f:bc:dc:7c:3c:05:c9:5d:a1:6d:
ad:40:0c:f3:b3:6b:8c:5e:45:4a:4d:bd:b1:15:8f:ac:44:38:
89:7d:b2:06:82:c8:7a:7a:f3:b7:b7:d6:5b:fc:4e:26:76:14:
e5:84:c2:2d:40:39:60:68:b0:62:1a:a8:df:b6:51:99:5c:fd:
8c:d5:1f:8d:42:74:57:50:af:cf:85:9f:6e:e4:95:18:b9:b1:
af:b3:00:db:a0:15:1b:20:be:76:30:26:59:d7:ba:be:32:bb:
9c:0b:d0:03:f7:d5:c7:c5:d4:a5:a7:88:6c:5c:4d:54:66:07:
4e:09:45:f7:24:f8:3f:f9:e1:e9:f1:16:36:68:60:d3:10:15:
48:07:bb:fa:1c:b8:f7:15:2d:6c:15:68:f4:ec:ac:71:68:7c:
bf:26:0e:50:95:62:d4:4f:8d:2a:72:46:16:1a:8b:4e:97:7c:
16:ad:1b:72:07:40:9f:cd:f9:45:25:7a:1b:fd:ef:e7:6f:ba:
57:81:ba:45:f7:de:99:73:3f:0f:75:1e:88:10:69:49:63:2b:
04:31:37:54:99:72:ed:86:95:d6:f8:00:ce:b8:fc:7b:1f:29:
3e:4c:16:45:d7:16:71:ca:2e:6d:87:e3:66:af:95:51:63:ce:
e4:8e:4a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:18:07 2025 by rpki-client