Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d16bf4ed-487f-4adc-954b-9b19669221a7.roa
File: d16bf4ed-487f-4adc-954b-9b19669221a7.roa (raw, json)
Hash identifier: 0+bc0TGJFzehJl3P7W8ftO8GvEz5FmTYDU/bdhKJ06w=
Subject key identifier: CC:25:2C:0F:B2:6A:48:CD:E3:A3:A4:99:43:6C:B9:16:D5:05:2A:C6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0877488A899C8ED7571CDBDBC25A293575BCBC43
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d16bf4ed-487f-4adc-954b-9b19669221a7.roa
Signing time: Sat 21 Dec 2024 00:00:00 +0000
ROA not before: Sat 21 Dec 2024 00:00:00 +0000
ROA not after: Sat 25 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 20.142.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:77:48:8a:89:9c:8e:d7:57:1c:db:db:c2:5a:29:35:75:bc:bc:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 21 00:00:00 2024 GMT
Not After : Jan 25 23:59:59 2025 GMT
Subject: serialNumber=3447484368ccaa2f9d10d8d06185c6d0897c5a34d76225724794a8cd7697aa5f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f4:13:89:ed:d4:5d:ef:56:db:1a:6b:f7:c9:
42:f1:33:98:67:d5:ee:60:3b:b9:fe:97:3a:cd:0b:
98:2e:3b:fe:0e:fa:97:cc:d4:35:5b:4d:ae:27:e4:
0e:98:16:ff:0a:55:ec:4e:3b:52:87:36:f3:b9:c2:
19:92:a7:b6:68:85:d0:97:b1:44:ce:56:4e:eb:ad:
68:98:73:18:2e:97:69:e8:d5:51:57:ad:d0:c6:7e:
d2:53:99:13:16:63:d6:ea:e1:3c:e0:72:a9:0e:66:
d6:57:dc:c3:a0:5b:88:00:a1:94:7f:37:1e:ff:47:
7d:6d:8f:ae:dd:02:4d:28:dc:24:d9:eb:29:38:84:
6c:1d:12:1c:ca:73:11:45:10:1e:07:bd:5f:7b:ef:
75:d5:b2:2f:af:49:96:af:15:76:e2:cc:2a:bb:be:
42:8f:eb:cb:46:15:89:7c:34:a1:c2:71:df:38:76:
9f:a7:50:5f:d9:e7:5f:1b:46:ca:88:46:b5:62:84:
d7:9c:4e:a3:63:b5:6f:23:d3:f7:ed:51:09:89:fc:
7f:49:47:f6:02:3f:63:ae:4d:72:64:57:0b:4b:fc:
33:cd:18:54:cc:65:5c:7e:1a:0f:98:6f:97:e9:77:
30:af:47:9d:1c:2f:a9:97:14:5b:5b:d3:5e:f7:49:
13:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:25:2C:0F:B2:6A:48:CD:E3:A3:A4:99:43:6C:B9:16:D5:05:2A:C6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d16bf4ed-487f-4adc-954b-9b19669221a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
20.142.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c4:8f:b6:47:6f:85:c8:bc:0c:a0:38:93:4e:83:74:e5:64:c9:
9d:da:8d:43:fe:79:e0:83:fd:d1:4f:05:b0:3d:8d:09:e9:39:
e9:b5:75:54:71:18:3a:2f:bb:de:e3:be:5a:24:4d:73:10:29:
c9:22:cf:16:a6:24:8f:92:78:ac:16:4d:1f:5b:d3:e4:3c:bf:
39:a8:48:8d:e1:27:4a:89:f3:04:70:48:0d:b7:46:be:c1:5d:
07:52:78:99:e4:f3:e7:1d:86:40:d9:20:a3:6b:9d:07:0d:9f:
21:a9:90:7e:25:e4:d6:f4:fe:35:ad:4c:58:de:7e:d2:10:5a:
24:49:42:a0:ac:d9:4c:b2:82:a1:e1:07:c2:8d:8c:08:02:eb:
d5:6f:32:4b:4e:27:8b:0c:c2:3c:1b:0e:0d:4c:8b:da:cd:98:
fc:68:9f:bd:bf:40:17:c9:b3:a4:82:09:14:f1:04:5f:81:5c:
b2:ba:d9:4a:38:fa:5d:73:b8:4d:0b:68:78:7d:dc:33:a8:92:
4f:cd:48:99:30:01:7d:a1:01:4a:a5:ed:77:50:eb:2f:15:c5:
6d:95:fe:48:b6:c6:4c:96:df:42:f2:60:70:0e:ef:ba:70:45:
37:31:34:46:a2:0e:51:b3:56:23:e1:ed:be:fc:a6:d1:af:0a:
ab:f8:78:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:09:25 2025 by rpki-client