Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d25a66aa-5fd4-47ad-b33d-3da725f4ee78.roa
File: d25a66aa-5fd4-47ad-b33d-3da725f4ee78.roa (raw, json)
Hash identifier: YugkmEhfLHN3TohPX8MtOnM6+DJyA+P8n0ZBJk4eVeo=
Subject key identifier: C1:17:74:A4:42:A7:94:48:FD:54:FE:B9:0D:CE:9A:94:7A:F8:44:3E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3968F4BC81B8A2C490DB94A0D8D5C3E2EE489AD8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d25a66aa-5fd4-47ad-b33d-3da725f4ee78.roa
Signing time: Sat 11 Jan 2025 00:00:00 +0000
ROA not before: Sat 11 Jan 2025 00:00:00 +0000
ROA not after: Sat 15 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 205.210.112.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:68:f4:bc:81:b8:a2:c4:90:db:94:a0:d8:d5:c3:e2:ee:48:9a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 11 00:00:00 2025 GMT
Not After : Feb 15 23:59:59 2025 GMT
Subject: serialNumber=83429f777f14e4be3666c7765f703ebc198f0dd1867245112821dfc377791f90, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:27:50:9b:37:b2:fc:27:03:42:7d:42:d3:f7:
bb:50:db:f2:a1:5f:2d:64:a1:d1:c8:b4:b6:5c:b2:
a6:65:93:cf:1c:1b:2a:c1:02:d7:61:48:18:f3:fd:
17:f8:f4:51:fe:7c:05:8a:3e:40:51:10:10:64:94:
07:11:00:ee:5b:bc:c7:9f:22:39:85:4d:bd:24:3c:
ff:0d:64:0a:03:1d:77:ab:c6:7e:8a:d9:b1:ea:10:
5f:bc:ee:66:8a:dc:ce:10:32:89:a1:3a:89:5d:6d:
2d:ed:5e:1c:83:fb:36:66:a1:8e:b7:4d:5f:5b:87:
66:51:37:08:0b:04:65:d3:ab:4a:87:b1:89:4c:c5:
52:45:77:9a:1c:ee:db:cd:a6:41:90:65:d7:46:89:
a2:eb:c8:55:0b:94:ff:c2:ec:7c:58:9d:98:a0:25:
63:8d:1d:8b:e4:00:ce:72:bd:df:b3:7a:da:bb:07:
ea:d5:84:7b:51:2d:4a:7b:e0:ed:e2:f1:e6:99:11:
f4:d3:d4:fc:f2:13:5c:63:4e:07:a5:da:55:61:65:
fa:23:9d:92:9c:ea:35:84:cc:a4:3b:3d:e3:4b:75:
19:be:d0:4c:ce:7f:26:a0:ab:29:20:5e:eb:b1:5a:
29:e8:4b:dc:70:b8:53:48:89:ac:b4:56:56:5e:50:
1d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:17:74:A4:42:A7:94:48:FD:54:FE:B9:0D:CE:9A:94:7A:F8:44:3E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d25a66aa-5fd4-47ad-b33d-3da725f4ee78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.210.112.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:06:02:2e:2e:4b:43:40:8b:8c:8d:50:fb:44:ed:4e:06:26:
4a:64:09:4b:c3:32:c8:c4:d4:16:4e:72:e7:ef:4e:f5:e1:cd:
50:14:66:0c:22:e6:57:3f:e0:67:f0:3a:b3:41:05:18:c3:e8:
2d:b0:80:e2:41:85:f0:d1:78:0e:0d:87:8e:dd:a7:ff:cc:20:
9b:6d:70:57:82:7d:48:cf:24:a7:65:57:6f:a2:c5:24:ae:19:
5f:96:c0:02:5c:88:c7:1a:5b:c5:b1:fd:e2:1e:c7:f7:2c:e6:
e9:2d:5c:6c:26:6e:71:31:9a:af:5f:f9:6a:47:ae:84:f0:af:
4d:68:3b:ca:ee:90:24:a9:67:25:60:2b:ce:a0:04:b4:a0:ad:
21:0b:49:f4:1d:d1:05:4a:86:cb:b5:9f:d0:aa:f3:71:56:74:
14:b4:ed:03:c9:81:5a:5b:a5:76:6f:6a:00:9e:bb:9a:f0:7c:
6b:96:b0:36:cf:69:1c:a0:d6:d8:6e:ea:0c:50:af:b5:16:4a:
a5:9a:f2:13:1f:2e:79:4c:36:3b:b7:f4:2f:b3:a6:69:1c:dc:
f8:d9:fc:6a:47:bb:c4:59:dc:b6:a3:91:dd:33:48:19:4e:85:
0a:96:e4:9e:71:91:b9:4b:cf:74:96:d1:42:08:ea:1f:53:4f:
1e:e0:96:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:09:25 2025 by rpki-client