Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d325ef94-9594-41b0-a5f8-d514690abe42.roa
File: d325ef94-9594-41b0-a5f8-d514690abe42.roa (raw, json)
Hash identifier: qY4Z58af6HrSi0v7M33Od2ZOrXsfFie9TA2x6tCQs10=
Subject key identifier: 90:A2:1C:E9:E4:4A:1A:37:7E:7A:C6:2F:C1:AD:32:41:1C:91:9A:D5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3298726233CFDAD3C5BEC79B805E288EA5D401A4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d325ef94-9594-41b0-a5f8-d514690abe42.roa
Signing time: Fri 20 Dec 2024 00:00:00 +0000
ROA not before: Fri 20 Dec 2024 00:00:00 +0000
ROA not after: Fri 24 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 40.164.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:98:72:62:33:cf:da:d3:c5:be:c7:9b:80:5e:28:8e:a5:d4:01:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 20 00:00:00 2024 GMT
Not After : Jan 24 23:59:59 2025 GMT
Subject: serialNumber=8a8f3cc927d66bc7fb76e11cfee7b830c8c7b7ff2443fa58ed27995c59bca897, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:b7:3c:59:c5:02:80:e9:eb:0d:c2:c2:c6:
7c:ae:7a:19:4b:d9:de:18:d7:b5:9c:f4:7d:3b:71:
b8:0d:37:07:c7:29:30:a6:f4:92:a9:fa:9c:ce:52:
8e:e2:80:cd:5d:9d:b5:4b:32:bd:75:67:75:5e:40:
81:e3:d3:bf:17:af:0f:17:35:08:76:b9:c4:d4:52:
ab:16:43:6a:c7:10:91:70:07:24:23:df:58:01:87:
fd:f7:bc:eb:51:39:3d:bd:d7:e3:aa:cd:37:6e:e6:
e7:e6:79:85:7f:48:85:26:01:e9:88:f6:cc:39:ec:
69:00:78:64:12:13:2c:1c:89:7a:f8:2e:0f:79:57:
8d:e4:94:35:b7:47:35:e7:13:81:58:9a:83:96:05:
02:42:a3:5b:95:71:7c:75:0c:e7:62:1d:2f:63:b8:
10:d2:49:44:a6:e6:df:91:dd:83:8b:48:85:f3:86:
91:d9:c3:1b:75:78:28:97:70:d4:5c:b5:03:f2:14:
c0:18:f2:fc:62:d5:35:17:90:ed:35:7f:57:31:13:
48:55:0b:c2:51:9b:e0:82:d2:06:2f:43:c3:9e:50:
40:b7:39:9c:36:d5:eb:0b:f8:9f:79:89:b0:fb:b7:
37:6f:7d:27:b4:ba:e9:65:9e:38:eb:10:03:5f:ed:
00:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A2:1C:E9:E4:4A:1A:37:7E:7A:C6:2F:C1:AD:32:41:1C:91:9A:D5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d325ef94-9594-41b0-a5f8-d514690abe42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.164.0.0/16
Signature Algorithm: sha256WithRSAEncryption
be:11:ee:e2:a3:e8:fa:c0:55:29:28:37:b5:53:16:88:a4:0a:
3d:c0:8a:d0:e2:de:51:93:47:16:74:06:71:4c:88:8d:73:9e:
10:eb:01:49:69:5b:63:12:55:0f:09:df:63:6f:e0:5d:d7:a7:
7f:95:59:51:68:87:dd:e0:d5:68:6a:f1:c1:ac:0a:b2:f3:41:
af:05:6a:7d:29:f0:1b:2e:e9:aa:2d:1e:c3:41:55:35:89:e2:
08:80:b6:c1:c5:bd:db:b0:40:49:ee:48:38:2c:2c:6e:c1:b9:
90:cd:67:bb:b8:98:e0:2b:1f:1a:0a:87:8c:6a:90:1a:a8:bf:
a6:b4:80:ca:23:b5:bd:03:90:6f:ed:d5:53:37:77:c8:5f:1f:
38:62:15:f2:27:5e:cf:48:50:92:23:55:18:90:6c:d2:3e:3b:
a7:fe:83:5a:a0:3e:bc:21:bc:1d:d0:0b:b8:e7:03:df:13:87:
f0:bc:6c:e9:10:f8:6a:49:0a:a5:2f:ab:aa:ca:48:b4:46:fb:
71:bd:82:ef:40:06:fc:d8:be:f1:97:a9:ba:00:c5:e8:d8:ae:
37:4e:a2:fe:b1:6b:b9:de:96:86:ea:20:ee:1c:35:a4:aa:46:
dc:32:39:9e:fb:ef:1e:4f:a5:89:d4:5a:a9:38:8e:c2:e6:c5:
a7:cf:c3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:53:01 2025 by rpki-client