Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d722762c-5028-4cce-aec6-c5097498d4f3.roa
File: d722762c-5028-4cce-aec6-c5097498d4f3.roa (raw, json)
Hash identifier: vN9OhBNGymQlLciNMFaNVxjACUhg4+5Y3jILSh+wCcQ=
Subject key identifier: 84:B2:1C:3E:8D:DE:24:EE:D8:F4:1B:77:A9:3E:9E:12:32:DD:41:85
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 64595A99598F376D6382AAB467F8E9DE7FCF04E2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d722762c-5028-4cce-aec6-c5097498d4f3.roa
Signing time: Tue 03 Dec 2024 00:00:00 +0000
ROA not before: Tue 03 Dec 2024 00:00:00 +0000
ROA not after: Tue 07 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 72.44.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:59:5a:99:59:8f:37:6d:63:82:aa:b4:67:f8:e9:de:7f:cf:04:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 3 00:00:00 2024 GMT
Not After : Jan 7 23:59:59 2025 GMT
Subject: serialNumber=572943e1c3aff40c45516bd2a267efdfa5cb163547320668c6c6c7aefd9bc755, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:05:4c:48:09:58:49:9d:ed:60:b4:0b:07:78:
46:1d:98:1a:72:19:08:4c:0f:1a:4f:80:3b:1e:a4:
66:6d:d1:0f:b6:8a:1d:73:f7:ee:62:2d:bb:c5:95:
41:ad:21:e5:7f:17:89:76:59:29:43:c4:fe:90:ac:
a4:09:81:cd:1c:44:2e:96:31:27:f7:00:de:58:d3:
fc:c7:ba:85:8e:1f:c2:cb:24:3b:a2:84:73:a1:a4:
18:2a:83:e6:77:9c:4a:7e:bb:b4:ee:e0:fc:81:43:
4b:7d:54:14:66:45:d1:39:a7:ab:c1:ed:d5:91:27:
0a:8b:ea:82:49:33:ab:fc:7c:02:73:7e:17:49:9f:
1c:0a:67:60:95:e7:98:7a:07:ee:d9:f4:73:2b:2a:
23:5d:7a:4c:13:3b:23:92:b1:43:ce:b9:e9:2c:4c:
ae:da:50:85:27:8a:98:49:a8:09:e1:5e:fd:05:93:
fe:96:b9:c5:bf:77:34:4d:21:a1:75:0a:2f:75:00:
ec:77:f6:08:12:43:22:90:a3:a4:55:f6:a6:29:55:
5f:e4:92:4e:76:5a:48:3e:04:f2:df:14:9a:d2:ad:
0e:49:91:e4:bb:6c:0b:1c:29:54:73:a7:31:01:3c:
b1:c2:01:2e:f2:02:2e:e4:38:fa:c6:a8:89:39:c8:
ea:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B2:1C:3E:8D:DE:24:EE:D8:F4:1B:77:A9:3E:9E:12:32:DD:41:85
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d722762c-5028-4cce-aec6-c5097498d4f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.44.32.0/19
Signature Algorithm: sha256WithRSAEncryption
1f:a5:97:23:12:ae:b4:cb:a8:cc:49:61:ef:71:ed:75:67:d5:
94:85:8e:82:9d:7c:70:02:18:ef:85:c4:bd:8a:3f:68:ea:06:
11:7f:81:dd:dc:19:cf:8a:e5:d9:d4:8f:47:f5:bf:fa:fe:c1:
14:2a:fd:db:d0:25:f0:f9:24:50:98:18:6d:da:73:67:de:bf:
c4:0a:c2:6c:96:c1:23:2e:a4:bd:c7:82:34:40:29:16:dc:12:
47:bc:7c:d5:0c:29:f1:20:8e:ea:e0:97:5d:27:94:8b:14:97:
0a:7a:47:90:26:a2:47:a6:16:fa:06:00:25:78:e9:44:60:0c:
3e:13:38:f9:f5:2d:d0:59:af:d4:9d:f6:66:d3:50:de:a9:8e:
3f:78:a3:9f:1c:0a:db:3d:00:04:97:75:89:ce:46:5f:37:c5:
af:ca:1c:bf:a5:db:52:b1:f8:72:a5:60:19:1b:eb:fc:1e:fb:
2a:60:bb:9b:68:28:11:ec:a4:5a:76:3f:25:cf:21:f4:2e:48:
80:ed:b2:b3:04:a2:b8:06:2c:67:a7:56:09:d0:c5:28:55:64:
b4:c8:70:62:57:d1:f4:52:a1:a7:4d:34:c9:42:58:a4:28:34:
64:5c:90:5f:11:8f:8a:35:69:89:96:86:80:67:25:86:35:d3:
fb:89:df:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:26:38 2025 by rpki-client