Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db824dd2-7055-4cb9-93a1-29e01b128499.roa
File: db824dd2-7055-4cb9-93a1-29e01b128499.roa (raw, json)
Hash identifier: f0hwt21gHwqavauk15zlPBNH8ZZBNBQvW6BHxv2uTI0=
Subject key identifier: 52:ED:C2:42:1D:D5:02:37:DD:02:B0:48:8B:3F:4B:FE:E9:E2:F2:62
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 061B53C88C85C939A0180C2895E766F335612309
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db824dd2-7055-4cb9-93a1-29e01b128499.roa
Signing time: Wed 15 Jan 2025 00:00:00 +0000
ROA not before: Wed 15 Jan 2025 00:00:00 +0000
ROA not after: Wed 19 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 16.89.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:1b:53:c8:8c:85:c9:39:a0:18:0c:28:95:e7:66:f3:35:61:23:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 15 00:00:00 2025 GMT
Not After : Feb 19 23:59:59 2025 GMT
Subject: serialNumber=d2e2c1f5d5795e570351112016467c399e862593a3b9779af48aee223e77a150, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3e:0f:d7:d5:ad:e6:0b:ae:db:60:af:1a:35:
55:90:9d:45:cd:88:24:72:e4:60:f7:26:e8:c4:0f:
ae:99:46:e4:5d:c4:ce:70:b8:00:e2:54:b9:22:e8:
84:ca:c9:aa:4f:f7:1d:85:d0:f8:84:90:49:1c:a3:
6f:2e:5a:a2:49:72:30:ec:39:2c:77:b4:ed:81:49:
1e:61:f8:b1:94:b1:15:1e:2b:f4:38:df:83:30:79:
3e:f5:c0:ca:e2:a1:e0:e1:69:61:4d:e3:51:ca:2a:
61:2e:87:85:76:58:d8:9d:a4:a3:1e:c6:b7:92:58:
8e:64:6a:a0:39:88:98:6f:30:06:3e:fe:07:bd:f6:
bb:12:32:13:67:bd:3c:e4:d0:1f:94:7c:b9:a9:7b:
aa:82:c8:1c:16:ae:34:ee:94:5a:e8:48:68:34:4b:
e6:90:c0:4c:d5:cd:70:db:22:b3:e4:ac:89:51:4b:
99:d2:f6:35:c8:0a:ce:3f:95:4b:bf:6f:7c:16:b2:
46:f5:4e:ef:69:76:e6:1e:cc:c8:8a:c1:17:09:6e:
40:a0:e7:b2:a7:c1:53:e9:2f:0a:dd:58:9f:73:f1:
37:50:a2:4d:a7:a5:06:eb:0a:67:64:81:2a:ff:ce:
42:24:c0:99:b8:85:89:73:0c:11:7e:66:da:b0:77:
e8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:ED:C2:42:1D:D5:02:37:DD:02:B0:48:8B:3F:4B:FE:E9:E2:F2:62
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db824dd2-7055-4cb9-93a1-29e01b128499.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.89.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ad:2c:d4:ac:f6:5a:48:bd:cb:c6:ad:9c:0a:6f:1e:3e:f5:6d:
c4:2d:7d:c8:41:2a:83:6b:8e:92:2b:2e:d5:3e:77:ca:ba:f3:
90:6e:11:58:12:ec:73:3c:9c:46:97:f0:a6:e5:c4:b7:40:ee:
0c:b8:84:99:16:a4:e9:20:6d:b6:31:5c:41:88:be:15:06:bb:
e6:77:94:72:cb:a2:d4:f5:44:a2:56:67:5f:ce:a2:8f:1c:16:
25:7c:dc:43:c7:dd:9c:69:76:c9:01:b8:93:74:4b:f6:3e:18:
63:7e:35:0c:1f:a6:80:b9:12:40:83:dd:54:81:b6:d1:60:1f:
52:0d:05:38:16:98:95:36:3c:d9:34:54:9b:5c:c6:a3:e6:7a:
f6:e7:70:b7:a7:26:16:6c:a0:a9:bc:e5:29:20:4d:4e:91:3d:
56:69:f9:0a:a2:07:b6:92:4f:16:60:a7:3b:2e:5e:0a:31:28:
f4:36:f5:8d:73:cf:7d:17:a1:a9:d7:c5:54:03:78:e6:ed:0b:
f9:9b:71:3f:9b:b9:af:a7:ff:91:68:44:51:0d:a6:9d:32:28:
8a:07:d5:58:b0:af:02:20:51:aa:52:8d:77:d9:6b:20:6d:81:
44:41:74:ec:ac:d4:33:76:5a:48:06:6e:ff:86:03:2b:b0:c8:
74:26:2f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:19:33 2025 by rpki-client