Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0256eb7-f83c-48c7-916c-6e56ab8edd50.roa
File: e0256eb7-f83c-48c7-916c-6e56ab8edd50.roa (raw, json)
Hash identifier: LSY0biQ2Yx/PI00bivw2R22ydbvx97Am/vwRkstFV+w=
Subject key identifier: DD:27:87:FF:70:E7:77:8B:AB:A6:DE:D4:2D:39:3D:85:44:B0:A8:84
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 30F5A2BAB5A0C1919BF9ABC868C3E3CBFA780997
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0256eb7-f83c-48c7-916c-6e56ab8edd50.roa
Signing time: Tue 24 Dec 2024 00:00:00 +0000
ROA not before: Tue 24 Dec 2024 00:00:00 +0000
ROA not after: Tue 28 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 15.143.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:f5:a2:ba:b5:a0:c1:91:9b:f9:ab:c8:68:c3:e3:cb:fa:78:09:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 24 00:00:00 2024 GMT
Not After : Jan 28 23:59:59 2025 GMT
Subject: serialNumber=9c7c0a4076dbe772fef77f5c1867dae337b746ddf8f4786657c557d2347b0554, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9f:b5:21:6c:54:11:73:b7:3a:45:85:0f:99:
3c:81:2b:12:07:49:02:ca:52:51:61:a1:a9:e0:14:
df:24:5b:34:e5:87:6c:86:e3:f6:87:a3:76:a2:ff:
b3:9b:43:46:59:6c:5a:ef:bf:02:85:99:15:aa:95:
c6:ae:2a:8a:3c:69:ab:3b:d9:5f:5e:69:41:ff:b2:
7c:28:1f:ce:88:66:0a:b5:1b:03:be:a4:00:3c:6f:
b9:54:d2:0f:3d:1f:86:c7:cb:b4:0e:35:8b:ee:49:
21:4d:92:b1:f4:bd:2e:c2:89:b0:d5:79:e2:ca:8c:
6e:49:12:b2:7d:b3:23:bb:f7:71:37:8d:33:5f:b1:
e2:42:2c:d9:c2:dd:09:d4:31:5d:42:a2:6e:dc:d8:
2b:88:6d:e9:e5:8a:1f:d7:79:d3:15:67:4e:a8:ad:
0c:cc:68:9e:dd:ba:32:d6:08:96:64:db:09:d8:71:
51:4a:81:71:40:00:0b:2a:2a:f2:4c:2e:9c:b2:36:
0b:b0:77:a4:df:b1:fd:a4:53:7c:d9:7e:1a:9e:f0:
54:3a:48:e3:3d:d3:b8:e4:77:55:61:d4:8d:38:43:
0e:8c:64:2d:6d:1b:6c:82:de:be:35:c1:de:fb:fe:
b1:c8:0a:47:e6:07:96:0f:96:a3:4e:a5:81:46:6f:
b4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:27:87:FF:70:E7:77:8B:AB:A6:DE:D4:2D:39:3D:85:44:B0:A8:84
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0256eb7-f83c-48c7-916c-6e56ab8edd50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.143.0.0/16
Signature Algorithm: sha256WithRSAEncryption
45:ad:e9:6d:01:a9:22:93:bd:2c:15:aa:59:64:6d:d8:23:24:
16:42:f9:21:21:15:13:5c:06:8e:56:09:c4:58:5b:2b:b3:1c:
9f:53:c5:e6:b6:b9:1a:31:07:dd:e0:68:2f:0f:d2:33:6c:2c:
56:59:f6:63:4c:93:94:bb:bc:73:e9:5a:8d:05:9c:01:a6:5f:
89:65:f2:ef:38:32:4a:1b:f4:b9:7a:f8:80:60:b5:08:27:5a:
ae:c5:ac:86:49:92:f3:9c:c7:a4:51:cc:e1:79:e0:e4:f6:09:
e7:59:9b:30:42:78:50:65:a8:e2:d8:17:4e:7f:26:4d:64:ec:
1a:44:0d:5b:76:7c:6d:de:f3:86:6b:e4:a4:79:dc:83:0d:0e:
4c:2e:d8:af:32:10:64:e4:1b:2d:6c:3b:be:54:8a:7e:d3:0b:
68:c0:9e:1e:08:77:80:72:4e:7c:e3:68:42:23:de:73:f0:ce:
37:9c:2e:0f:74:1a:4d:a7:0e:25:7c:ab:78:b7:77:b4:be:97:
b0:43:c9:e4:33:18:fb:a9:46:9f:ba:7b:03:6b:a6:c0:70:d9:
2c:91:e8:98:e4:61:02:70:48:3e:27:91:11:9b:c7:1b:18:de:
ec:b3:91:33:aa:af:d6:d0:b7:34:a9:32:3b:6d:7b:e8:62:97:
c9:8a:7a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:25:23 2025 by rpki-client