Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4a4ea94-9a36-461b-8e85-888ebf6b26c7.roa
File: e4a4ea94-9a36-461b-8e85-888ebf6b26c7.roa (raw, json)
Hash identifier: HeLgRAtAIQffy4MA7pf8yDJtz955WNisQlT5f33WEXk=
Subject key identifier: F3:2F:1A:D2:64:B4:5C:34:79:D1:78:4F:C4:00:5D:54:A5:B9:4E:4B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6345AA67C9651354818F840B12D43F5F5418B35A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4a4ea94-9a36-461b-8e85-888ebf6b26c7.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:2000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:45:aa:67:c9:65:13:54:81:8f:84:0b:12:d4:3f:5f:54:18:b3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: serialNumber=126a618b3eeeb1b664d32380d9aa976d90f51f8382135d3f2d78a9ff7003bdeb, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:76:3f:9e:ef:d4:76:d0:d2:cb:4b:b3:24:0f:
f3:bf:78:25:a4:34:d5:97:7e:4d:8a:11:36:46:3a:
4f:e2:f0:fe:03:63:8a:b1:2b:e6:8a:8a:75:e8:55:
6f:7c:31:06:59:c9:f6:2e:1e:56:1e:ed:7c:4d:1a:
8b:7b:28:99:90:42:2a:35:f1:3b:16:8c:db:37:4a:
b5:3f:c1:51:19:20:d9:c1:1d:5a:7a:2b:34:df:e7:
13:c3:5a:87:fa:e0:fb:14:16:75:39:1e:85:ac:b8:
ab:0d:4a:24:6c:59:a6:8b:4b:d8:85:25:b8:a5:34:
15:14:58:93:0c:a9:99:7d:78:82:0c:0d:52:17:6d:
cc:c2:88:17:73:f7:b9:86:00:74:4c:12:e8:85:1d:
16:fd:81:1d:b1:8d:2c:df:a4:f5:ec:a6:00:06:05:
a1:ab:72:c1:73:f2:c3:7b:1e:08:fa:03:0a:72:c1:
1c:c7:b2:d5:1e:38:a4:5d:29:d0:ad:f1:2f:ef:59:
cf:88:28:be:99:4e:7b:25:65:dc:d1:57:ea:73:a2:
99:33:c9:6a:46:b8:46:74:0e:7f:5c:73:16:4c:0a:
56:84:fb:c5:b2:40:cc:c9:3c:b7:2b:4f:07:89:3e:
49:27:a9:a6:b6:d4:94:9a:be:61:9e:82:d7:52:d8:
f7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2F:1A:D2:64:B4:5C:34:79:D1:78:4F:C4:00:5D:54:A5:B9:4E:4B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4a4ea94-9a36-461b-8e85-888ebf6b26c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:2000::/40
Signature Algorithm: sha256WithRSAEncryption
79:9e:45:74:5f:32:f1:77:5a:33:5a:1a:a0:aa:9d:71:0d:b4:
39:f0:2f:02:3e:6b:c7:2d:45:e2:b1:22:5f:f9:c2:b0:fb:64:
f4:16:f4:a6:a4:e8:f4:4c:67:be:c1:79:11:7b:85:66:0a:88:
6c:37:63:cb:20:85:09:c7:8b:ab:02:0d:6e:61:31:5f:75:ec:
13:f1:c6:a8:a0:5e:3d:f3:bb:c7:22:cd:ef:c8:bb:a9:18:cb:
da:66:fd:4f:0e:3c:ea:3f:fc:5b:0d:b2:8f:4c:5d:ed:e9:1c:
ee:40:1d:b3:75:e7:09:83:a0:72:24:e0:e5:20:8f:90:3a:fb:
98:ef:2e:32:b7:b3:d4:85:ec:16:23:a4:41:5c:7d:6b:5b:5f:
f9:2b:d7:fa:91:09:24:25:ef:69:ca:8e:4d:bf:6d:3e:a0:91:
3f:f7:f1:49:7e:be:30:c1:f0:62:0f:18:a8:bf:2f:97:40:c5:
c8:42:1c:48:26:3f:90:bc:5b:e8:8c:fb:be:be:30:7e:db:b1:
07:20:18:bb:58:1f:bd:04:a2:71:88:30:9e:9b:e6:da:8e:78:
08:26:3e:39:59:39:6b:45:e7:43:b7:8d:86:91:58:a5:15:64:
e1:d0:14:3e:ef:51:10:db:e5:8d:22:ea:af:b3:dc:41:3e:80:
21:87:03:d0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:39 2025 by rpki-client