Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7981179-a4ac-4066-9364-da5fa1f79da4.roa
File: e7981179-a4ac-4066-9364-da5fa1f79da4.roa (raw, json)
Hash identifier: 2qo+sa3y6KIRxpU0/5on1Bde9Kfn4I4N8gvBhg0fwYs=
Subject key identifier: EB:BD:91:BA:03:98:34:BB:69:7F:54:AC:65:1E:30:2D:0F:93:EC:19
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 069C5ECF7690AF9D9663AC0692E9434A1C91E955
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7981179-a4ac-4066-9364-da5fa1f79da4.roa
Signing time: Wed 01 Jan 2025 00:00:00 +0000
ROA not before: Wed 01 Jan 2025 00:00:00 +0000
ROA not after: Wed 05 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 56.97.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:9c:5e:cf:76:90:af:9d:96:63:ac:06:92:e9:43:4a:1c:91:e9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 1 00:00:00 2025 GMT
Not After : Feb 5 23:59:59 2025 GMT
Subject: serialNumber=9eec336a958034d36a980adab75289721cea4b25fb2e5622f53c24c8800d74f4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:52:ec:63:2d:51:f1:79:d8:53:d1:57:f5:41:
a8:85:7d:e7:37:ed:cc:6c:6c:63:65:1b:f9:0e:c2:
5a:39:2d:bd:36:4b:26:1d:d1:ed:da:47:ef:81:f9:
c0:de:af:d7:97:6a:65:b0:33:7a:29:ac:2c:51:dc:
11:d2:19:df:37:e0:b6:2a:52:03:4c:6b:37:7a:b5:
bf:9d:b5:c7:ad:94:78:c7:f2:3b:87:cb:22:b9:31:
83:89:20:6f:89:c0:00:cf:97:d6:fe:d2:e8:92:48:
77:4b:92:dc:5b:82:ad:23:0a:8d:e7:15:3d:94:7e:
7d:66:d7:65:54:4d:6f:7d:d8:ef:fc:b4:ae:dc:ba:
56:a7:04:8d:d9:b0:ff:ea:d4:f6:9b:47:7d:07:9e:
5d:55:2d:a9:fc:07:5f:2a:68:ed:8d:85:87:54:9c:
62:8a:ed:1e:8c:8b:67:eb:30:23:c5:7e:c5:9b:59:
91:1c:d2:d1:a4:83:1a:22:7e:a8:da:4d:9d:54:e9:
47:82:20:ff:5c:48:a0:b0:94:9f:30:37:c6:b9:f3:
bb:e3:51:9a:5e:20:6b:f4:82:c2:92:c1:71:7c:39:
8e:ee:e5:b6:50:fb:bc:20:bf:45:a9:c4:49:df:bf:
c2:0d:2c:bb:f3:13:59:75:0e:c3:06:62:c3:aa:74:
b2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BD:91:BA:03:98:34:BB:69:7F:54:AC:65:1E:30:2D:0F:93:EC:19
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7981179-a4ac-4066-9364-da5fa1f79da4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.97.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c6:62:5d:9e:26:b4:e5:0b:56:d1:c2:19:70:1a:4c:25:56:3c:
0e:7e:a0:0d:c5:bf:c0:cb:0f:bf:87:68:ef:26:df:f5:aa:7c:
a8:ac:39:67:f4:b3:35:88:2f:23:3d:5e:3f:82:60:b4:ba:82:
34:b3:61:e2:5a:2a:0e:3f:ad:86:2a:9c:39:84:bf:fe:a1:69:
af:2a:84:cb:a5:7e:04:f0:71:70:09:f2:f3:e5:10:b4:3b:c9:
49:6a:c6:c2:7e:02:e2:cd:1b:7f:07:bb:05:4d:56:85:14:4f:
52:ea:74:30:a0:b6:f3:35:a1:ec:8d:54:42:e1:18:90:4b:fa:
14:73:84:1b:f8:90:13:24:6d:9c:bf:ad:1a:f7:59:f0:f2:1e:
48:cb:25:81:09:e5:5b:29:3f:5a:6b:3e:2d:6c:26:47:97:41:
dc:b5:3b:5d:31:35:a5:46:54:4f:e0:52:68:f5:a4:00:4a:6d:
c0:80:5c:ad:c5:55:d2:76:73:fa:d0:2b:64:e1:6e:da:b1:78:
57:30:fd:37:57:be:bf:03:66:d6:71:42:3b:9c:61:a2:65:b4:
b9:85:8a:7c:78:6d:96:c5:06:11:91:3f:3d:18:9e:7f:ba:6f:
d9:3c:4e:95:ec:8c:23:cd:8f:25:da:62:c0:8d:8d:12:43:4b:
68:d5:d9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:39:59 2025 by rpki-client