Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e87285c9-5416-4bb2-8736-5712af00b41b.roa
File: e87285c9-5416-4bb2-8736-5712af00b41b.roa (raw, json)
Hash identifier: Smxjo+koCf8lhLDWtd814TKsKMirg+cjyllKZu+SVVw=
Subject key identifier: D9:6C:3D:06:D1:BA:B7:44:2C:8C:0E:05:6D:D4:66:84:69:B4:60:92
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 22BD2F1851D9ABF9B28119A0DA774F3142388438
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e87285c9-5416-4bb2-8736-5712af00b41b.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 56.54.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:bd:2f:18:51:d9:ab:f9:b2:81:19:a0:da:77:4f:31:42:38:84:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=0e09948df6c960a3c1c0f36bd951b0d07b7954ba62d17647bc7843e9c10caf74, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d1:7c:68:f1:f4:32:06:86:57:26:7a:97:d9:
d0:a1:6f:66:e5:56:a9:bd:f2:f4:ce:6c:aa:74:ae:
fa:04:17:01:54:e8:8e:2f:f9:0d:b4:03:e4:94:32:
fc:ae:32:2b:ce:c3:1e:9d:18:9a:c0:27:ac:66:f7:
0c:08:41:00:fa:50:95:34:e8:c0:68:4c:5d:44:4b:
38:91:03:ca:16:d7:65:0c:c4:af:d1:ee:b5:4b:e4:
87:61:41:1c:ee:2d:4e:cf:c1:ae:fc:cf:1f:d2:e7:
26:82:54:38:6f:2f:a3:78:5b:51:53:52:a0:5b:54:
c2:37:30:04:1b:97:90:8e:bd:2a:63:89:69:e4:e2:
cb:1a:ea:0b:15:11:e7:64:9e:e1:dd:a2:ed:36:cc:
d2:d8:cc:fa:b6:23:54:74:55:c6:b6:e2:e7:86:a9:
a6:77:16:ee:96:54:ad:e1:8c:54:18:ba:5d:78:94:
06:0a:a3:85:19:aa:5f:c8:e2:9e:e3:30:1e:dd:a8:
89:e4:1e:f6:a3:32:df:21:e6:b7:36:7d:7f:9f:49:
db:19:b8:f0:49:4d:e5:92:be:7c:6b:d8:3f:29:d7:
07:54:55:e0:1c:0e:ba:d9:6d:01:f0:eb:8d:6d:ba:
65:0e:1e:af:86:f1:bb:16:9b:fd:6b:50:b4:08:b3:
0d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6C:3D:06:D1:BA:B7:44:2C:8C:0E:05:6D:D4:66:84:69:B4:60:92
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e87285c9-5416-4bb2-8736-5712af00b41b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.54.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4b:d6:91:73:9b:83:7c:de:05:33:90:ce:48:ac:3c:06:bb:b9:
14:47:74:68:7b:2e:90:51:ac:8c:37:c4:7a:e5:f5:34:91:de:
97:43:24:4a:65:fe:72:0b:06:cd:df:33:68:7b:46:69:ab:26:
5e:bd:ad:96:26:9c:fb:f5:6f:ba:a2:34:d6:b5:82:e0:81:5a:
7b:1b:4e:17:d4:d0:77:92:74:2f:32:d0:51:65:5e:4a:07:27:
6f:88:f2:cd:c3:9e:8c:9f:86:a9:23:44:c5:2a:38:4d:69:aa:
24:48:b6:ac:10:83:98:08:76:c5:e9:de:0d:c1:1b:76:1b:ec:
9b:f7:78:dd:87:cc:d5:98:92:9b:64:c2:39:5f:0f:f5:12:df:
6b:af:33:66:42:c5:72:af:b2:bf:44:ab:f1:87:07:06:68:67:
a0:69:28:fa:ad:e6:35:45:18:26:1c:12:c0:09:f2:98:66:94:
76:ff:aa:49:a0:19:44:ca:a5:d3:aa:af:f9:89:df:0f:52:02:
1f:bf:b5:d3:e9:0f:d0:ef:e2:5b:77:97:15:7a:7f:36:2e:0c:
46:c8:30:77:73:82:41:2f:77:65:fd:d4:e9:82:b4:09:93:f9:
f9:8d:10:4b:b6:59:6c:2b:13:47:87:82:b8:74:19:9b:c0:71:
3e:55:8a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:49:59 2025 by rpki-client