Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9a8fded-68e3-491f-a799-db6074460bf1.roa
File: e9a8fded-68e3-491f-a799-db6074460bf1.roa (raw, json)
Hash identifier: EfKkWutrk6xjrRcrzbVMVtI/K6DByVsqXZg7UgKf1xM=
Subject key identifier: 48:4D:D7:A6:F2:A7:F9:6C:2D:B4:26:BE:BF:E6:79:D0:E4:6C:60:8C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 39791EBBBD5E28A60968EA5D2CBE224F613BA3DA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9a8fded-68e3-491f-a799-db6074460bf1.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 56.52.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:79:1e:bb:bd:5e:28:a6:09:68:ea:5d:2c:be:22:4f:61:3b:a3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=215c4342ba73d6ad8940ffbec1e392c88627ffbf080e8e74ffd87614dd808707, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:ff:31:7e:ab:19:f1:0d:6e:98:82:1d:e7:
5e:e9:28:11:e6:aa:e0:a9:9e:22:68:20:fa:89:99:
cd:2b:1c:66:cc:37:a2:52:3c:ce:ce:3d:52:f9:6d:
13:0c:bd:98:fb:41:da:80:15:04:39:eb:c7:37:7a:
da:fd:94:d6:7e:95:d9:d0:1e:3b:41:ef:db:d0:92:
b7:8e:6f:19:44:2a:45:e7:53:fc:55:49:d7:ec:03:
16:c0:47:f1:8b:b3:d3:11:e6:c3:34:5e:76:54:3e:
d1:24:e3:87:15:e3:d0:e6:31:b5:4f:74:68:a5:30:
09:88:41:1d:04:30:c2:f8:e3:08:37:f9:0f:73:28:
4c:06:ba:b4:a5:19:8d:65:40:79:2f:3d:72:50:78:
58:00:37:62:7a:67:46:44:5f:da:f6:31:2f:df:22:
65:a0:b5:41:7b:b1:85:da:dd:c8:b9:ce:a6:be:a5:
45:43:af:99:9d:79:a8:61:ad:11:ba:15:4f:56:50:
bc:d2:f3:a5:7e:bf:24:18:1f:b5:bc:15:f4:23:cb:
04:9f:f8:db:6c:75:14:b5:0b:cc:ca:79:9d:5b:0b:
ad:f1:02:02:ba:50:c7:f7:87:f4:fb:ff:34:92:cc:
f5:14:9c:f6:f7:5b:cb:37:91:c3:13:7c:a6:0e:f1:
cb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4D:D7:A6:F2:A7:F9:6C:2D:B4:26:BE:BF:E6:79:D0:E4:6C:60:8C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9a8fded-68e3-491f-a799-db6074460bf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.52.0.0/16
Signature Algorithm: sha256WithRSAEncryption
54:0d:a5:74:ac:1f:6b:f5:23:e2:4c:7c:d4:d6:56:bd:ae:69:
13:3b:14:a3:37:e3:30:96:0e:72:b8:db:f7:ec:fa:c6:59:71:
1a:2a:13:58:29:b8:2f:1a:33:3b:47:51:8d:87:a0:c8:59:1f:
f4:85:1f:61:27:1d:d3:3f:90:1c:c2:6c:99:4b:ab:30:98:64:
db:21:0b:86:4a:65:96:6f:ed:8c:8a:52:f3:00:63:2f:10:1f:
2e:3e:59:d9:6e:20:3a:bd:b7:43:ea:5e:16:b6:2a:ba:cb:0f:
42:b1:ad:bc:64:05:b6:ec:d6:09:3d:ad:e4:a1:ee:df:4f:64:
e4:65:0e:bb:90:43:98:99:a5:0f:80:8c:b4:52:f3:a0:7a:69:
fe:12:dd:80:4e:5a:86:63:26:5c:ea:18:c9:5f:14:23:19:ba:
9c:79:9b:42:be:80:99:74:79:19:ea:25:91:9d:bb:5a:d3:f5:
ad:be:7a:7e:5a:bf:44:1d:69:82:8d:98:5b:d1:06:e7:68:89:
56:93:a1:7d:3c:40:89:c8:bf:5e:97:f5:4e:83:cf:d0:cc:80:
6d:b1:64:7a:e9:2d:72:66:a2:bb:12:0d:f8:a3:f9:9a:a3:23:
4a:d3:70:81:52:eb:11:33:60:4f:35:28:a2:66:60:a2:f5:dd:
8a:50:43:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:55:42 2025 by rpki-client