Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9b30ffb-f2a4-4db6-a2f9-7aa5cae8a88f.roa
File: e9b30ffb-f2a4-4db6-a2f9-7aa5cae8a88f.roa (raw, json)
Hash identifier: vE8/ut0mZunJZ5TbqbsCnYyxe9Gj8+7OPnapDtCa8OI=
Subject key identifier: 96:A5:9A:EF:44:05:3B:70:64:D2:CF:A1:46:2A:1A:67:1D:66:48:F1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 128AC8E2A65C34516FF23CA78050266DAF77F742
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9b30ffb-f2a4-4db6-a2f9-7aa5cae8a88f.roa
Signing time: Tue 26 Nov 2024 00:00:00 +0000
ROA not before: Tue 26 Nov 2024 00:00:00 +0000
ROA not after: Tue 31 Dec 2024 23:59:59 +0000
asID: 14618
IP address blocks: 16.26.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:8a:c8:e2:a6:5c:34:51:6f:f2:3c:a7:80:50:26:6d:af:77:f7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 26 00:00:00 2024 GMT
Not After : Dec 31 23:59:59 2024 GMT
Subject: serialNumber=76651fa1ffaa13654ab7826462c72e647663ca78b68f197b7d55910174ba5fa9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:02:76:37:af:94:d7:67:27:c1:0b:30:9f:03:
25:f1:69:b9:06:4d:60:e1:f8:5c:7a:d1:6b:12:60:
19:0f:35:e0:91:02:ef:f5:2d:af:45:67:87:b4:df:
16:97:68:ca:4d:5c:98:12:0b:ab:21:6c:d3:46:61:
75:c2:81:40:f4:34:5d:0e:1e:15:76:87:9d:9a:55:
a7:cd:ad:79:0d:79:5b:95:3c:0b:15:33:5a:16:b2:
8a:36:78:66:19:e5:b7:4f:03:0e:6a:99:c0:a9:96:
12:29:2e:07:09:47:b0:ce:fc:3f:9f:02:8c:c9:06:
61:6b:59:4f:f5:a8:84:0a:cc:df:51:9e:87:6a:51:
95:67:89:51:14:1e:84:16:1d:06:8e:6a:bf:4a:ad:
a1:21:4f:12:b8:ae:e6:2b:33:cd:b5:9e:b2:63:40:
c2:8e:00:ae:f7:5a:32:bc:bd:d2:16:9c:54:76:34:
80:88:87:a3:bf:d1:e6:f3:93:c9:0d:8c:f2:67:32:
3d:2b:36:18:99:a0:90:e1:a1:62:ab:2d:68:bd:a1:
17:7d:ca:ff:a4:0e:bd:86:f2:96:93:ca:d2:3c:bc:
3d:fd:cd:dc:93:b4:ae:7f:e3:85:b8:24:95:28:4d:
15:e8:0c:7d:f0:d3:62:5b:19:c4:b6:41:6b:6a:62:
0b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A5:9A:EF:44:05:3B:70:64:D2:CF:A1:46:2A:1A:67:1D:66:48:F1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9b30ffb-f2a4-4db6-a2f9-7aa5cae8a88f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.26.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c2:2f:c1:c2:8c:69:04:31:7b:76:26:63:f8:79:76:a1:91:cf:
98:12:21:d9:0b:2d:65:af:c0:98:b0:84:6c:d9:6b:15:b1:4d:
08:3a:57:76:d8:88:20:d9:39:cc:82:31:d2:1f:ef:23:ff:c6:
c8:42:2e:6d:b5:05:4c:96:dc:ad:ef:25:7d:0c:68:71:ee:a6:
52:26:f4:2d:31:49:56:1c:a4:7d:b4:8d:41:4a:4c:f3:1f:36:
fe:22:33:43:c5:0d:f4:b9:f5:eb:5c:c1:65:64:37:05:21:1f:
64:da:db:b0:42:e2:67:a4:fa:31:00:a4:8e:68:41:65:e5:c8:
00:6c:b4:38:83:f4:2a:12:83:e1:00:02:b9:42:50:85:4c:78:
be:77:96:ea:bb:a7:df:19:65:3b:b8:b8:f4:3d:ac:a9:2f:8b:
84:6a:54:73:e2:57:22:d3:f9:03:85:f6:3c:90:ec:90:87:25:
46:6f:1b:85:1b:60:45:00:c5:49:9a:68:9f:40:9d:55:5d:3f:
60:82:6e:89:90:c0:dd:b9:ed:b9:f9:3e:dd:68:11:4b:ef:cf:
68:ef:ae:6b:15:8b:4c:73:4d:15:52:46:0b:8a:4f:be:20:61:
e7:68:ee:34:7c:47:b2:3c:bc:ee:82:43:8e:87:24:ee:9c:00:
ce:9b:2d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:50:44 2025 by rpki-client