Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eafd53ec-2b8c-46d4-a41f-d62bfddb0ca4.roa
File: eafd53ec-2b8c-46d4-a41f-d62bfddb0ca4.roa (raw, json)
Hash identifier: yrnsMw8WMF6GYW8T9wo84QlldsRwtt9anM6ZoubK+Lg=
Subject key identifier: FF:89:8B:E2:16:B0:2E:3D:50:88:8F:9F:73:C7:8A:B6:CB:62:3E:84
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7C2F34D00AFD91315660AEC2DF968D2EBF74ABD1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eafd53ec-2b8c-46d4-a41f-d62bfddb0ca4.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 142.4.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:2f:34:d0:0a:fd:91:31:56:60:ae:c2:df:96:8d:2e:bf:74:ab:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: serialNumber=204340ddee528070369f950d8be909e296afa7b4137674b2d4b72a3308af33e2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b6:de:f8:95:7d:24:fe:16:10:9f:d3:95:83:
f3:2e:a5:5c:b8:da:99:30:31:4d:c8:53:2d:aa:98:
68:b7:69:11:45:c0:5e:5b:c3:12:c5:a1:8f:f5:6e:
ca:df:d4:b5:0d:be:8f:5d:e6:0e:6d:a7:76:bc:b6:
10:5f:87:56:a1:a7:72:7b:61:80:3c:38:ce:dd:ee:
4b:71:af:84:8b:0d:ac:91:e3:3a:0b:42:66:c0:46:
1c:bc:96:21:f5:33:c6:da:bd:c1:21:c4:9f:2c:81:
40:2a:e5:14:be:f0:d7:f5:4d:0d:28:50:cf:5f:0c:
b6:f3:e3:c0:8e:cc:2f:99:ae:10:93:80:d3:6f:55:
f7:cc:02:ac:a3:e0:d6:1d:23:c4:cd:f5:78:a5:ab:
ec:d8:25:8b:af:fe:a7:63:70:d2:57:b6:a1:26:c3:
ca:8d:d9:69:da:f9:9d:b5:9e:78:a7:2b:f6:17:72:
7b:eb:8b:f9:a9:1f:9d:47:ad:04:00:7f:99:6f:e7:
82:89:a7:2e:11:48:fb:62:31:92:9b:84:d1:00:d6:
b4:c3:09:42:4a:09:47:cb:71:00:04:74:6b:3c:5c:
f6:f2:b7:54:c0:e9:1c:79:1d:1c:25:e3:cb:34:90:
b1:dd:bb:36:27:9d:85:7e:56:d6:db:da:d9:ae:dc:
02:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:89:8B:E2:16:B0:2E:3D:50:88:8F:9F:73:C7:8A:B6:CB:62:3E:84
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eafd53ec-2b8c-46d4-a41f-d62bfddb0ca4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.4.160.0/19
Signature Algorithm: sha256WithRSAEncryption
43:3e:40:24:71:60:fa:c4:d3:4f:a8:be:da:01:9a:a1:fb:8d:
af:f5:e7:34:f4:e0:6f:01:83:19:a2:fa:c5:d8:e5:f3:7f:d8:
36:df:12:3e:9e:c6:d8:30:f2:8e:3a:1b:fc:87:36:03:35:f7:
c4:0a:3c:24:89:df:6c:62:b3:98:b1:05:e5:74:73:48:a2:78:
26:39:e1:1d:dc:5a:23:25:d4:ef:5a:89:79:35:6c:d6:9e:3f:
46:11:99:15:d7:46:ac:17:56:2a:3f:42:40:4e:c4:62:90:59:
af:1e:1d:7c:5f:b0:2c:ae:2e:be:4e:b0:bb:49:27:45:3e:6f:
26:b9:3a:b3:58:56:94:e3:b5:fb:a9:57:e5:04:f7:6b:c6:c4:
a6:00:04:af:25:7f:54:e6:2f:90:90:72:53:6d:e0:db:80:ca:
ec:5c:95:98:ce:e7:4d:7e:39:49:a7:5e:df:39:f1:53:ef:40:
0e:e3:cf:65:57:b0:5c:3c:e3:95:f1:dd:e0:30:6c:a4:af:08:
89:d5:dc:a1:e2:14:dd:b7:54:21:ab:cd:65:a5:e4:98:ee:5a:
4d:65:8d:a9:6c:53:68:72:79:b1:bb:94:1f:35:1f:2f:ff:0f:
22:e6:37:50:97:a0:50:5b:7b:03:d0:05:28:15:a7:6a:54:c3:
11:84:37:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:21:30 2025 by rpki-client