Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee626b04-ab9a-43ab-b5ca-5a0f338f1007.roa
File: ee626b04-ab9a-43ab-b5ca-5a0f338f1007.roa (raw, json)
Hash identifier: 6p/4EI+YDoP4dtgxhvPuqbsAQFEbf9KBwg/gixkK4dQ=
Subject key identifier: 94:F3:21:6D:86:57:0F:1F:6B:CF:A6:F6:C4:8C:80:83:A8:F3:0D:9D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7D3277B678D19C11212B013245CF9C1EB3CE5E0A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee626b04-ab9a-43ab-b5ca-5a0f338f1007.roa
Signing time: Mon 02 Dec 2024 00:00:00 +0000
ROA not before: Mon 02 Dec 2024 00:00:00 +0000
ROA not after: Mon 06 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 54.116.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:32:77:b6:78:d1:9c:11:21:2b:01:32:45:cf:9c:1e:b3:ce:5e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 2 00:00:00 2024 GMT
Not After : Jan 6 23:59:59 2025 GMT
Subject: serialNumber=4d048c4e4bf5dca1360d6658ffc931eb3f3de6148d56fb04512b9f10a5975202, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:47:24:6c:57:01:5f:7e:cc:8d:cf:ed:21:09:
6e:5f:ab:a4:c5:8d:96:e8:9c:6d:4a:0c:87:30:2e:
ae:85:f3:3e:1d:0a:09:57:00:8a:a0:89:cd:1f:76:
6e:79:f2:a6:7a:b4:bc:58:53:00:fe:30:37:9d:4a:
5a:2e:84:8f:39:31:d3:1a:eb:92:f5:10:c8:5a:4a:
18:86:04:96:b8:9c:a5:1b:82:62:87:40:ff:62:ed:
18:e1:66:c7:7b:99:66:53:ac:38:15:f3:14:d7:ea:
c3:35:86:95:00:3c:7d:b9:60:00:b2:b7:76:db:36:
41:4a:63:c1:1d:56:cc:42:34:35:62:97:f2:c0:ce:
4a:2c:3e:95:e9:b5:af:73:80:83:9a:a3:75:d1:b8:
f9:21:d7:40:51:36:a0:29:a3:12:9e:a5:2e:d8:d1:
f3:8b:c7:e6:93:c5:24:d8:73:15:ee:fe:06:55:2a:
c9:5b:26:41:8a:fd:af:97:ed:9d:ac:cf:32:af:2b:
bb:6a:6f:0b:d1:fd:93:8f:ac:bf:4e:20:fa:10:0f:
5d:98:a6:e2:30:05:5a:80:c5:aa:af:9e:9e:cb:ea:
44:56:0c:27:9a:d4:51:4d:69:2a:a5:38:3c:0e:2d:
e8:cc:1c:53:81:80:2f:eb:35:6a:39:e0:07:bf:39:
0a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F3:21:6D:86:57:0F:1F:6B:CF:A6:F6:C4:8C:80:83:A8:F3:0D:9D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee626b04-ab9a-43ab-b5ca-5a0f338f1007.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.116.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b3:51:57:e6:f4:1a:e3:ad:c1:f4:ab:2c:c8:eb:ca:21:f0:e8:
3b:8d:45:fc:fa:ae:c4:90:57:d0:21:0a:ae:33:1d:ff:0c:63:
fe:b7:9b:7d:ee:52:77:06:00:05:5f:4a:fd:40:4a:fa:bc:b2:
c7:c2:cb:00:37:13:3f:63:59:1c:ea:a1:b4:f0:29:4a:6c:f3:
6a:e2:44:b7:7b:d7:d6:bf:16:22:58:95:b2:d4:78:08:f7:08:
33:86:35:03:43:df:c2:54:e5:cc:64:f9:21:20:49:a7:ad:64:
6d:53:61:5b:09:7f:b0:ff:00:71:f5:81:db:32:05:81:9a:c1:
66:0a:50:83:5d:40:d4:b4:dd:5a:83:3c:3e:1f:2f:96:97:73:
f3:1f:5d:c6:57:17:1a:48:41:a3:37:43:e1:ed:ee:e9:92:57:
fb:d8:c6:3e:1e:90:09:36:59:3f:c7:e0:07:f5:ca:1e:03:d2:
e1:4f:4d:f6:73:1f:24:77:45:87:72:c4:21:61:77:b0:03:86:
8f:e5:cd:ed:97:3c:4a:48:e5:b1:0a:ee:3b:3e:f1:19:72:49:
e2:c0:44:15:d4:e2:49:65:39:cb:0a:19:fb:62:8c:a7:b1:f6:
df:61:40:9f:35:72:40:f1:35:54:04:7d:40:53:a4:a5:c9:a2:
78:1f:4c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:33:20 2025 by rpki-client