Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1f69134-90af-4545-bd2d-af7213a7260a.roa
File: f1f69134-90af-4545-bd2d-af7213a7260a.roa (raw, json)
Hash identifier: ledo2zlBh72/c5nqRoRBDAJwo+Cdi0ByY11LCNMgdJY=
Subject key identifier: 83:3E:8A:D7:A8:2F:02:82:38:14:5F:39:6B:12:FC:51:AE:FE:85:D8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 31010474161FA016196F50D73663CC42D3DEC2A5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1f69134-90af-4545-bd2d-af7213a7260a.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 164.195.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:01:04:74:16:1f:a0:16:19:6f:50:d7:36:63:cc:42:d3:de:c2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=9dc0f721ec768cb3d02f9fa30c80030661d1c22e57c7dee3ed7c65d687f984ad, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:35:3b:6d:bf:b4:61:65:d3:27:63:a4:c6:43:
b5:36:05:53:5a:33:08:b0:af:82:95:7a:96:e3:3e:
63:13:26:ae:53:fc:b5:cc:a0:45:58:1f:b8:16:2f:
0d:f8:21:0a:20:42:bc:c7:98:33:5d:04:2c:d4:41:
ce:39:9a:2e:59:5a:44:7a:ab:7d:d7:07:a1:24:11:
e8:1b:46:93:90:2e:c2:9c:78:45:e3:dc:06:fa:4b:
14:f2:16:bc:1f:a2:4c:0e:00:42:e1:fd:aa:c8:88:
13:5b:2c:b5:06:86:7f:92:44:8c:6e:f0:57:7a:28:
b0:09:be:c9:38:5d:7f:9e:24:2a:71:ee:c3:09:1f:
6a:1b:e0:a5:32:b3:86:4a:b9:eb:d4:df:f2:c5:54:
3c:1f:d9:b0:22:a9:99:61:5c:d9:e7:78:0a:fb:f7:
cb:e1:da:0f:56:d2:87:fa:7d:d3:07:5b:a7:0a:e7:
c0:35:34:71:b4:26:6d:6b:4b:84:59:bd:cb:d1:a1:
70:06:ec:cc:08:d7:7e:ad:26:f1:bc:f2:2b:1b:77:
04:ca:ed:29:17:67:67:1d:4c:e4:cb:21:bb:a1:fd:
b0:a0:27:81:c0:da:fd:00:5b:87:ff:90:e1:66:f7:
96:51:f9:9c:1d:7a:c1:30:3a:ec:6a:55:05:7e:92:
fa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3E:8A:D7:A8:2F:02:82:38:14:5F:39:6B:12:FC:51:AE:FE:85:D8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1f69134-90af-4545-bd2d-af7213a7260a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.195.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3c:ef:e5:36:ed:86:b9:66:23:bf:89:6b:2a:53:18:71:a0:59:
73:a6:7b:2d:d2:5e:f5:76:e3:d8:9c:c3:1e:6a:e4:bc:ab:52:
3e:65:6c:41:a5:38:d0:23:3b:b0:54:4b:75:50:94:72:bf:b2:
bf:b7:fd:d0:49:3a:d0:7a:5f:42:f3:14:fe:f4:8f:f6:07:62:
5d:96:e1:dd:3e:c7:ba:1f:8e:94:7e:d8:0e:8c:59:d4:0e:f6:
7e:3f:9f:39:e2:12:dc:29:4f:eb:02:d7:0d:7d:ba:45:4a:2b:
45:d2:ec:06:7b:25:db:3f:12:8d:65:dd:c0:e1:86:49:81:e9:
5e:d3:2d:15:a6:9b:28:8b:cb:f0:d4:d5:f1:97:91:53:0e:b1:
6b:3a:37:07:e1:f1:66:82:10:40:e4:d4:aa:ed:a0:48:cf:50:
c4:27:0e:e3:25:ba:30:15:f5:b2:24:2b:e0:e0:3e:39:e4:d6:
ec:03:27:5b:eb:70:6a:72:d9:ab:ba:e3:0e:7e:f0:59:a3:c8:
50:15:9f:0c:aa:49:a5:22:07:4a:e9:b6:93:ac:a2:d1:a4:56:
6f:62:3a:71:9a:a3:9f:31:1e:c1:e1:a4:0d:e6:ac:e3:f8:f2:
6f:73:fc:2c:a6:7b:9b:ad:5a:9d:f8:1b:b6:b5:21:d1:4d:ef:
ac:c7:f0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:52:43 2025 by rpki-client