Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f34633b7-d77c-4e54-b4b0-4193ccb0d219.roa
File: f34633b7-d77c-4e54-b4b0-4193ccb0d219.roa (raw, json)
Hash identifier: 5JKxeNHJDiJXOILrtkascqB5XfpKEZyExHYY5qPXlpY=
Subject key identifier: CD:3E:B5:AF:E9:AB:F9:20:70:BD:FD:DB:59:3A:09:46:E8:3D:92:0B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3C6F62C6042AF1C2BD409D9330CC393B5EE95915
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f34633b7-d77c-4e54-b4b0-4193ccb0d219.roa
Signing time: Fri 14 Mar 2025 00:10:15 +0000
ROA not before: Fri 14 Mar 2025 00:10:15 +0000
ROA not after: Fri 18 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 207.94.128.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:6f:62:c6:04:2a:f1:c2:bd:40:9d:93:30:cc:39:3b:5e:e9:59:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 14 00:10:15 2025 GMT
Not After : Apr 18 23:59:59 2025 GMT
Subject: serialNumber=db6763a2467f8e68ed107105dcd589a2c4ec3e9b47526d9be184a50ec0acccb3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:aa:db:60:7f:7e:4c:62:a5:fb:b6:54:0b:12:
f4:4c:46:3b:13:b1:2b:fb:19:fd:b0:60:4d:b8:a2:
00:e5:6e:83:17:2f:76:c9:c5:5a:2c:8e:78:a9:39:
ff:7d:4d:f8:40:b1:4e:a2:0a:ea:32:d7:1e:2e:2c:
fa:33:63:b3:7e:e1:19:77:82:6e:16:62:e0:8a:05:
e1:e2:a9:78:72:92:d4:e4:b9:db:8b:e4:47:07:b2:
e3:58:09:0f:0c:68:bc:b0:ee:e6:5a:96:90:d0:cb:
c7:e1:16:a4:2b:d2:11:0b:63:e5:c3:86:ea:87:d1:
b6:7a:3b:54:3e:f4:28:53:5d:7a:cf:be:ef:5e:21:
1e:f4:7f:92:18:5e:b6:25:74:40:c4:c7:a5:1c:91:
63:5b:a5:a0:c4:ef:1b:9b:0e:94:61:44:75:82:68:
72:07:2d:15:b6:00:0f:c8:f5:da:b2:c1:cc:50:f4:
fe:4a:d4:10:29:a2:ff:58:cd:29:cc:1d:96:a1:6f:
f9:99:4b:6d:24:68:10:57:38:82:77:3c:bb:05:1c:
25:fd:f0:76:5c:cd:4f:12:c3:1f:34:86:d2:6b:cd:
4d:1c:c3:ef:c3:23:b6:bc:59:d5:7d:b6:6a:78:51:
bc:ae:81:03:bc:1c:20:89:d1:54:fa:cd:7c:91:b8:
57:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3E:B5:AF:E9:AB:F9:20:70:BD:FD:DB:59:3A:09:46:E8:3D:92:0B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f34633b7-d77c-4e54-b4b0-4193ccb0d219.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.94.128.0/20
Signature Algorithm: sha256WithRSAEncryption
8c:20:08:8a:10:e5:ea:b5:9c:65:51:a7:35:fd:62:6a:d8:9a:
47:76:06:d8:b8:af:89:ff:30:b2:62:37:95:d2:55:6c:67:40:
88:36:d1:17:07:71:3e:a0:ef:fe:73:1b:a9:42:af:dd:34:82:
61:93:4d:d5:6d:5e:45:bb:ad:9e:0c:1d:09:9b:97:4f:32:af:
d3:eb:e8:37:66:63:00:be:8b:4b:28:83:8b:64:5c:a5:e7:6b:
32:b6:10:f7:ac:ac:02:7d:f9:82:5e:c2:88:62:d1:f0:a0:5f:
11:51:ac:0b:16:e5:f7:15:2f:c0:24:71:0f:37:fd:de:22:42:
09:a0:2a:cc:be:26:5e:3e:a8:be:f6:b1:ee:1a:e0:99:82:97:
cc:0d:ca:43:72:ca:58:72:b2:10:25:ac:c4:cb:2c:ec:f7:41:
f6:e5:1b:a4:69:84:f2:86:79:ea:d7:33:35:d8:c7:73:d5:14:
2e:10:36:e2:77:d0:c8:02:65:fe:88:da:ec:5e:8c:4f:b4:6e:
c8:d8:49:f9:f3:ee:00:07:e1:86:29:77:a7:71:32:59:88:11:
e5:c0:08:06:a5:8a:a5:21:65:67:bf:49:38:df:d3:11:50:b3:
45:84:80:01:ae:14:f4:fb:7e:f4:d2:d0:34:c7:5b:73:eb:cc:
d0:80:91:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:14:00 2025 by rpki-client