Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4c4f643-aadb-4e5a-81b6-8e203e21f30c.roa
File: f4c4f643-aadb-4e5a-81b6-8e203e21f30c.roa (raw, json)
Hash identifier: N7EGnY4mmr3nrAJLQEaIKFXQudCujC6JGs8px6dOmAY=
Subject key identifier: EC:FA:49:19:C4:96:AF:00:22:D5:3D:BE:DB:85:25:75:EC:A2:63:C4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5200CA2496D02BC44FB4BB13C4529F4B40BC38F2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4c4f643-aadb-4e5a-81b6-8e203e21f30c.roa
Signing time: Tue 18 Mar 2025 00:10:56 +0000
ROA not before: Tue 18 Mar 2025 00:10:56 +0000
ROA not after: Tue 22 Apr 2025 23:59:59 +0000
asID: 8987
IP address blocks: 35.33.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:00:ca:24:96:d0:2b:c4:4f:b4:bb:13:c4:52:9f:4b:40:bc:38:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 18 00:10:56 2025 GMT
Not After : Apr 22 23:59:59 2025 GMT
Subject: serialNumber=211539f3cbc879f2bdb442ee3f7f1cdb9e7082ea9498e9f50614fe84089f688a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:99:bb:66:10:ce:07:b8:60:64:5e:18:29:9b:
b6:e8:14:02:f3:75:ed:77:ee:b2:85:76:7c:79:14:
c5:81:93:fa:d6:31:e2:49:ae:3c:29:3e:c8:67:bc:
03:bb:7e:df:5f:9e:c4:d8:54:73:29:ed:c3:0f:56:
a9:71:1a:fd:96:83:83:35:33:36:9d:c1:0a:4d:45:
20:18:44:93:0d:53:8e:dc:5c:20:fd:85:90:f3:b0:
94:ab:53:56:49:e0:32:c0:7a:b1:8c:d2:76:ce:b4:
57:02:fc:e9:ef:9a:a0:40:8f:13:56:31:ae:70:15:
62:68:69:7d:5e:55:12:c4:07:b8:03:38:1f:dc:c0:
7f:af:73:d7:8b:b1:70:24:6f:10:72:15:41:06:ab:
30:83:0f:1b:75:b2:8f:da:ce:17:9e:35:19:7f:20:
cd:a4:4c:79:68:94:c4:8e:b7:cb:32:d7:63:41:ad:
86:12:cc:6b:8c:c1:b0:ef:bc:df:69:a0:2f:54:1f:
00:dd:05:9b:72:20:ad:c7:12:e8:ee:6a:2c:e7:8f:
1e:1d:7e:7b:42:c6:61:db:b5:66:09:9d:17:28:72:
cd:25:25:77:de:7c:1b:0c:ff:96:62:58:eb:05:a9:
a6:7c:ef:06:4e:8a:31:5f:bf:36:6c:81:34:ce:12:
7a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FA:49:19:C4:96:AF:00:22:D5:3D:BE:DB:85:25:75:EC:A2:63:C4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4c4f643-aadb-4e5a-81b6-8e203e21f30c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.33.128.0/17
Signature Algorithm: sha256WithRSAEncryption
48:a3:05:91:00:07:44:5c:10:fa:87:73:fc:7e:b3:95:ce:7f:
0c:00:88:bc:1a:72:81:b9:fc:4b:c0:09:93:f7:ae:4d:d4:fc:
12:74:5c:35:70:68:9c:15:7b:50:ad:c9:14:2e:ae:f6:9d:1b:
ab:a1:31:da:73:db:91:2f:1b:fb:25:93:81:78:4c:2c:41:05:
ed:79:b5:89:57:e2:c6:be:84:d5:b5:6c:3a:ec:78:34:57:c8:
8b:55:b3:49:bf:36:04:ec:85:a3:cc:94:21:7b:20:28:81:52:
f2:e7:26:23:dc:9e:0b:a8:06:3c:83:d0:e2:73:03:c4:99:4d:
11:24:f5:1e:7b:85:9b:e6:24:cc:39:0b:55:ac:46:e2:71:01:
95:48:ed:1a:eb:35:c6:93:67:28:77:02:6d:21:e1:66:87:db:
f3:da:f9:18:7f:3e:43:e9:94:a2:6b:23:a7:ba:78:43:15:18:
16:f7:79:c7:6a:be:34:2c:f7:27:c3:4a:cd:32:e1:0e:ca:42:
29:8f:aa:d0:b4:08:5c:71:6a:e3:b9:b5:e6:68:af:ab:ba:0d:
32:77:6a:3b:ff:12:07:69:7f:d6:e9:34:3f:ca:6c:e3:ce:68:
39:43:b4:57:aa:0b:6b:b6:6c:ff:67:4f:88:f7:0d:70:fa:cc:
18:f1:08:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:33:06 2025 by rpki-client