Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa282231-c69b-4340-b884-5e912f4a48cb.roa
File: fa282231-c69b-4340-b884-5e912f4a48cb.roa (raw, json)
Hash identifier: bMbj5S5M5SF0nIBlrg97RObWEHDfLvKB7CSd3eDAAPY=
Subject key identifier: 0B:E1:0D:E3:55:12:E7:1D:3F:1A:87:92:CE:56:36:9B:0D:89:52:64
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 54A776857B836B6D0B163FD47D0DDD8C2B107309
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa282231-c69b-4340-b884-5e912f4a48cb.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f60:1000::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:a7:76:85:7b:83:6b:6d:0b:16:3f:d4:7d:0d:dd:8c:2b:10:73:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=fc617b8d41e55fce8e19df0841320cc1664bf7c048497053877822c038093cfc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:49:8c:02:e2:7c:5d:3e:d5:82:95:e7:7d:81:
2f:92:da:db:b8:79:99:f1:a7:d6:9a:39:d3:f7:2a:
66:9e:83:73:6d:a1:eb:e6:5d:dc:07:96:3b:8e:0f:
19:1c:07:38:d5:63:df:73:dd:a5:a7:11:9c:c6:e3:
8d:3b:3e:9e:db:df:e0:46:82:7a:25:05:ea:b3:02:
ba:db:91:c9:65:99:12:3b:90:30:c2:34:73:3a:aa:
71:0d:1c:1f:81:97:79:2d:86:97:f7:ff:e4:21:75:
c4:1a:3f:54:05:7b:16:15:08:d5:85:e3:14:66:eb:
e9:aa:2f:d2:95:02:61:15:f3:e8:7d:95:f1:e7:38:
ab:8b:54:06:8a:5d:c9:26:67:5a:37:b8:d9:81:09:
5f:1d:62:a5:40:7d:79:6d:5d:0f:18:03:6c:c2:b4:
a3:c1:08:8b:3e:87:f5:75:92:ee:e9:f2:48:74:fe:
5c:b6:41:02:d9:a6:88:7e:01:d7:a8:ae:16:7c:42:
64:e7:4a:ac:b5:38:cd:6a:92:63:b9:3d:28:e1:d1:
0f:02:54:42:36:fc:50:47:b6:7e:38:ca:88:6f:cc:
ca:c0:92:a5:99:a0:3c:60:3e:d2:e7:5a:44:12:a6:
64:88:5f:df:03:97:4e:88:68:09:7f:fa:58:b7:f6:
a1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E1:0D:E3:55:12:E7:1D:3F:1A:87:92:CE:56:36:9B:0D:89:52:64
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa282231-c69b-4340-b884-5e912f4a48cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f60:1000::/40
Signature Algorithm: sha256WithRSAEncryption
95:26:46:ed:83:d0:a3:49:74:c3:c9:68:ea:35:dc:21:a8:8a:
37:5a:3c:e4:64:74:3e:02:61:f9:2a:9a:7e:31:4a:59:63:d0:
c3:a0:6b:44:25:f4:cc:5b:c5:e7:81:3f:83:19:2a:f8:01:a6:
b5:3d:b1:c6:d2:49:4d:5e:58:44:9e:20:55:37:3c:29:19:83:
07:34:02:8e:2f:c2:c8:d0:d7:93:69:73:3a:e8:e1:10:db:78:
5f:23:a1:c2:af:06:4c:7a:e4:f3:79:80:a6:a0:d0:a5:a3:e3:
14:7d:fc:15:e4:b0:86:54:ce:0f:8b:b2:8b:83:4d:41:10:4d:
e2:27:3f:0b:cc:39:6b:f2:d8:b7:01:4e:57:0e:b6:9a:1e:04:
b5:ca:95:a5:09:ee:7c:d2:0e:05:df:8d:9e:04:d0:ac:65:1e:
69:0d:20:83:28:c1:be:5b:92:f7:e8:9f:21:d0:56:98:e1:fc:
78:5b:08:94:08:c3:20:b8:51:e7:ab:1c:2f:c3:87:a3:90:ec:
4f:b7:6d:a1:fd:00:30:2a:5b:b9:6e:5e:f0:4e:11:48:58:a7:
1f:94:c9:33:ef:a2:dc:ac:2e:a3:be:ea:d3:c7:2d:7c:d3:55:
71:2d:ab:09:7a:51:29:60:b8:4d:cf:b6:95:64:87:7e:1e:cf:
bb:53:0c:04
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:52:07 2025 by rpki-client