Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa5c285e-c56a-4647-bcc4-f1e59c16e568.roa
File: fa5c285e-c56a-4647-bcc4-f1e59c16e568.roa (raw, json)
Hash identifier: gN9JnC13eBtp9s8yt6Oe2zGJ2WkhONPHzIM0PgL0nZ8=
Subject key identifier: 45:7D:A8:1D:60:CD:2D:F6:58:64:21:19:1E:87:BE:96:D5:8E:3A:64
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 20DB53F3870FFEE12C024304093D9AADF57EE518
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa5c285e-c56a-4647-bcc4-f1e59c16e568.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 216.73.208.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:db:53:f3:87:0f:fe:e1:2c:02:43:04:09:3d:9a:ad:f5:7e:e5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=2781b7b3a0c1d827a240af113c11e1068fca4821c43fff76f1924de2f51c60f8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5e:99:51:58:30:9c:b7:0d:78:cb:75:3c:73:
24:67:24:70:1e:5f:d1:ff:3f:9c:1a:95:b9:e5:fa:
45:22:f9:4d:da:46:49:15:16:a5:86:28:da:d8:7b:
22:7a:60:2a:f0:6d:6a:a3:75:3a:ab:31:e8:4b:23:
58:da:ec:ef:32:47:80:75:d1:0c:b5:e7:92:fb:78:
2f:10:fc:fd:8e:15:21:0d:18:da:6f:bf:43:0f:39:
3d:ce:c2:41:ff:7f:a4:da:ea:bb:04:0d:c4:54:c5:
30:7e:46:d1:c0:4c:78:fe:bb:b5:b7:62:36:2b:56:
cb:13:91:3c:b0:38:3e:a2:9c:42:10:3c:f5:b5:1c:
ea:a2:47:28:a9:39:b7:80:4f:5e:d6:b2:8a:2f:36:
37:d4:b2:6a:8f:b4:68:b6:cc:c2:e2:a8:16:2e:17:
c9:db:9e:a6:4b:e1:95:cc:57:34:85:7c:ca:52:da:
6b:b4:37:05:e7:8f:de:34:f1:9d:e7:b0:66:92:fd:
95:80:df:fa:47:7c:29:41:c5:67:6d:26:6c:98:f7:
0c:c9:7c:49:d9:fd:11:e5:d8:6f:b5:f3:8f:fc:ff:
d9:a2:13:66:61:ed:76:ce:83:53:cc:c5:0b:5a:e7:
d3:6d:dd:a1:ad:c1:e7:25:6c:1e:d2:20:06:ee:db:
53:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7D:A8:1D:60:CD:2D:F6:58:64:21:19:1E:87:BE:96:D5:8E:3A:64
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa5c285e-c56a-4647-bcc4-f1e59c16e568.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.73.208.0/21
Signature Algorithm: sha256WithRSAEncryption
41:88:e5:fd:46:47:38:d9:d7:bf:43:8a:bd:7d:5e:02:49:24:
b1:25:5f:d8:77:9f:58:2c:6c:00:bb:39:05:8a:9d:0b:04:d1:
e9:cc:da:f1:97:02:39:40:31:a5:2c:06:bf:b4:94:f1:5e:34:
0a:07:b8:d2:bd:d0:b8:01:08:cd:0c:a5:f4:fa:d1:15:5e:42:
c5:36:bd:8a:42:7f:57:15:c9:d2:45:bd:67:5e:0b:47:5d:2f:
19:18:d2:50:39:d9:ce:71:b2:cd:ea:95:51:37:7f:5d:77:85:
fd:b4:6f:78:f9:8f:dd:8d:0c:1d:6f:fa:d6:87:1c:52:f5:0a:
5e:b3:b0:ed:ab:f7:8e:a1:d4:96:ff:5f:85:2b:de:cf:85:07:
1a:a4:49:63:f0:e6:b3:fd:5c:d6:f0:6e:53:ad:46:37:7e:3b:
d2:b1:b7:aa:ae:0d:b4:6a:30:20:2f:04:95:1a:0a:da:8e:01:
38:96:e1:6a:f4:6f:83:d8:6d:70:e9:8a:04:06:8c:1a:e3:3c:
db:9d:ff:c0:49:8e:12:ff:0b:12:d1:92:81:62:17:81:41:21:
ee:0c:5b:40:f1:04:cc:9c:40:eb:f8:41:47:eb:62:b6:58:56:
d3:70:2b:8f:48:77:f5:da:67:84:4f:7b:1b:d7:f8:40:c7:05:
98:66:50:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:12:33 2025 by rpki-client