Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa68d5c0-4b41-46d8-bffd-56f22d919e1c.roa
File: fa68d5c0-4b41-46d8-bffd-56f22d919e1c.roa (raw, json)
Hash identifier: LLEyi68bOFA9f4GPmmWUc/shXlco57bbm535ibBM2Zk=
Subject key identifier: BA:BC:07:D8:95:6F:61:25:55:E8:50:DF:26:4D:53:27:AD:02:1A:82
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0EBAADC078896A410834CB5A548A2935B78E767F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa68d5c0-4b41-46d8-bffd-56f22d919e1c.roa
Signing time: Tue 03 Dec 2024 00:00:00 +0000
ROA not before: Tue 03 Dec 2024 00:00:00 +0000
ROA not after: Tue 07 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 208.86.88.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:ba:ad:c0:78:89:6a:41:08:34:cb:5a:54:8a:29:35:b7:8e:76:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 3 00:00:00 2024 GMT
Not After : Jan 7 23:59:59 2025 GMT
Subject: serialNumber=205bfa46fc7f57976470487e1a7153124b021fd954be4014a47bf6c383ed13a8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2a:7a:fa:95:54:68:e9:23:28:c6:78:6a:b0:
c3:bb:50:0f:d3:31:90:b1:bf:9e:c0:da:1f:26:8b:
30:54:2e:47:f4:54:eb:0a:b0:a8:b8:75:5c:20:a5:
9f:0e:ed:ed:45:9f:58:9b:1c:b3:22:51:bf:09:91:
ad:94:4d:5e:f4:cc:ce:0c:e6:61:89:6c:45:a0:41:
e3:a5:eb:bc:80:15:f5:5e:84:5d:70:43:1c:1e:c4:
e6:2d:19:2e:5f:74:14:f1:28:ce:a7:60:46:7f:e2:
f2:0f:01:87:56:06:8c:16:d7:0f:c0:a1:32:49:7a:
04:af:f3:35:82:4b:69:42:90:0a:fd:f0:a2:6a:2c:
51:01:f1:2d:74:f5:32:e2:03:b5:b8:18:c8:ef:38:
89:9f:b2:68:0d:35:c0:0d:d5:ba:40:48:07:8b:80:
c2:c1:b5:0a:d4:bd:6a:2a:62:35:5e:09:3f:61:5e:
bb:5d:6c:70:fd:de:18:45:20:63:30:a4:13:29:2a:
4f:cb:b0:30:41:cc:63:3d:f4:06:ce:05:6e:88:9d:
f2:c0:57:47:68:85:54:99:f0:77:1e:5f:b7:28:72:
1f:7c:11:05:56:18:d9:68:5f:b7:1b:88:07:f6:8d:
85:1b:51:a9:33:f3:99:1c:40:11:ca:30:71:5d:b5:
bc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BC:07:D8:95:6F:61:25:55:E8:50:DF:26:4D:53:27:AD:02:1A:82
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa68d5c0-4b41-46d8-bffd-56f22d919e1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.86.88.0/22
Signature Algorithm: sha256WithRSAEncryption
63:e5:c4:5a:31:35:be:7b:f0:64:dd:f4:c2:7f:d5:46:5a:eb:
8e:f4:48:84:cb:e5:4b:7f:ba:bf:29:a9:6e:c6:e1:d6:aa:f4:
fd:ae:cc:fb:45:e8:37:e2:97:f5:7b:ff:02:21:e9:b8:c5:bc:
f5:55:b4:7a:1b:be:85:07:34:6b:52:11:e1:f6:f5:04:37:be:
87:80:fb:cf:91:95:ea:63:0d:21:b5:f1:fc:67:a5:36:d5:2e:
4e:24:3c:a8:45:a4:cf:85:36:c2:73:c4:a1:55:f1:11:c5:bf:
d4:d7:77:5a:3d:11:51:fe:30:18:f8:7b:c8:f5:f8:1e:19:58:
9b:24:f3:d7:cc:3b:39:99:f0:c5:3e:d3:25:f6:95:a6:8a:79:
cd:8f:70:5e:14:6e:44:63:10:02:d9:89:57:ce:15:b8:e5:16:
d8:81:12:0b:dd:59:70:0d:10:bd:c0:b3:b6:37:33:5c:dd:18:
e1:b9:fa:7b:97:15:21:c1:a5:56:60:8d:b9:33:67:8f:d2:9d:
11:f0:19:f7:c3:05:9b:95:75:d0:f9:06:c4:94:7c:d9:6c:20:
9e:37:f8:5c:87:43:7a:ff:0e:2e:b9:d5:b3:a7:1f:6b:65:79:
58:05:12:3b:0c:06:44:89:40:aa:3c:24:e4:8a:3f:ac:8b:1d:
4b:9b:1d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:16:47 2025 by rpki-client