Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/faafb7cf-b998-40b6-95c1-1942a3e23801.roa
File: faafb7cf-b998-40b6-95c1-1942a3e23801.roa (raw, json)
Hash identifier: iuHX/kXhaaCpxfqNouNaYGKt+y6bfsW8ufMBiIuHi3Q=
Subject key identifier: A2:21:2C:C9:E1:50:35:4A:F1:F8:F9:D2:1E:69:A8:29:29:3F:4D:66
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 227D19E21DC8C5E89DDE0A78FB39549421E6FFF0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/faafb7cf-b998-40b6-95c1-1942a3e23801.roa
Signing time: Fri 29 Nov 2024 00:00:00 +0000
ROA not before: Fri 29 Nov 2024 00:00:00 +0000
ROA not after: Fri 03 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 98.131.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:7d:19:e2:1d:c8:c5:e8:9d:de:0a:78:fb:39:54:94:21:e6:ff:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 29 00:00:00 2024 GMT
Not After : Jan 3 23:59:59 2025 GMT
Subject: serialNumber=c1b5f7d61da5ed83ec93c9d967ddce9b74cfb22c81dd842a320bb0341c8e3255, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cd:c2:4c:cd:64:d8:45:c5:79:bc:d2:ff:c0:
9b:86:7c:53:22:de:db:ba:52:55:98:ef:ad:b5:05:
a4:d1:dc:b8:a1:c0:ad:56:2e:37:f3:a3:1a:c6:04:
53:c2:a1:ce:0d:78:27:37:c6:a2:02:ce:c2:f0:e0:
71:26:e2:05:6e:07:6a:81:14:50:0f:42:41:a8:13:
66:52:c8:07:35:19:3e:ce:fb:4f:0d:cc:8d:0c:dd:
67:4f:3d:c5:9c:1f:5d:05:22:e8:ec:30:ae:a4:c7:
79:8f:75:bd:30:e5:86:90:67:f4:80:8f:2c:15:f1:
14:52:62:cf:58:ee:1f:25:f3:b3:4a:23:df:a6:55:
29:d4:31:11:5c:45:1c:20:e5:bd:49:81:cc:1a:ce:
7a:c3:33:9a:14:18:31:06:5b:49:2f:55:e2:f8:38:
a8:44:50:a9:44:da:56:65:90:33:b7:d2:2d:bd:bc:
61:1b:ea:c4:ad:0d:8e:b5:82:dc:3b:30:f4:04:4e:
81:16:07:34:4b:81:41:a1:26:f5:82:66:42:4d:55:
78:81:d4:d0:44:c7:23:34:ae:06:6d:6a:87:8f:12:
28:f1:33:de:c0:95:a8:b7:a5:b0:59:b1:e8:94:e1:
bf:4d:5c:06:1c:1c:eb:67:f6:44:5a:d1:59:08:50:
7d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:21:2C:C9:E1:50:35:4A:F1:F8:F9:D2:1E:69:A8:29:29:3F:4D:66
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/faafb7cf-b998-40b6-95c1-1942a3e23801.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.131.0.0/16
Signature Algorithm: sha256WithRSAEncryption
29:07:3e:3b:64:86:cb:4b:ec:3c:7e:d7:cb:8b:e9:14:07:3c:
2c:67:42:36:c7:5a:dd:52:27:90:6f:67:f0:bb:2d:6a:b1:0b:
eb:41:f4:c1:70:7e:10:3a:7d:ee:95:ac:0d:08:3a:3b:44:0e:
db:7d:05:35:76:96:54:d3:01:31:a4:47:f6:04:99:58:af:50:
e5:78:b2:b7:f5:26:ac:c0:10:09:da:a1:d3:15:b3:89:a0:56:
83:07:79:ab:fe:3e:f3:93:30:69:1f:e9:4d:5f:69:33:cb:08:
9c:8f:d8:49:d0:96:b7:56:fe:5d:6c:11:4b:4c:9a:8b:28:d3:
ba:d1:0e:9f:78:4a:e5:6d:d8:57:61:23:5f:f1:02:08:a0:39:
af:89:23:74:8d:16:de:37:38:5c:7c:ec:4e:af:69:d2:6c:00:
05:b3:39:48:ff:74:73:e0:d0:1c:45:39:77:ad:c7:23:fa:db:
58:dc:71:cf:29:23:fb:3d:f2:8a:da:32:d6:e7:e7:59:6d:0f:
97:59:c1:ce:73:bd:3e:2d:0d:26:c3:78:b9:27:28:67:99:23:
3e:a6:ae:55:74:e2:aa:7e:0a:d8:12:f2:7e:5e:d2:74:c5:1a:
42:cb:ec:08:61:50:6f:a6:de:08:3e:0b:ef:8d:d2:fa:2b:57:
d3:c8:a9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:18:26 2025 by rpki-client