Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fec1144c-66c6-4fc1-990d-28699f0e8700.roa
File: fec1144c-66c6-4fc1-990d-28699f0e8700.roa (raw, json)
Hash identifier: cUd+n7Zk8EJGnz9DP8u++5+LMrvdvBRWSvqnREzy9W8=
Subject key identifier: CD:4E:8F:B1:9D:A7:07:D3:D6:7A:BD:92:9C:A3:92:1C:49:29:C9:9E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 63AC8EFCFE5BBC63F08DC313F57BDF3F4FB0BEF6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fec1144c-66c6-4fc1-990d-28699f0e8700.roa
Signing time: Fri 20 Dec 2024 00:00:00 +0000
ROA not before: Fri 20 Dec 2024 00:00:00 +0000
ROA not after: Fri 24 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 69.210.68.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:ac:8e:fc:fe:5b:bc:63:f0:8d:c3:13:f5:7b:df:3f:4f:b0:be:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 20 00:00:00 2024 GMT
Not After : Jan 24 23:59:59 2025 GMT
Subject: serialNumber=b9a8e9549db4580d2b189126772b4b2c29379fd4692c5842a67065f575664ffa, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:31:9d:79:49:7b:29:64:c9:00:9b:dc:8c:bc:
b3:b4:50:88:27:f8:e6:01:13:c5:c3:27:aa:85:94:
4f:56:8f:51:10:dc:ea:c6:39:cf:f3:fe:8f:8a:16:
25:0a:d6:f9:ba:5c:e7:4c:94:6b:01:de:e3:b2:9c:
27:d9:67:84:fa:57:fe:5f:59:11:be:66:bf:1b:77:
a5:91:9a:b8:66:49:ca:89:e9:96:c2:00:6f:91:a3:
77:ae:68:3b:27:ae:84:09:5a:ef:a3:bb:a4:92:9e:
ae:5a:05:a8:92:21:6b:92:62:81:14:7c:32:37:39:
d0:91:e5:1c:cb:89:1d:cb:a3:58:67:6d:13:1d:4e:
56:1d:53:e9:69:31:12:50:a5:90:f3:7b:2e:21:ff:
86:c2:36:fa:0c:72:25:ef:e6:c1:f7:cd:8d:e6:b5:
40:e4:ef:d4:c1:b2:f2:b7:55:ee:a8:5e:42:61:d1:
06:ef:82:fd:19:52:15:6e:7f:09:da:59:05:38:c3:
6c:5b:12:6c:8c:73:9f:e5:ab:d8:76:9c:d5:6b:19:
61:85:34:cc:30:a4:73:5c:e0:78:c6:bc:b8:b0:5e:
1e:b4:8d:b5:cb:b1:b1:f6:45:39:9f:6e:9c:5f:5b:
52:9f:20:a1:a9:4c:2f:42:e6:8a:1a:ad:2a:c2:f8:
2a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4E:8F:B1:9D:A7:07:D3:D6:7A:BD:92:9C:A3:92:1C:49:29:C9:9E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fec1144c-66c6-4fc1-990d-28699f0e8700.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.210.68.0/22
Signature Algorithm: sha256WithRSAEncryption
74:e4:e9:ca:cb:f7:69:18:b5:5c:a3:19:c5:43:59:6d:34:02:
c0:47:0d:93:0b:73:97:d6:82:4a:50:df:83:20:34:96:9f:76:
44:28:92:c9:56:1a:d2:37:15:fa:fa:e1:4b:f0:8d:c2:25:41:
95:2e:0e:51:55:b3:77:57:08:13:44:27:69:16:de:75:1c:d0:
9e:f3:07:33:1d:62:3b:6f:be:b6:56:7b:e9:81:9e:79:9c:cc:
ff:23:63:5e:10:7e:ba:81:71:c0:cf:7a:87:99:6f:73:bc:9c:
cc:e9:6d:25:fb:e8:bb:d6:1c:f8:58:44:a3:68:f5:b8:f9:e3:
b2:e7:f1:48:77:64:4c:cc:0e:f6:f8:c1:3e:81:c6:4a:29:e6:
98:3b:6e:7a:b1:d6:39:3e:f6:47:cf:bc:dd:17:9e:ff:b2:b4:
01:06:c5:9a:47:c8:c4:b4:ab:6a:1b:ca:83:8f:ca:e9:5f:fb:
85:b0:ee:a2:43:be:a1:ca:f3:82:d9:32:c5:92:04:67:21:e4:
45:5c:cf:43:76:ed:eb:b0:45:23:db:a6:64:21:6d:d6:64:b7:
73:e8:f8:c5:c3:fd:85:cb:ea:be:55:bf:0c:72:9d:8d:2e:42:
5d:44:f3:e3:44:fb:cc:9f:ba:40:84:e7:cc:66:11:f2:63:ec:
0d:44:cc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:18:07 2025 by rpki-client