Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/57cba93e-3593-437f-801b-bb27cde20f55.roa
File: 57cba93e-3593-437f-801b-bb27cde20f55.roa (raw, json)
Hash identifier: OjJrx/uODl0FNkdsDtCga24dAmFF8Ty565uK9wqMLZs=
Subject key identifier: 13:53:E1:9D:AD:31:86:A9:4A:F8:4B:F9:85:A8:BB:0F:C4:D2:75:91
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 356B2FB7EF05DB14BB855728BEDAF5DE8952484D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/57cba93e-3593-437f-801b-bb27cde20f55.roa
Signing time: Fri 07 Mar 2025 00:21:07 +0000
ROA not before: Fri 07 Mar 2025 00:21:07 +0000
ROA not after: Fri 11 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 155.146.48.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:6b:2f:b7:ef:05:db:14:bb:85:57:28:be:da:f5:de:89:52:48:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 7 00:21:07 2025 GMT
Not After : Apr 11 23:59:59 2025 GMT
Subject: serialNumber=8d81d544f18e1f5798bdd2cf0a7d5f898704e5e77ae47e8c5eafabb9e195fea6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:51:8d:d0:cc:96:cc:7d:d0:ee:a8:5d:34:27:
36:4c:0c:ff:8a:b7:de:c1:53:4b:ed:ed:1e:ac:ff:
80:12:40:5b:8b:31:06:14:1c:cf:87:22:e3:1a:00:
6b:01:4a:53:67:58:95:d2:24:50:17:39:5b:52:3e:
11:2f:c5:cf:fe:9e:ae:a5:aa:c9:0a:db:69:0b:2e:
dc:8f:75:1e:91:ab:82:80:f0:7c:2f:cb:a3:6f:73:
c0:66:46:30:ba:83:ce:2a:d9:2c:1d:53:52:be:84:
e1:e2:a8:d8:fa:68:1a:dc:bf:09:72:a1:aa:cb:1b:
a5:3b:01:f2:dc:d7:8c:a6:9f:62:44:2d:9c:65:04:
5e:39:f9:d7:71:54:1e:32:dd:08:6b:e7:22:f7:93:
0e:cb:bf:5a:26:14:0e:10:5c:f0:4f:a4:71:10:d9:
00:5e:fe:a5:bf:b7:4d:9a:27:21:63:41:e4:ab:bf:
cf:a3:75:8e:d4:16:68:e0:48:6c:2a:a8:48:c2:8c:
46:02:b0:59:52:90:b2:de:04:2b:1b:39:81:ce:00:
e7:d3:d4:b4:68:b0:47:95:33:49:9b:bb:33:c3:39:
7d:2d:b9:9a:07:c0:1f:82:66:74:95:e5:97:3f:3d:
0b:cb:e2:fe:b1:7f:82:6c:93:4a:3c:51:76:b5:fe:
b9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:53:E1:9D:AD:31:86:A9:4A:F8:4B:F9:85:A8:BB:0F:C4:D2:75:91
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/57cba93e-3593-437f-801b-bb27cde20f55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.146.48.0/20
Signature Algorithm: sha256WithRSAEncryption
4b:bb:a7:5f:26:b4:49:a4:c3:03:e1:53:e7:48:db:ff:00:6a:
68:a6:f2:d5:aa:86:aa:35:73:b9:9c:61:f7:d7:65:e1:8b:f1:
30:77:33:ec:76:24:bd:3b:b3:e7:a8:89:b4:e9:fa:c2:78:53:
6f:8d:e7:00:5e:32:c8:92:05:3f:ec:74:8f:10:71:f3:e6:fb:
87:6e:26:fd:88:cd:5a:28:51:20:e2:df:24:37:56:36:ec:4b:
dd:a7:94:79:16:bc:be:2b:0c:4d:29:31:a6:79:65:bf:28:f9:
e8:c1:56:5a:bd:0e:90:0c:a9:b6:7b:04:21:4f:c5:77:d8:55:
b1:98:dd:c8:92:8a:ba:0b:7a:b2:5d:66:f0:6f:a5:b4:9f:71:
4e:8d:48:13:75:08:4d:e0:eb:3a:7a:40:0b:ce:c6:50:75:f1:
e9:8a:00:dd:3f:60:e7:26:bf:c0:d5:e2:21:c2:8e:f7:52:35:
93:ca:68:40:3d:4c:50:b5:d6:82:9c:f5:9d:33:99:17:8d:2e:
69:3e:76:be:72:98:3d:63:18:04:ec:9e:b5:62:4e:a5:f8:1e:
db:fb:c6:96:b9:3b:11:f1:76:2f:97:2d:99:cc:58:44:30:03:
29:ac:cb:4b:4d:09:57:42:b1:ae:19:1a:97:c4:28:18:5c:b9:
97:3a:f3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:55:35 2025 by rpki-client