Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a9dbf8ca-af14-47d7-aea4-9556cb337059.roa
File: a9dbf8ca-af14-47d7-aea4-9556cb337059.roa (raw, json)
Hash identifier: pG1aeUS4zi6GWUUYKvTFBWdo52zsSolt0N58hS8eBF0=
Subject key identifier: 46:1E:E5:D4:80:77:3E:F3:13:B2:52:0B:AC:33:C9:6E:94:41:53:BC
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 1B012DA9D8482797E6592F844C6B1CCB98EC2E25
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a9dbf8ca-af14-47d7-aea4-9556cb337059.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:5510::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:01:2d:a9:d8:48:27:97:e6:59:2f:84:4c:6b:1c:cb:98:ec:2e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9f:26:2d:25:7a:8b:db:2c:c6:e1:56:45:4d:
53:11:30:3a:55:19:ba:47:be:ee:47:5b:fd:7c:b8:
14:f7:52:88:d2:ea:cc:d0:e4:1b:01:9b:8a:05:ce:
c4:15:f0:1e:7a:46:c6:3b:f9:c9:29:92:a8:c7:96:
eb:81:e8:bd:29:2e:e2:9d:b6:ea:33:73:a2:c2:dc:
87:31:d2:4d:6d:1a:56:8d:d2:e7:2c:83:ac:e5:cc:
28:8c:1e:0f:e2:32:47:87:2f:9a:ce:98:a9:05:a1:
f4:c8:7f:83:84:04:29:19:d8:08:2c:ec:5e:b2:a1:
76:80:99:15:f5:0a:b0:fc:cb:97:3a:27:b1:f4:cb:
cc:95:79:cb:8a:5b:b9:35:c2:cb:d8:cf:26:91:d4:
d5:b7:69:b1:d5:20:1b:4d:f1:53:dd:5e:c0:38:cb:
d6:3c:8c:e9:5a:fd:4a:4e:de:cb:2e:17:8f:c0:0e:
d5:08:96:5c:3a:45:17:04:a1:7f:b1:d3:8f:c0:a8:
53:78:d5:d8:dd:05:43:10:90:ca:9f:18:fc:46:26:
aa:7c:19:9e:e0:e9:8d:f7:94:2e:e0:53:ef:c0:35:
b9:27:b7:d1:1e:ee:41:77:cc:5c:46:17:90:f0:d4:
23:87:2d:d1:f3:b3:e4:90:cf:96:b6:f9:ea:13:1d:
c9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1E:E5:D4:80:77:3E:F3:13:B2:52:0B:AC:33:C9:6E:94:41:53:BC
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a9dbf8ca-af14-47d7-aea4-9556cb337059.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:5510::/48
Signature Algorithm: sha256WithRSAEncryption
98:58:0c:30:9f:7a:32:16:58:1e:82:d0:f8:23:0a:da:e3:3d:
db:65:9c:03:85:bf:3f:b3:8c:68:72:6a:e0:25:9a:2f:81:a0:
9c:fd:f4:24:89:db:74:98:f0:1a:5a:c2:59:b1:a8:3f:84:96:
bc:3c:45:f9:ea:fe:cb:0d:37:58:f0:34:94:50:51:21:b0:4f:
84:76:7e:37:15:ac:d5:60:40:47:bd:5e:d0:ed:aa:22:d9:6d:
28:8e:5c:7d:ee:c5:37:f3:b0:0c:f0:89:f8:52:0e:1d:af:df:
9c:a2:02:16:be:5d:b5:b3:8c:e6:c0:4f:dc:35:7d:db:12:ce:
76:29:31:3e:64:23:1c:73:4c:cc:e9:b3:8a:9b:c0:3a:d4:ae:
5e:93:72:32:f5:96:17:62:b2:ad:15:87:f3:1a:f4:b1:a9:56:
bb:be:94:69:c4:df:95:ec:23:ae:ed:b7:cb:60:1a:ea:9a:52:
03:38:2e:14:b8:ad:20:1b:04:f9:b0:1c:ed:2a:8d:ed:02:42:
01:ed:31:4d:de:4c:04:a9:e1:20:6d:5d:d7:5b:4e:98:26:4a:
0e:74:d9:63:5b:91:50:2c:52:6b:5c:4e:28:59:65:9e:fe:38:
ef:92:63:f3:39:e9:a4:d1:6d:01:01:7f:95:06:0e:7b:d7:34:
e1:55:f3:90
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 10 04:29:11 2025 by rpki-client