Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/6df707bf-c0f6-411f-a830-fb5f4325a4b7.roa
File: 6df707bf-c0f6-411f-a830-fb5f4325a4b7.roa (raw, json)
Hash identifier: Ke1o7Zu7kVtmeqhziaVmpNsJz1wAAJ3/du9a7kps9jU=
Subject key identifier: 4D:EA:FD:F7:79:98:1A:D7:12:54:1F:0B:C4:3C:3C:55:4E:97:13:26
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 11D2FA2EE3E03FD4728F159E80076FC8D8AAB35B
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/6df707bf-c0f6-411f-a830-fb5f4325a4b7.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 23.251.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:d2:fa:2e:e3:e0:3f:d4:72:8f:15:9e:80:07:6f:c8:d8:aa:b3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:b1:fa:6a:85:27:91:88:eb:76:7e:07:c6:
42:ff:d5:6e:6f:cc:9d:71:3d:3b:28:a7:41:18:7b:
76:60:7b:08:92:1d:39:71:7a:00:d0:0b:26:ed:b0:
15:a8:4b:e8:af:b9:83:db:00:6f:3a:ec:de:1c:46:
d6:98:f3:50:ff:42:dc:75:68:1b:58:76:6a:88:77:
13:7b:94:27:2b:48:96:b6:54:b4:1b:88:8c:54:25:
9b:1b:5a:64:9e:c6:95:9e:cd:fc:95:1b:f5:02:67:
a8:fe:06:e9:dc:eb:b3:29:d8:d1:9d:49:fc:b7:a8:
2f:65:9a:96:46:a8:1b:f9:10:aa:2c:83:86:12:cd:
86:35:32:cc:f8:a2:0b:f9:1d:1d:50:8b:3f:9e:3e:
2e:e3:4e:cb:79:54:b3:db:7b:e1:f2:f3:49:f1:64:
e3:3b:fa:bf:aa:73:07:78:b3:f4:ad:0e:4f:8c:e3:
4f:fb:91:ca:3e:a4:74:b8:80:10:a4:bc:48:7e:61:
10:1d:f3:ae:91:7b:0e:8a:a7:37:ff:b1:3a:e9:38:
fb:ea:a3:bf:38:f9:9b:42:45:ea:9d:10:55:6a:fa:
fc:eb:73:09:9d:b3:3d:2d:9b:9f:1e:57:d0:26:25:
44:e7:7d:bf:9a:7e:2e:9d:76:26:2e:5c:67:45:e4:
9e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EA:FD:F7:79:98:1A:D7:12:54:1F:0B:C4:3C:3C:55:4E:97:13:26
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/6df707bf-c0f6-411f-a830-fb5f4325a4b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.251.224.0/19
Signature Algorithm: sha256WithRSAEncryption
16:b9:24:55:76:dd:1e:41:41:b6:41:2a:e9:2b:f7:bf:13:89:
6b:0f:39:28:45:63:3e:fc:d4:80:f9:f8:2b:7d:79:87:53:ea:
10:86:22:1a:f2:24:e7:47:02:f7:f8:5a:f4:59:41:4a:09:c8:
9c:b8:1b:fd:ad:11:bd:f7:9a:72:64:59:5c:bc:13:5a:30:14:
17:25:02:0a:8b:1c:ca:31:17:9e:f5:44:0b:bb:b4:c1:c0:62:
eb:f0:64:a8:50:2e:96:04:3e:01:f5:1d:93:ab:52:ce:6e:1e:
0f:5b:b7:78:71:bf:36:36:5f:73:03:2d:67:0f:45:22:7d:4a:
3e:fb:29:cd:0a:69:79:d6:fe:66:db:c2:42:8b:41:ab:65:07:
56:4c:c8:88:79:bc:cd:4a:00:7d:06:98:8b:e3:69:3a:b0:6d:
ad:69:aa:6d:c7:27:55:0b:43:44:e6:3c:b4:21:4b:ca:db:c1:
fe:57:ab:6b:01:e4:ab:f4:df:08:ab:cc:de:c9:b0:35:b0:fd:
73:4d:a1:8c:d5:d6:82:01:91:7d:a1:52:6e:24:52:9b:b3:b6:
54:af:3c:5d:6a:d5:1e:af:ee:13:aa:05:27:91:2c:27:c7:7a:
a7:4b:e9:e5:5a:29:7e:d5:ac:6c:77:58:63:ba:1c:86:36:0c:
97:1a:b9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:33:37 2025 by rpki-client