Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a16d3500-025c-4019-a854-0f0dbdbcbb3a.roa
File: a16d3500-025c-4019-a854-0f0dbdbcbb3a.roa (raw, json)
Hash identifier: ZDkHN39Lhv+99KO+5e4sf9IbiBgWMB/kC9D4C/3ToMU=
Subject key identifier: 11:0C:C8:6A:50:2F:7A:B2:7E:42:11:16:56:F0:C0:9C:CF:E6:4F:85
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 0879AE8F853A1DDDE0B444D294204F97DA2BBE63
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a16d3500-025c-4019-a854-0f0dbdbcbb3a.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 23.249.208.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:79:ae:8f:85:3a:1d:dd:e0:b4:44:d2:94:20:4f:97:da:2b:be:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ed:61:e9:d9:82:a4:6a:01:d5:a9:89:82:b5:
3d:09:97:b2:32:3d:d9:d2:17:73:b3:a2:f2:ea:5e:
1b:e8:6b:1b:81:9a:e1:f7:15:db:2b:f8:a5:70:94:
cf:c1:49:07:ea:f6:1a:26:55:df:bd:6c:17:2a:48:
84:c7:2a:e2:1c:af:0c:73:7b:85:e4:17:c3:8a:bb:
4d:40:ea:7d:8c:bb:c1:af:b2:85:52:6c:ef:ad:13:
75:8c:6b:df:00:29:21:41:89:33:27:3e:b0:3b:44:
a6:a0:99:4f:eb:0f:f9:ce:5e:1d:a5:40:42:b1:96:
70:66:a3:b9:f5:31:80:8d:23:79:33:15:47:8d:25:
53:39:6b:bf:ca:b0:85:d6:44:e7:ed:db:82:ac:40:
21:7d:4d:07:61:bd:0c:e3:f9:92:6c:eb:de:7e:c0:
34:4d:67:9f:8c:b3:a3:db:01:aa:4c:6c:49:a8:61:
ce:08:37:25:b7:1e:39:c5:86:aa:0c:52:58:65:22:
a2:50:b6:e1:83:8a:46:59:2a:1a:22:85:b9:35:67:
84:cf:e1:d8:bc:72:f6:bf:fe:57:fb:fe:1f:dd:36:
a5:96:a0:78:df:bf:08:4d:c4:31:31:ee:9f:c2:8f:
b9:2c:e3:59:a1:de:71:af:08:59:36:cd:54:8f:b3:
23:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0C:C8:6A:50:2F:7A:B2:7E:42:11:16:56:F0:C0:9C:CF:E6:4F:85
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a16d3500-025c-4019-a854-0f0dbdbcbb3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.249.208.0/20
Signature Algorithm: sha256WithRSAEncryption
35:d9:4b:13:13:e0:fd:16:51:40:fc:38:63:1c:72:5e:72:ee:
31:2a:ac:cc:9f:1f:ed:f7:be:5e:08:7b:56:df:50:c2:06:64:
40:57:1e:22:6e:ce:10:28:d0:d4:cc:1f:be:e3:41:52:45:b6:
3c:36:53:16:7c:41:0a:c6:50:09:0d:36:02:c6:2f:bb:b3:29:
68:8f:d4:a9:8a:c6:cf:e9:0d:1f:fa:8f:01:cf:c2:56:96:7e:
80:fc:b7:01:05:d3:3e:4e:73:a2:f9:55:3f:76:27:84:e5:90:
ef:d1:d5:0c:ee:5b:c7:87:f3:4f:92:75:48:a5:07:61:ee:66:
a7:bd:64:ef:de:5e:ba:e4:55:67:ba:0a:02:d1:29:ba:ff:74:
e9:cc:5a:57:b1:02:5d:c7:3e:e0:48:52:2f:e4:9b:c0:e6:a8:
f4:67:52:55:08:47:ad:c2:70:6e:53:e5:25:1f:80:d5:29:81:
27:bb:c0:3f:db:15:0e:cc:75:f8:73:27:fa:b3:a0:51:7a:fb:
6d:02:5e:42:37:e7:7a:0c:86:39:13:d8:85:bf:7e:ff:ee:0b:
b6:7f:f0:fb:84:dd:81:12:df:55:2a:fe:ef:31:3d:a9:7f:a5:
8a:a7:48:bb:b8:b7:2f:49:2f:73:08:d2:71:c3:24:46:3f:32:
e9:fe:d4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:33:25 2025 by rpki-client