Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a7ca8d72-e53c-4968-869d-fe43e70bd368.roa
File: a7ca8d72-e53c-4968-869d-fe43e70bd368.roa (raw, json)
Hash identifier: 361lBDoGMIRghHOWg43hRBIUt4jMkouzKoVE5qBLnPU=
Subject key identifier: 84:D8:7D:92:74:32:A9:5B:94:13:77:AC:21:D9:23:B3:B5:7C:04:31
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 2C2087B9C605A4ADED5D64F4C851A63EB47B76B2
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a7ca8d72-e53c-4968-869d-fe43e70bd368.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 69.169.230.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:20:87:b9:c6:05:a4:ad:ed:5d:64:f4:c8:51:a6:3e:b4:7b:76:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:ef:b7:08:74:78:b9:e7:d5:4d:d0:39:f2:
f2:fb:ec:ea:7e:f5:fe:0a:24:ff:41:f4:03:c0:f0:
f7:e5:9e:4a:5f:dc:6d:f7:64:1e:05:fb:6d:40:5e:
1b:cf:62:5c:6e:5c:38:5b:a7:a4:c3:80:a2:9f:c8:
df:05:9a:d1:9f:87:e8:26:da:89:62:b7:06:f0:f2:
e5:e2:bd:69:76:0f:76:b5:4a:e4:b3:44:65:db:05:
c9:78:8b:dd:47:a8:5f:49:6e:0c:7e:ca:67:b6:e9:
d1:0e:56:3c:88:da:a0:7c:78:d9:bb:d8:ce:3c:07:
10:a2:33:82:50:95:a8:ca:e2:97:5d:66:e8:88:24:
1f:f7:9f:32:1f:88:33:d8:92:25:b9:04:74:68:14:
ef:ad:d1:7d:ee:29:87:68:63:48:11:ec:08:54:b3:
f9:76:f9:3d:d0:3e:9d:29:c6:7e:56:ab:f4:b0:1e:
8f:1b:d8:3c:29:80:9a:c5:4b:88:8e:fa:6e:6e:c2:
2b:df:8a:56:06:02:ec:fb:14:0a:ff:b8:23:70:af:
90:f2:6b:4d:4a:11:dc:73:d8:5a:36:56:e0:20:e6:
04:b3:83:13:5f:ca:13:08:fd:86:c7:0b:ae:91:5d:
e3:ac:03:56:de:0c:a5:d9:f8:ab:e3:a6:2c:d3:2e:
59:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D8:7D:92:74:32:A9:5B:94:13:77:AC:21:D9:23:B3:B5:7C:04:31
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a7ca8d72-e53c-4968-869d-fe43e70bd368.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.169.230.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:3c:c0:14:a6:f6:99:e6:22:b0:cd:8e:71:75:b6:d3:28:90:
a0:fb:47:54:7f:e9:0e:01:8a:07:ed:bb:0c:d9:64:bf:cd:e5:
36:01:75:b7:10:41:3a:91:e6:d4:58:ae:94:82:16:d0:a4:f5:
5b:37:55:b9:49:ab:df:17:8c:82:96:61:fd:f0:4d:10:70:a7:
59:2d:3b:45:75:68:aa:00:cc:4d:7a:b9:6b:cb:48:76:78:ac:
4a:51:ef:b6:77:8f:b9:d5:a3:c9:64:15:f3:68:0d:e6:71:71:
61:ed:79:fd:56:db:1e:1c:3a:30:53:dc:40:f9:01:09:ce:13:
22:e9:a8:c0:57:3a:b2:9e:3d:b9:91:14:0b:2d:bf:1a:f8:e2:
50:78:3a:d1:fc:55:cc:ed:5b:b0:c4:40:07:13:d0:51:ec:fb:
31:02:b3:39:54:cf:26:fc:b1:26:cc:4e:1c:9c:bd:1e:52:85:
61:f7:5a:1a:95:71:63:d1:07:ed:b2:39:05:28:40:03:5c:9b:
55:00:2e:dd:d7:c1:21:49:85:26:66:4a:19:82:48:17:59:1d:
59:2b:b6:c7:8a:14:8c:e7:8d:e4:c1:c7:8a:5f:ac:83:5a:3a:
85:11:26:8e:15:5b:ac:21:64:a0:36:17:b6:a2:28:6b:55:82:
a0:ee:a1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:18:31 2025 by rpki-client