Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f9d74b70-f129-47cb-84a8-48436c7c5b55.roa
File: f9d74b70-f129-47cb-84a8-48436c7c5b55.roa (raw, json)
Hash identifier: DIKllGj5u6BAeter4XaFXVInsQ1kDibm/+T4mgW9HHI=
Subject key identifier: 15:69:97:BD:30:E7:EE:FC:B9:41:11:12:03:DD:5F:CD:20:0F:CE:55
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 48AE9CF223E3F5230D80F9EA8FE9E72FEBE172C9
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f9d74b70-f129-47cb-84a8-48436c7c5b55.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 69.169.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ae:9c:f2:23:e3:f5:23:0d:80:f9:ea:8f:e9:e7:2f:eb:e1:72:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:39:2b:8a:94:54:0e:73:37:45:91:90:d7:fc:
ae:1c:84:20:c0:48:d7:25:87:87:8c:e3:40:7b:4a:
25:03:dc:d6:30:e4:5d:73:3f:39:cf:22:3c:3b:0e:
81:e7:c0:69:4f:04:2b:cd:a1:c8:d6:dd:c5:81:ea:
21:df:64:fa:b5:2e:50:86:ee:b2:8a:ca:f1:03:9e:
6e:be:14:9a:1a:84:93:93:94:ae:79:3a:3f:94:2b:
cc:ae:de:07:67:23:7d:47:3e:2a:d2:69:ac:ea:37:
b8:ff:58:9e:47:2f:48:2a:b7:41:2c:49:8b:6c:06:
bf:61:67:90:2c:91:99:ea:3f:dd:33:82:52:de:e8:
1f:79:63:1e:58:14:ab:1b:cb:dd:0f:a2:5a:1f:ff:
6f:65:d4:8b:95:32:c9:17:00:87:c2:26:b1:bb:3c:
a8:56:7b:b0:80:26:59:31:0f:34:0d:82:cf:63:50:
8e:bd:2c:a8:ab:96:d7:cb:46:2e:9c:89:fb:08:06:
84:f5:f6:ce:c3:ad:50:db:ef:01:76:4e:88:24:6e:
22:b9:6e:16:0f:bc:9f:52:3d:88:19:a6:2f:1e:d5:
5e:44:07:3a:51:f0:a1:38:e4:f8:f0:4c:a2:64:29:
7e:66:45:0d:10:ff:20:e1:09:b8:b5:df:a4:75:5b:
81:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:69:97:BD:30:E7:EE:FC:B9:41:11:12:03:DD:5F:CD:20:0F:CE:55
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f9d74b70-f129-47cb-84a8-48436c7c5b55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.169.224.0/20
Signature Algorithm: sha256WithRSAEncryption
7c:0b:06:81:7a:e0:6f:98:19:23:ad:30:4f:f5:e7:58:4d:3d:
0e:fa:fc:ee:1a:72:5f:c2:b8:58:35:f5:a2:aa:89:a5:c1:26:
be:3b:4b:8a:31:31:a6:fe:03:2a:08:7e:bc:2d:88:6f:dd:88:
07:0e:4f:df:cc:42:7f:7f:5a:99:86:c4:18:6e:5d:a5:07:3d:
de:1f:44:1a:3a:43:2f:23:ab:c3:93:e7:54:d2:68:1b:93:76:
3e:f2:e6:bf:99:a6:bb:7d:63:13:59:cc:f1:a8:d2:86:a0:c9:
8d:ff:89:d2:61:61:02:b7:fe:6f:ff:18:39:54:79:92:df:27:
c6:74:19:a4:4d:b8:ac:b5:f8:db:80:6d:f4:52:95:58:1b:95:
30:7f:2a:95:7a:f3:19:24:35:89:b2:52:07:97:90:04:76:55:
08:40:99:03:74:db:1d:86:a0:f9:ab:fb:9c:97:0a:68:c4:46:
59:48:61:b4:a2:fb:cb:20:a4:8c:66:d6:d0:3b:8a:96:fe:0e:
30:5e:9c:8f:8b:4a:4c:79:18:c5:21:9e:c7:ba:40:ca:ec:fb:
a5:46:47:a4:88:ba:1f:f6:81:f1:06:0d:70:4a:22:65:5d:84:
42:bb:c1:bb:f8:b9:eb:a1:40:04:d7:3b:b4:69:48:6f:86:44:
59:e0:2a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:33:34 2025 by rpki-client