Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0aa379ee-fdba-407b-a393-51b27b3d01f8.roa
File: 0aa379ee-fdba-407b-a393-51b27b3d01f8.roa (raw, json)
Hash identifier: sXh3dIdXfqqzw8N8pvqB1Mx9kdDvodqXozWKfK9lM78=
Subject key identifier: 7F:0B:18:17:50:DA:6D:CE:30:F4:C3:C8:08:42:1A:05:D9:E5:65:50
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 7B2BE316D0905E19672D80C111667627E7BE36D5
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0aa379ee-fdba-407b-a393-51b27b3d01f8.roa
Signing time: Mon 23 Dec 2024 00:00:00 +0000
ROA not before: Mon 23 Dec 2024 00:00:00 +0000
ROA not after: Mon 27 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.80.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:2b:e3:16:d0:90:5e:19:67:2d:80:c1:11:66:76:27:e7:be:36:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Dec 23 00:00:00 2024 GMT
Not After : Jan 27 23:59:59 2025 GMT
Subject: CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:de:83:77:b6:98:58:da:ec:27:d5:c9:ae:b0:
b1:be:af:b5:ca:dc:28:ba:29:1f:6f:b6:46:58:78:
14:6b:10:44:76:19:ed:04:eb:47:1a:75:56:6b:53:
a4:9c:96:f4:50:67:35:39:30:cf:18:c6:04:d3:08:
64:76:fa:e2:c9:16:70:c9:0b:cc:66:ca:42:a1:c9:
e8:25:d7:4d:54:7a:bc:6a:82:fb:2f:ac:d4:c4:c9:
b2:e2:ef:1b:a4:7d:08:80:df:58:84:5b:94:ea:59:
b0:e3:6b:7c:06:a3:83:5a:ee:fb:35:35:72:a6:6d:
20:0b:6c:ca:d1:be:9a:95:c8:c0:d2:c7:78:3c:0c:
25:44:81:5a:41:a8:fb:84:d1:40:0f:f4:a3:f0:43:
b1:1b:83:21:c8:6c:ac:41:a0:89:ac:7d:9f:3a:e1:
90:b8:c2:7a:fb:6a:c7:b7:cf:6e:b8:c3:db:f0:08:
52:f4:4c:02:ba:97:c1:59:54:d7:29:4a:ec:94:b7:
14:a4:f0:78:8d:c6:cf:f2:12:55:97:d4:f4:69:18:
f1:9c:9b:73:18:6a:7c:68:69:63:05:f2:7a:f1:24:
bd:9b:aa:3f:b0:b7:97:e7:ff:1c:a2:8d:50:e0:d4:
8a:78:7b:6a:75:b2:1a:7c:e4:94:4d:34:89:89:da:
41:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0B:18:17:50:DA:6D:CE:30:F4:C3:C8:08:42:1A:05:D9:E5:65:50
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0aa379ee-fdba-407b-a393-51b27b3d01f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.80.0/20
Signature Algorithm: sha256WithRSAEncryption
30:52:f7:8d:b0:ae:fc:4a:50:c1:a3:b4:1d:d7:01:aa:e9:27:
96:70:1b:01:8a:d9:d7:43:e8:cc:49:c7:88:18:6a:e2:a0:5f:
38:fd:21:17:a7:93:b1:d9:ce:ab:36:bc:c1:34:1b:4f:8e:a2:
91:00:e9:9c:9a:2e:01:de:67:08:c6:88:0c:ef:f1:c9:08:c3:
59:1b:bf:4a:1e:10:11:87:5d:59:c6:a4:db:15:c6:44:ca:b5:
be:d3:66:6a:c7:46:85:fa:da:8f:f6:70:04:01:b4:8d:da:dd:
f1:4f:2c:97:8d:3d:d9:63:1c:67:d1:5d:ff:3a:f2:b9:77:1a:
9a:1a:bb:2b:ef:cf:11:07:2b:30:fb:d5:f5:d0:99:28:8d:b9:
9a:ba:c1:e7:f9:8a:d7:c1:9a:a1:90:95:da:64:17:31:9d:c8:
71:72:ae:6d:87:f5:75:f8:f0:a1:ad:fc:79:dc:af:e9:43:b5:
39:cf:5c:b1:52:40:3c:0c:7b:0f:15:7b:4c:ff:60:83:09:3d:
43:e1:bc:37:f3:f2:e2:be:28:ba:d3:ac:4b:cd:42:8c:21:e1:
67:70:c4:29:ee:3f:e5:26:d3:7a:79:55:bf:32:e8:2a:37:78:
40:2b:a8:3e:88:65:70:58:6a:de:ee:ad:2b:5c:b1:3d:7f:77:
be:67:c2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:30:39 2025 by rpki-client