Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5d7f7850-4a47-4596-b49d-39e113dc1fa3.roa
File: 5d7f7850-4a47-4596-b49d-39e113dc1fa3.roa (raw, json)
Hash identifier: MqB+EUEqtmfuGr+geFbqkEUT9me3ydfvI6KQKQoEoHY=
Subject key identifier: C5:3D:A1:BB:68:9E:D6:2A:FD:66:96:F2:8E:DA:75:96:AC:AA:0B:F5
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 6C174DC5F37E49A181F9DD23A20F35F03D9F83
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5d7f7850-4a47-4596-b49d-39e113dc1fa3.roa
Signing time: Wed 04 Jun 2025 22:37:03 +0000
ROA not before: Wed 04 Jun 2025 22:37:03 +0000
ROA not after: Wed 09 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:17:4d:c5:f3:7e:49:a1:81:f9:dd:23:a2:0f:35:f0:3d:9f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Jun 4 22:37:03 2025 GMT
Not After : Jul 9 23:59:59 2025 GMT
Subject: serialNumber=98a14407dcc83a2d63152ba4688cc555808bf249ef326fa376fff49b5c6eb587, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:dc:a0:9c:6d:4b:f8:d7:35:3c:44:ad:69:43:
0e:e6:b6:10:52:dd:35:c2:80:83:00:5c:c4:1e:92:
85:28:0c:bb:91:01:93:5a:31:8f:7b:ad:1c:6b:87:
3b:be:ec:9c:72:69:2d:e4:bd:c8:84:98:af:21:3b:
7d:cc:6b:ca:bc:ac:9d:58:20:5a:e7:7f:7e:e3:92:
c9:ef:30:27:14:04:aa:52:ba:d4:36:84:c0:49:74:
04:e0:e7:39:6e:86:fe:52:d8:5d:72:47:30:93:a7:
13:df:76:01:d5:3d:70:7a:94:db:6a:19:de:ef:ff:
29:6b:ea:ac:3f:3a:66:42:0e:71:b3:58:9f:ee:89:
b6:b7:5e:b1:0d:96:47:64:8d:20:3a:38:46:8f:d1:
5e:aa:c7:6e:be:84:49:db:0c:85:e9:f4:fb:23:18:
56:15:a0:26:7d:8d:d2:e0:9a:38:62:83:0b:78:3d:
24:d7:80:16:c7:e7:db:bd:57:bb:a6:06:cb:7e:5e:
16:dd:58:60:3e:b5:e7:57:83:8c:86:2d:f0:5f:95:
90:9b:ef:10:66:e8:be:40:62:8e:7b:51:ac:b5:61:
41:7c:cd:f1:02:34:d8:e2:88:bd:da:b3:64:f6:00:
62:ee:41:d0:25:25:dc:41:44:ba:3b:00:42:9c:34:
89:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3D:A1:BB:68:9E:D6:2A:FD:66:96:F2:8E:DA:75:96:AC:AA:0B:F5
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5d7f7850-4a47-4596-b49d-39e113dc1fa3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.0.0/16
Signature Algorithm: sha256WithRSAEncryption
78:13:61:8d:45:29:d4:e3:9c:45:39:05:e7:12:0b:87:33:fe:
07:55:49:00:8b:c6:2a:fb:f2:e6:85:0d:70:de:79:80:16:bd:
02:ce:a9:58:70:d5:af:71:aa:ed:66:72:ed:2c:34:a3:bb:06:
09:f7:e0:22:87:22:8e:0e:9d:a0:ee:83:dd:e6:2b:52:2b:a0:
9b:66:a5:b2:36:f2:80:87:c2:9f:d5:8f:70:a4:dd:8c:f1:55:
a6:b4:e1:a5:5b:6e:29:bd:23:7c:0b:bf:1d:71:4a:f1:2b:2b:
df:15:ee:7a:48:c0:4d:9b:3f:e5:2e:08:36:fc:15:fc:e1:06:
f4:97:a4:0d:7d:46:76:cc:9f:e8:60:16:2a:18:7f:43:8b:13:
09:e0:36:8c:8a:3c:b2:e7:b8:54:82:0c:5e:fc:3f:6f:61:23:
79:bd:87:42:9b:32:82:fe:1e:8b:da:c3:38:71:83:a2:9f:86:
ea:16:ce:de:df:da:25:93:51:09:3a:e0:1e:77:9f:cb:51:49:
85:a9:86:bf:21:fc:28:51:28:9b:99:53:62:4f:d9:7c:40:fb:
b7:75:1b:e5:d9:03:67:e8:e7:c0:d1:43:fb:ad:63:9c:e7:34:
58:06:d3:c1:0d:55:21:06:7b:8d:51:39:0d:c0:fb:96:2e:0f:
31:a5:9b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 17:26:21 2025 by rpki-client