Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/929a6eaf-d0e3-4af6-ad8d-686a791be7c3.roa
File: 929a6eaf-d0e3-4af6-ad8d-686a791be7c3.roa (raw, json)
Hash identifier: prmg5Hx+ptYGjtF0l1pMYD5Q0+AwvKdc3fj5sdaVT8I=
Subject key identifier: 6C:42:00:66:E0:0E:2A:C3:E0:AE:37:7C:D5:AB:20:01:6C:B8:B3:F4
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 77AD62E28F26E4A1E3A7BC260D3C192776563A29
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/929a6eaf-d0e3-4af6-ad8d-686a791be7c3.roa
Signing time: Mon 23 Dec 2024 00:00:00 +0000
ROA not before: Mon 23 Dec 2024 00:00:00 +0000
ROA not after: Mon 27 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 35.96.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:ad:62:e2:8f:26:e4:a1:e3:a7:bc:26:0d:3c:19:27:76:56:3a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Dec 23 00:00:00 2024 GMT
Not After : Jan 27 23:59:59 2025 GMT
Subject: CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:37:75:62:df:05:9c:71:17:a7:07:0a:1c:61:
bc:cd:d9:fd:1e:2b:95:20:b3:9d:f2:5c:bb:04:31:
ef:47:5b:a4:88:be:f4:4c:8f:91:38:94:d9:fd:3e:
ae:24:7a:3f:2c:f3:90:85:e3:ed:98:bf:72:b5:1c:
30:13:27:36:e5:6e:3f:04:13:1f:16:2d:c4:b5:02:
75:37:a2:83:a8:54:19:19:d8:87:9f:47:f1:1f:29:
79:9c:05:30:38:b6:3f:d1:f4:38:ff:29:3b:a6:94:
75:01:e5:01:1a:aa:f5:a9:43:d5:a3:61:31:7f:56:
1f:5f:e7:f8:0f:3f:8e:1f:20:dd:b8:14:c7:ad:b1:
dc:00:05:c8:63:3d:f4:0d:43:c6:0e:16:07:5d:53:
26:f5:dc:c8:6b:fc:b9:cb:45:be:8b:35:18:df:2e:
41:5e:8c:28:4e:fb:71:94:52:07:cb:a3:12:1f:85:
68:c4:6c:98:61:06:6d:c2:fd:27:96:ad:b7:04:ad:
b5:79:be:46:4b:91:0d:5e:2f:78:13:c1:cd:8b:d3:
ff:95:2c:7e:ba:f1:76:7d:ad:a5:02:28:cf:79:be:
80:0e:45:93:1a:b8:19:75:f8:d5:ad:fd:90:3a:db:
a7:b4:8d:89:9f:52:4e:8c:03:ee:75:b3:72:83:97:
cc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:42:00:66:E0:0E:2A:C3:E0:AE:37:7C:D5:AB:20:01:6C:B8:B3:F4
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/929a6eaf-d0e3-4af6-ad8d-686a791be7c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.144.0/20
Signature Algorithm: sha256WithRSAEncryption
60:5e:4b:2a:8d:56:c9:76:27:df:cc:7d:9e:17:51:46:5f:7e:
c5:98:22:80:32:5b:90:2c:c7:55:11:f1:d1:59:8d:d9:02:e5:
2f:1f:96:61:93:4e:f6:6d:89:a9:9f:e9:c6:77:6e:69:a9:c4:
ff:25:71:91:22:0a:fa:dc:5d:5c:d1:7c:47:db:1a:c4:f8:05:
e2:f6:e5:bf:68:91:ac:f6:a4:97:b9:fb:2d:f9:50:fb:f4:d2:
d8:1c:0f:03:7e:0a:4d:1f:e8:ba:a0:cf:30:81:84:44:96:f6:
3d:b9:95:d7:86:8b:22:4b:af:47:e8:46:a5:b0:34:41:fc:b8:
01:32:9a:b7:4a:3a:2e:4d:a5:ab:34:e1:2b:79:2e:81:69:e1:
f6:4a:bc:be:1e:35:29:75:fe:5d:79:40:4a:2a:f2:b6:71:1f:
c7:7c:9c:fd:87:9a:f5:bb:36:5c:f7:b5:08:08:5c:fe:8e:16:
23:6f:68:81:56:08:1a:a0:0d:aa:41:c3:20:d7:eb:03:94:f4:
fd:63:30:48:93:64:b7:00:a4:43:e5:a9:32:1f:35:e6:27:54:
89:dd:0f:78:38:69:4e:5a:d7:5e:4d:eb:d3:8b:72:7d:5a:14:
9d:5a:19:b1:4e:73:46:4b:08:2b:ac:d8:84:63:e9:c6:41:c5:
cb:9a:5c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:13:03 2025 by rpki-client