Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/338af4a6-b0af-4a5c-b50f-ef5c17a1f48c.roa
File: 338af4a6-b0af-4a5c-b50f-ef5c17a1f48c.roa (raw, json)
Hash identifier: /nDGhJK8XsivfuItSHS6CVvDUGSAeFvrG0Bfc5hPncs=
Subject key identifier: DF:1D:16:4C:3E:84:C3:33:C1:2C:23:7A:B1:48:38:F1:96:B6:19:30
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1D1E5DAB929C96917788BFCB6403BD06F5AEA0C0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/338af4a6-b0af-4a5c-b50f-ef5c17a1f48c.roa
Signing time: Mon 09 Dec 2024 00:00:00 +0000
ROA not before: Mon 09 Dec 2024 00:00:00 +0000
ROA not after: Mon 13 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:ac00::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:1e:5d:ab:92:9c:96:91:77:88:bf:cb:64:03:bd:06:f5:ae:a0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Dec 9 00:00:00 2024 GMT
Not After : Jan 13 23:59:59 2025 GMT
Subject: CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:f2:53:76:67:6e:18:86:20:30:59:55:a3:44:
c6:b6:31:00:5d:6a:a3:f9:c6:b4:85:68:f1:1a:81:
24:ff:9e:00:9d:df:5a:b4:b0:06:78:be:ff:f0:10:
3e:ff:39:58:e8:df:44:d0:33:4a:90:26:be:c2:a5:
f1:40:73:9f:b6:09:94:25:92:f8:8f:31:f3:a5:85:
78:aa:0d:af:a3:a2:68:89:85:7c:5d:7d:1b:73:fd:
ec:ea:6d:22:8b:c5:6d:f1:3f:56:a7:e2:a7:ed:c1:
54:82:f9:48:0e:77:ea:91:4a:1f:4c:65:a0:47:45:
72:ac:bb:9b:d9:61:a5:c2:6c:f7:d6:b9:df:1e:ce:
ea:3e:fc:23:e8:fd:94:ed:a3:76:f7:f4:9a:7f:35:
ff:ac:fc:e6:59:29:6b:6e:85:74:50:bb:0c:c5:37:
01:17:13:97:bc:41:e6:c8:01:6a:5f:2a:b9:a3:c4:
4d:da:ae:07:dd:d9:ef:05:95:a7:34:6f:6d:19:55:
ee:ea:23:6b:3e:7f:aa:39:16:76:27:ed:51:62:3c:
a1:f1:1d:dd:24:22:a1:00:04:d4:9a:be:52:44:d8:
ed:ed:a2:01:1b:0e:6b:2f:9d:43:cf:dd:2a:b8:36:
65:5a:59:e1:89:5d:01:46:3f:0f:a8:ff:8a:da:3d:
0c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1D:16:4C:3E:84:C3:33:C1:2C:23:7A:B1:48:38:F1:96:B6:19:30
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/338af4a6-b0af-4a5c-b50f-ef5c17a1f48c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:ac00::/40
Signature Algorithm: sha256WithRSAEncryption
92:c4:bd:19:b2:71:54:73:46:65:34:12:7f:9c:f4:bc:75:5a:
a3:a3:2e:71:8c:3f:0a:14:6d:14:da:32:0f:34:fe:6c:33:df:
b7:aa:b0:9d:3a:8d:33:97:ac:b0:70:d3:35:66:76:8e:7e:2a:
86:3c:0d:7c:05:f7:85:c2:5c:6d:a6:66:27:be:8e:41:fa:93:
42:cb:33:64:e9:72:ac:9b:07:a5:c4:07:92:25:c9:6c:cb:22:
14:7e:c4:a0:25:2e:a6:00:cd:a6:7f:1d:42:d0:94:a0:48:34:
3c:35:fe:91:88:71:c6:8d:7c:ae:1b:34:29:0c:69:e2:bb:62:
c0:84:27:3a:cf:18:79:94:f5:1c:86:e5:71:55:0a:3e:cc:ec:
d1:5f:b2:f9:35:08:1b:d9:b8:4b:56:36:63:34:1a:fa:7b:c4:
cc:a1:c3:1c:c2:39:16:02:53:d9:c3:61:29:a6:6a:3f:a1:fb:
eb:90:98:80:12:80:0f:1e:22:20:52:e5:72:eb:94:48:17:79:
c5:cf:9e:dc:e7:cb:eb:f6:ad:68:50:6a:00:70:0b:81:1d:48:
87:80:ee:55:f4:8c:64:04:6e:06:ac:81:18:33:a4:41:f1:cd:
94:00:72:ae:48:7a:2a:a7:6b:ad:6a:06:d8:33:2b:1b:5b:6a:
71:9f:f4:b5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:27:39 2025 by rpki-client