Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4c78a0f7-3625-4055-8cd1-9bf57d3d92eb.roa
File: 4c78a0f7-3625-4055-8cd1-9bf57d3d92eb.roa (raw, json)
Hash identifier: nPjTFHxk/6gReOqAy6oBI4C48xLAYPywBCM3RyMklLE=
Subject key identifier: AD:11:EB:1B:45:15:C2:86:6D:0C:C0:BA:BF:13:2A:46:46:89:94:6B
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 3A997C4C4F2D1B3AC2AE9FB034F3FA64751FB263
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4c78a0f7-3625-4055-8cd1-9bf57d3d92eb.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 205.251.224.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:99:7c:4c:4f:2d:1b:3a:c2:ae:9f:b0:34:f3:fa:64:75:1f:b2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:2f:9e:16:e4:15:c4:b5:ec:67:64:1f:9f:
5f:37:b4:a5:67:00:3e:82:0d:6b:91:7c:2b:83:c3:
b2:64:a2:07:b8:ba:60:74:27:c1:1f:4f:7d:c5:d8:
c1:00:a3:cd:47:70:31:91:7e:a9:a9:01:ca:ad:38:
6d:a1:6a:a8:bc:b2:18:8a:ad:99:65:bd:b1:42:97:
20:b7:9d:1c:11:9e:89:0c:7d:a6:9d:17:b2:3b:ed:
fd:ac:d3:7f:07:89:54:33:e4:60:f8:97:84:b7:90:
6f:8c:59:2d:30:61:f1:bd:2e:f5:7d:28:96:77:c1:
16:94:19:70:6b:fb:69:b9:9a:a9:cf:55:0d:bf:be:
dd:48:8c:9c:2b:17:a5:ae:97:07:0a:53:63:9a:4f:
ed:ee:52:e1:12:24:0c:d2:0b:e5:ea:99:80:8f:db:
c6:4b:78:55:f1:25:9c:fb:84:c0:34:7f:e5:e7:6c:
18:6a:c3:9d:6c:8d:87:7a:51:49:4d:b1:62:a3:cd:
ff:7b:66:ce:ed:dd:0c:0d:eb:78:f9:8b:03:c3:89:
36:11:82:e2:22:6e:55:81:63:d2:54:96:63:25:bd:
dc:f0:1d:ed:4a:c3:4a:c8:09:14:fe:79:80:37:e7:
20:37:83:05:9d:5a:da:68:a4:06:34:f4:75:d3:c2:
3e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:11:EB:1B:45:15:C2:86:6D:0C:C0:BA:BF:13:2A:46:46:89:94:6B
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4c78a0f7-3625-4055-8cd1-9bf57d3d92eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.251.224.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:6e:7c:16:52:a6:ac:3d:d5:27:93:57:80:1e:0f:dc:b5:37:
73:59:ef:c5:57:ee:e5:19:2a:01:d6:2c:4b:0f:e1:98:b3:3d:
b9:ab:54:88:43:0d:c5:de:67:69:9f:5b:f3:82:f5:ea:f6:aa:
3e:27:1a:be:99:ca:ac:4d:90:74:09:96:aa:99:ab:4e:63:58:
c0:15:bf:3f:ff:78:0a:10:63:61:74:08:35:87:77:b6:ac:6d:
1b:41:eb:ff:0f:98:b8:ba:99:a5:77:62:19:26:99:4a:a1:d4:
d6:38:cd:44:da:83:e7:dc:d9:1e:87:5e:fb:01:1e:32:9c:28:
c0:cd:5b:50:79:73:26:2d:78:85:14:47:53:4a:ba:a1:46:61:
35:26:b0:e9:34:75:b8:c2:b4:69:4b:74:d2:c2:d6:ee:62:95:
cb:a1:ae:b8:16:89:ae:12:95:24:64:1b:3e:b0:a5:7c:a6:46:
8e:6b:85:91:8b:73:c7:21:c1:90:4c:3c:84:cb:db:e9:14:99:
c1:2a:e9:79:f2:03:77:c0:b9:88:9a:f9:1d:57:3b:0f:9f:af:
61:4e:c2:59:88:9f:e2:e1:ac:48:29:a1:34:cd:26:36:f6:4f:
ec:bb:11:5b:ce:1a:03:aa:f4:ff:48:77:dd:59:49:6a:29:58:
78:73:e7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:30:25 2025 by rpki-client