Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d9820863-0ada-450a-8c92-a29a28133a4a.roa
File: d9820863-0ada-450a-8c92-a29a28133a4a.roa (raw, json)
Hash identifier: zwakpT7DNXnQlYDsygHZzvfZOdquBtiiL4SUOYW6QC4=
Subject key identifier: 8C:30:36:91:55:34:A4:DE:28:61:42:29:DA:A5:7D:2E:DA:22:60:15
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 61E74D2DDC1E560208B30E301BF8BBAE1C59A95E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d9820863-0ada-450a-8c92-a29a28133a4a.roa
Signing time: Tue 31 Dec 2024 00:00:00 +0000
ROA not before: Tue 31 Dec 2024 00:00:00 +0000
ROA not after: Tue 04 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 205.251.208.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:e7:4d:2d:dc:1e:56:02:08:b3:0e:30:1b:f8:bb:ae:1c:59:a9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Dec 31 00:00:00 2024 GMT
Not After : Feb 4 23:59:59 2025 GMT
Subject: CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2c:e3:57:c2:b9:d6:7e:73:71:9b:bc:29:cf:
73:b8:6f:b0:78:23:c5:31:42:f3:7b:2c:a9:79:9d:
62:66:cd:5e:a7:cd:0d:5c:1e:0a:7d:a5:b2:96:90:
fa:1c:8b:55:3a:a7:e7:da:5a:9b:20:87:9e:e5:08:
dc:5f:19:7a:8a:aa:d5:ac:72:a9:a4:41:0a:73:5a:
13:ec:c7:c3:6b:45:45:79:0a:97:21:e6:9d:fa:f4:
fd:e7:9e:80:cb:19:8e:21:25:a4:66:95:e0:d7:97:
08:fe:e0:75:7d:ac:64:05:4e:1f:e7:3a:e0:79:56:
7d:42:92:83:01:65:b0:73:83:8e:17:09:3b:06:af:
90:fe:37:29:24:15:63:c9:97:1f:23:f3:fd:c2:4e:
8a:8b:fa:4d:cd:bb:bd:bd:1b:97:f1:de:0c:16:bd:
ec:b3:d8:6a:61:48:15:43:ab:c5:6b:0f:bd:1a:f0:
e1:0e:b6:c4:c2:ef:cf:20:68:61:5a:89:e7:f5:59:
2a:85:c5:ad:63:92:53:d1:9d:14:f3:c3:04:9a:79:
d2:af:44:b9:94:07:15:da:47:f3:37:98:df:be:fb:
20:97:64:c7:0b:84:01:7d:47:b4:26:55:47:45:4e:
4c:4f:f4:8b:e5:4c:94:50:f3:f3:d0:44:bb:48:c8:
6e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:30:36:91:55:34:A4:DE:28:61:42:29:DA:A5:7D:2E:DA:22:60:15
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d9820863-0ada-450a-8c92-a29a28133a4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.251.208.0/20
Signature Algorithm: sha256WithRSAEncryption
b4:16:03:81:ac:df:76:41:2d:d8:9a:13:7e:2f:c0:7f:f8:ad:
04:34:3e:ee:29:7e:9c:ce:98:57:85:69:a7:93:16:d7:0b:f5:
4b:c3:ce:8a:54:6c:f5:6a:f1:33:9d:37:58:58:80:b2:50:a0:
47:96:ec:ec:29:c9:ce:1a:7d:0f:07:09:d4:e7:ce:b0:d9:10:
a7:f5:4e:2c:23:d2:16:0c:88:97:5c:78:c6:35:d9:9d:9a:a0:
4f:bd:7b:e0:7f:68:70:8e:34:97:fd:0e:d9:22:52:fc:6f:a0:
32:0e:ba:78:10:c4:39:b4:65:ce:22:82:4c:a3:fb:ea:e7:bc:
c3:ef:54:3b:99:15:86:f0:7c:9c:3d:ab:d8:f5:b1:9f:fb:93:
be:55:44:4b:ad:33:35:53:2f:d2:51:1c:ed:e5:dc:1a:66:5b:
73:22:1f:7d:d5:ae:b8:25:01:31:45:e1:c1:4b:f7:ea:a6:86:
d1:d0:c9:e3:36:ac:29:40:a0:a1:55:cb:d4:27:e5:02:14:e2:
5c:a5:a1:13:28:3f:4b:b4:b2:51:72:17:5e:d6:f8:f1:ab:7a:
07:fb:63:6a:6e:16:88:2f:f8:ea:05:fa:bd:c2:cf:1a:81:f0:
0e:f2:ca:c9:e8:7e:fa:8c:c9:7d:17:64:63:6a:95:a4:61:0d:
11:37:76:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:34:19 2025 by rpki-client