Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/02fd01e1-9966-49e7-ba2a-846b893655b0.roa
File: 02fd01e1-9966-49e7-ba2a-846b893655b0.roa (raw, json)
Hash identifier: AC6YYNRo2gxPYR/kvZBPPjqXmTidDwLPoqtOIt5MABY=
Subject key identifier: 5E:40:AB:F0:B1:F0:CE:36:87:1A:C1:57:E8:62:43:ED:F9:E9:3B:8A
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 481FFF6F1A33593D20C9DBA6E2806488557B3BDB
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/02fd01e1-9966-49e7-ba2a-846b893655b0.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 18.41.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:1f:ff:6f:1a:33:59:3d:20:c9:db:a6:e2:80:64:88:55:7b:3b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:95:e5:a7:87:cf:04:41:f5:2a:ee:a0:ce:c7:
3c:b6:cd:fc:fb:0e:3d:7b:2e:3b:f0:3a:82:14:6e:
28:04:33:0b:56:b8:e1:c7:cc:21:e7:02:96:14:95:
77:5b:2b:57:9b:51:17:dc:4a:5a:2d:5c:06:41:d5:
8b:95:51:7a:81:90:a6:0f:0c:01:4e:12:57:65:fd:
5c:98:1b:a7:ec:ac:79:73:9e:b7:80:16:87:f2:b0:
83:5b:c9:30:4e:6c:1e:83:a8:ad:ff:d2:fa:ff:13:
05:5b:73:d3:f8:dc:e8:7e:eb:b0:4a:b2:8d:52:07:
20:ed:bd:7f:7d:a2:74:47:e5:37:77:51:6f:4f:29:
42:46:a5:f1:d7:de:78:52:35:f5:56:5e:a0:b6:ae:
33:92:24:63:0b:98:ba:5d:66:db:5a:bf:2f:7e:6c:
0d:00:86:7f:83:53:65:a7:27:31:32:64:2a:4f:56:
9d:f2:15:10:89:8c:9a:c6:59:7e:77:64:b4:da:2c:
fd:bf:33:65:0e:d9:b9:be:1a:01:0b:ed:fc:b6:fc:
31:40:e2:61:25:8c:b1:73:ee:44:5c:5f:d2:1e:33:
84:08:6b:2a:c3:57:08:a8:7d:85:b4:03:85:75:f8:
6c:ef:07:2a:ce:68:7e:b5:76:8b:67:d0:dd:d6:74:
29:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:40:AB:F0:B1:F0:CE:36:87:1A:C1:57:E8:62:43:ED:F9:E9:3B:8A
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/02fd01e1-9966-49e7-ba2a-846b893655b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.41.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6c:33:ba:4b:69:c6:af:06:ca:4b:a8:7a:e3:f8:b7:dd:7a:33:
cc:6a:b3:18:4a:34:9b:b1:01:93:08:dd:ff:0b:c7:32:f9:cd:
9b:ba:18:88:58:a8:f6:75:db:1a:b7:41:17:c3:83:95:b9:e1:
ea:2d:58:c5:1b:0d:e2:47:95:0e:4f:de:c2:e8:5b:89:22:9e:
6d:36:f5:e7:37:a3:df:7d:89:e9:99:fa:51:73:3b:f8:c3:9c:
e7:00:9b:6e:e4:a2:7d:43:10:d1:75:1c:67:f0:5a:77:32:1a:
f4:8d:b2:60:de:2b:29:5f:88:5b:df:c9:64:91:39:cf:29:69:
46:9b:0c:64:3e:aa:a5:5d:9c:c1:0d:b7:23:82:c3:99:2e:72:
b9:1a:00:44:40:f1:b9:41:6f:6e:1f:f6:81:15:0e:c9:d4:aa:
7f:69:d7:d2:14:2e:e3:bc:6e:a9:2f:96:82:2a:ad:53:2d:02:
ed:1d:a8:fe:6c:06:bb:1d:59:f4:3c:1e:f5:4e:a9:62:b2:53:
14:0d:82:cc:9c:f2:5e:ba:49:35:58:25:07:ae:df:93:13:55:
14:af:1f:0f:2e:01:59:f7:ea:3c:1f:d3:6e:4a:7c:b5:88:d1:
89:29:37:ca:b3:d0:58:e6:4f:01:57:50:76:6a:69:e8:ab:03:
a7:76:59:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:04 2025 by rpki-client