Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21f3594b-8a00-4898-9867-694b1f41ac67.roa
File: 21f3594b-8a00-4898-9867-694b1f41ac67.roa (raw, json)
Hash identifier: M+PB5w+f24h5KaDyoBrQ4C38YMcvIi1/LZo5XOEzkYQ=
Subject key identifier: 0F:24:B3:AE:61:F2:2B:1F:4A:00:A7:91:C6:7C:79:E0:BC:23:18:8B
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4F26938AE89305711BE88AD71A788C0F347A42D6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21f3594b-8a00-4898-9867-694b1f41ac67.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 18.104.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:26:93:8a:e8:93:05:71:1b:e8:8a:d7:1a:78:8c:0f:34:7a:42:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:64:fc:83:77:37:81:23:e2:ee:d8:dc:b3:8c:
6c:4b:fb:1a:13:e1:65:ce:c7:32:7b:d5:35:be:1e:
d1:b2:b7:b8:09:c5:78:2d:de:35:07:d9:dc:f9:f5:
9e:f7:b1:e4:e8:dd:32:3c:75:8d:08:e5:45:44:c1:
f7:91:d5:5d:a7:62:bf:6c:b0:d7:9b:b2:1f:c0:1d:
10:6d:be:7b:85:96:da:4f:4b:25:74:9e:69:37:c3:
f3:5f:8f:c5:2a:8d:84:5d:1f:8f:fe:c0:47:d8:3f:
cf:08:c5:f3:b7:a4:2a:64:4c:2f:1f:1a:0b:c2:32:
93:f9:43:a2:9c:a2:08:e7:d7:6a:ea:71:8f:30:26:
8f:0f:e8:58:db:9e:23:d9:5c:a5:e5:d2:63:4d:39:
d8:56:a7:8e:f9:a8:1c:f0:a1:26:e0:27:44:a6:5a:
b6:f7:e1:f7:51:16:28:3a:cc:aa:9e:5d:89:0f:9a:
a9:6d:ab:cc:19:32:58:2a:6f:29:25:3d:43:8a:6e:
ff:bb:b4:1e:08:48:cd:69:a0:4f:bf:67:cd:c1:c5:
01:85:7d:0f:7c:8c:9b:48:c3:de:7c:4b:fc:f6:6b:
39:49:af:bc:8a:40:a1:89:cb:2a:18:ed:3a:a4:30:
27:de:b9:32:8e:f9:29:57:43:11:24:6f:9a:a2:cb:
32:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:24:B3:AE:61:F2:2B:1F:4A:00:A7:91:C6:7C:79:E0:BC:23:18:8B
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21f3594b-8a00-4898-9867-694b1f41ac67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.104.0.0/14
Signature Algorithm: sha256WithRSAEncryption
2d:d7:33:76:c7:2e:34:e1:59:11:d7:4f:68:cc:cf:1b:56:40:
33:df:5d:38:41:84:3f:14:1b:e9:05:7c:56:f9:a6:70:4e:14:
67:1d:f0:1d:a2:67:f0:0e:93:f2:cf:b3:4b:57:de:45:68:f6:
19:a1:8e:d8:26:ca:6c:cb:c6:4f:d0:b2:e3:77:64:7f:6e:67:
b1:c2:00:7a:b8:b3:a7:e2:a5:78:cc:c9:5f:a4:a0:d5:97:da:
d4:9c:17:18:f1:96:8b:de:78:00:7a:e2:55:9e:87:45:38:6e:
a2:dc:f7:6f:8b:ac:ed:d4:12:28:04:f0:e4:01:a1:cc:29:19:
dd:09:ad:ae:d2:0f:50:96:a3:fc:18:20:09:9e:fa:95:8d:02:
cd:e6:11:1a:f5:12:39:61:e3:17:41:cc:0b:77:cb:3e:32:f3:
9a:6b:8c:34:fd:cb:53:76:0c:51:e4:f2:b3:fb:d7:ee:96:d2:
96:64:a5:4e:2a:9f:22:86:f3:b5:d4:b9:db:5b:00:fc:dd:b4:
ce:8c:b2:a7:85:50:8d:e1:c0:e4:f9:14:ab:9a:df:98:38:37:
10:eb:2a:a6:09:5f:86:55:b1:12:1d:90:b7:89:13:21:d1:23:
e7:74:29:dd:36:03:a1:cf:8d:c2:01:2b:21:c5:e3:07:03:a2:
51:bc:fe:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:05:50 2025 by rpki-client