Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39609efe-1caa-492d-8d8d-c9ae17e86ac0.roa
File: 39609efe-1caa-492d-8d8d-c9ae17e86ac0.roa (raw, json)
Hash identifier: oFT9eENNEinveqFNlra6s+mMnsXys/S2cTYv+nCAH1U=
Subject key identifier: 48:21:42:35:9D:03:29:A7:13:E5:90:B5:B0:7B:B4:6D:37:3B:92:47
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 7BDDB20D998321D040230D5F0CEFE52B4CF2EBDA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39609efe-1caa-492d-8d8d-c9ae17e86ac0.roa
Signing time: Mon 25 Nov 2024 00:00:00 +0000
ROA not before: Mon 25 Nov 2024 00:00:00 +0000
ROA not after: Mon 30 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 54.78.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:dd:b2:0d:99:83:21:d0:40:23:0d:5f:0c:ef:e5:2b:4c:f2:eb:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 25 00:00:00 2024 GMT
Not After : Dec 30 23:59:59 2024 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:85:bb:e6:59:39:f9:11:68:5c:a9:e8:7c:fe:
a2:b1:3c:a1:e3:bb:84:f1:5a:b8:4e:9e:f3:a7:3c:
bb:80:64:64:46:c6:aa:09:3b:3c:65:3a:b7:7b:a4:
97:26:54:5e:5d:17:73:bf:29:12:39:b9:96:5c:59:
ca:03:65:9b:e5:6e:0a:ba:4d:6c:fa:b5:a5:e4:cd:
9e:67:5b:5b:c9:75:97:7d:e1:cb:e7:5f:df:a1:11:
f8:f6:b6:9f:4c:d7:b0:0f:84:36:cb:40:13:ba:f3:
f3:ec:fc:ee:c6:70:72:39:06:8b:82:53:2a:f4:93:
dc:82:5b:b3:9d:2f:15:e2:82:7c:9b:7c:0b:6e:a3:
32:69:b4:3f:37:77:66:7d:99:7b:1a:bf:f2:2f:86:
7b:56:9d:b1:e4:7d:08:55:44:94:92:2b:a0:32:42:
60:ac:25:3d:95:26:05:b6:e8:eb:40:dc:5c:77:5d:
eb:87:0d:00:4d:7e:59:7a:59:99:9d:4c:51:9e:06:
b5:59:51:e2:bb:39:2d:aa:da:76:f5:ea:4d:02:6f:
28:79:93:af:a9:80:35:9e:b3:92:1d:55:03:69:44:
88:de:16:ba:69:10:2f:e0:01:f4:0b:02:6a:8c:9f:
68:ef:fc:f5:72:5a:68:a5:a8:76:d1:48:0e:79:58:
c4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:21:42:35:9D:03:29:A7:13:E5:90:B5:B0:7B:B4:6D:37:3B:92:47
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39609efe-1caa-492d-8d8d-c9ae17e86ac0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.78.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9b:d8:88:2a:db:8b:ff:ba:ab:7c:0b:d4:54:0f:ad:2e:74:4b:
ca:d3:03:7e:43:38:8c:03:a2:7b:12:c6:09:8b:81:f8:69:74:
8b:61:64:9f:40:7e:58:8b:99:cc:fc:d2:37:f4:b0:34:f7:e2:
ce:e9:b3:8c:22:b2:8b:d0:8d:17:c9:24:eb:b7:d2:7f:1d:99:
13:74:91:e2:82:33:2b:5b:3b:fc:0b:0a:30:77:4f:5b:bc:77:
c6:e3:24:65:b1:a0:b4:85:ad:9c:d5:34:0e:e2:2a:3e:64:f8:
8b:bc:60:4f:58:a3:f8:ec:97:cb:9b:cd:6f:95:93:4f:46:45:
9c:dd:39:71:62:77:5f:d4:47:31:30:30:8b:57:ca:b1:90:75:
00:e8:58:c4:db:15:cf:c6:31:89:a8:9d:94:a7:22:2d:05:b4:
64:4a:07:ee:fd:f7:95:fb:ef:03:ec:1a:33:f5:8b:39:41:00:
e7:bf:7a:98:57:63:a5:80:83:6b:dd:c9:21:44:56:44:4c:7d:
b4:2a:f2:27:8a:91:4b:12:5e:4f:88:e8:47:6e:11:72:76:56:
56:14:96:8b:a0:15:78:02:e5:87:22:6f:ce:5b:58:3a:74:80:
47:4d:71:24:60:fe:aa:e0:f5:49:05:04:42:47:c8:c9:92:2f:
99:ac:74:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:04:21 2025 by rpki-client