Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7be92104-5e42-4abe-84e6-ae306b886908.roa
File: 7be92104-5e42-4abe-84e6-ae306b886908.roa (raw, json)
Hash identifier: EOImUqBrOmM+3cJWDxWAIWEtb4Mf+NU65cSCpCDJcbk=
Subject key identifier: 38:21:DC:1C:04:E2:6D:26:8E:EE:ED:AA:F6:47:CC:10:A3:7C:70:FC
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 112ED8F1AFBB2EA61AD57E82AC3D38A9B289477B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7be92104-5e42-4abe-84e6-ae306b886908.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 18.90.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:2e:d8:f1:af:bb:2e:a6:1a:d5:7e:82:ac:3d:38:a9:b2:89:47:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6b:66:93:36:51:4d:56:8b:a3:00:b8:1e:b4:
26:98:7c:6c:51:3a:be:61:78:9a:d0:9b:6c:22:4e:
8a:dc:5a:a5:66:0f:29:9b:7f:a3:d2:fd:db:ef:e4:
33:1d:f8:bb:45:cb:7c:23:33:d3:d5:cf:62:a1:c5:
c5:be:91:54:93:5f:28:44:46:c4:7c:c2:2a:21:f3:
12:44:f0:54:28:de:ba:29:7c:39:ee:21:12:76:1d:
59:4c:26:05:8e:dc:a4:f0:7b:ed:7c:7d:42:84:91:
01:e1:6b:e7:5b:07:5d:3f:27:c8:94:33:98:da:5e:
8e:28:71:a5:fc:49:6a:21:85:d1:52:b9:46:57:d4:
7d:3e:3b:0f:e2:11:90:51:76:28:df:50:c4:65:9a:
09:07:01:39:d2:c1:bd:3f:db:1f:4e:1a:cb:9c:40:
98:2f:96:ea:9d:3c:0f:12:a0:23:15:92:f2:58:9c:
33:54:b1:72:98:ee:64:c4:25:73:95:f6:4d:3a:ae:
0b:2a:99:ca:5c:ad:f5:d2:90:eb:a4:a5:b0:bf:0e:
21:ff:08:2a:ec:22:64:d1:d6:74:05:0b:c7:c8:c4:
d9:ab:33:48:79:07:1b:c7:f3:6d:db:82:3c:45:bb:
39:43:5d:12:d9:44:30:9b:a6:e4:49:ce:54:77:61:
02:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:21:DC:1C:04:E2:6D:26:8E:EE:ED:AA:F6:47:CC:10:A3:7C:70:FC
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7be92104-5e42-4abe-84e6-ae306b886908.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.90.0.0/16
Signature Algorithm: sha256WithRSAEncryption
28:09:21:d2:ef:3d:28:a8:27:c3:14:7b:ef:52:0e:a7:1b:32:
e2:7c:db:e0:06:75:2f:53:f9:7f:08:f3:f2:32:a9:06:c1:26:
3a:3b:70:18:33:db:44:96:93:a3:c3:d1:e7:f9:09:65:82:43:
41:3f:7b:ff:d7:93:6d:41:7a:62:39:79:43:fe:6f:df:4b:e7:
29:d2:11:5d:f7:93:5e:d8:41:d8:31:8b:95:87:be:2c:f0:98:
ed:00:98:fa:cd:dc:ca:e6:e4:5f:77:47:07:bf:ad:ed:6a:24:
7f:ad:75:f1:1e:1f:ce:26:8e:d4:46:51:7f:c7:55:7c:72:e3:
2b:bd:8c:25:5b:05:f5:a5:e2:bb:22:0d:d9:88:4b:0c:6c:52:
49:88:49:58:2d:28:4c:16:73:79:d3:95:81:39:8f:92:86:ac:
bf:01:e3:59:9f:a3:e9:4b:c3:b9:c7:a9:ff:04:46:3a:4f:76:
31:f3:e1:21:71:48:64:49:55:4c:d4:e3:ac:4b:4c:37:47:a7:
f9:c7:12:2a:97:4b:28:1b:ca:58:37:5a:8f:08:67:3a:d7:c8:
51:04:a7:56:86:12:0e:09:e1:0b:57:d2:e9:fc:a0:81:0d:9e:
73:04:d2:d6:9b:d9:f4:7c:aa:6f:d2:c5:65:50:9c:4d:fe:bb:
cb:82:a7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:35 2025 by rpki-client