Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/82087ccc-4db6-412b-a911-ab05b6c2debb.roa
File: 82087ccc-4db6-412b-a911-ab05b6c2debb.roa (raw, json)
Hash identifier: FO4zW9pCRdZAWLkO8QXzlyJA8N/ZY7GJsbgnxj/kJOE=
Subject key identifier: CD:3B:E6:C1:26:16:59:BB:9E:D7:C6:56:6E:F2:38:9A:7E:7A:C8:48
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5045ECC53D2553C2288A3B024B65A37314CBB431
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/82087ccc-4db6-412b-a911-ab05b6c2debb.roa
Signing time: Mon 25 Nov 2024 00:00:00 +0000
ROA not before: Mon 25 Nov 2024 00:00:00 +0000
ROA not after: Mon 30 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 18.246.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:45:ec:c5:3d:25:53:c2:28:8a:3b:02:4b:65:a3:73:14:cb:b4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 25 00:00:00 2024 GMT
Not After : Dec 30 23:59:59 2024 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:e2:f2:8d:ef:4e:82:e6:4a:07:a5:bb:dd:
ee:34:ae:70:a5:67:ba:b5:b9:0f:ff:a6:82:c1:80:
d5:eb:1f:c0:0b:c1:92:38:76:1d:82:1c:7b:cd:8d:
87:10:95:7f:69:d3:01:90:32:32:15:95:37:e7:66:
39:b3:66:b3:51:26:a5:2b:f4:be:a9:a0:ae:95:77:
ef:1c:72:1e:d3:79:a1:eb:e1:a3:ac:d9:20:f0:21:
e8:fa:4f:8c:50:51:a8:94:f1:6b:c6:9f:fc:46:0d:
68:f7:3f:4c:21:b2:b5:83:42:f3:6f:25:f5:11:62:
d7:22:6f:25:13:44:13:3e:26:d1:fd:45:98:3e:28:
34:54:85:dc:05:1f:1b:12:35:86:20:1d:b0:10:8a:
fb:d3:f1:7f:46:d0:40:1f:19:73:f9:56:17:e8:7c:
b5:de:80:5b:52:2f:57:10:56:61:49:3c:ed:5c:db:
77:f0:dc:c9:be:f1:f0:90:31:2d:72:0a:94:52:a4:
4e:95:3e:28:ac:86:a6:c7:a8:52:5b:51:9c:90:e5:
f3:2d:55:65:37:e3:1b:ba:f4:9f:00:4a:97:b4:41:
d6:9b:6a:6b:d3:ff:c4:2a:73:b6:9a:48:ea:57:56:
ba:23:21:5e:4c:13:4d:87:a7:5b:be:26:5b:e0:47:
b8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3B:E6:C1:26:16:59:BB:9E:D7:C6:56:6E:F2:38:9A:7E:7A:C8:48
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/82087ccc-4db6-412b-a911-ab05b6c2debb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.246.0.0/16
Signature Algorithm: sha256WithRSAEncryption
89:b3:a7:6b:53:6a:7d:33:0f:27:0e:d3:ec:45:c6:1f:a2:f7:
3a:3d:b3:5a:35:a0:6a:af:34:72:00:ef:26:44:c6:66:af:df:
ad:9c:d9:37:ca:95:0a:93:70:db:ba:f9:a7:7b:92:02:5d:cd:
9e:3d:e5:e0:15:38:b1:7e:46:6f:71:8c:f2:3f:2b:85:cb:1e:
7c:d2:b4:a0:05:12:51:25:fd:16:5b:4a:e3:28:78:ba:a4:6d:
99:dd:8a:af:f3:0c:e0:3f:18:11:c6:b3:fb:0c:9c:22:2c:b3:
f6:a8:ce:da:2e:0a:5a:31:0b:ca:65:ec:1b:93:86:b8:a8:df:
1b:69:83:06:bd:d6:09:26:56:df:ce:fd:cc:0b:ff:e8:db:79:
4f:55:0b:ef:81:c1:8a:cf:95:68:68:e9:57:a0:85:b9:cd:49:
77:3f:bd:80:3c:9c:28:a7:52:05:dc:f4:5e:f0:d7:24:7f:76:
46:da:c6:a4:1d:f4:21:b4:96:37:54:42:3a:53:a5:a2:00:fa:
e8:94:a5:29:37:82:a4:d5:59:58:ed:8e:5a:a4:59:e0:a4:ba:
f9:cc:87:26:e3:7b:80:87:24:19:42:db:82:f8:d8:f6:f1:86:
71:ed:0a:99:b0:8d:b5:ba:ee:f8:c4:c1:0f:92:13:24:92:6d:
af:58:67:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:14:11 2025 by rpki-client