Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9343f106-ef19-4d67-b54d-350e79d679a9.roa
File: 9343f106-ef19-4d67-b54d-350e79d679a9.roa (raw, json)
Hash identifier: 7GXwCWKcCQSM3kjFnzCbNSi9mQphTOxkDAPow5BxVQY=
Subject key identifier: E0:47:2B:99:C8:98:F2:11:51:79:15:6E:80:6D:98:54:46:4F:2D:90
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2E2896AA3784CF4A04788880FFED6D7B48773F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9343f106-ef19-4d67-b54d-350e79d679a9.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 148.162.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:28:96:aa:37:84:cf:4a:04:78:88:80:ff:ed:6d:7b:48:77:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8e:d5:e9:1d:8f:1f:b4:06:6c:e8:18:54:39:
56:41:66:3b:db:30:6d:71:14:16:e9:c8:33:93:c8:
a7:a9:3b:b7:ad:4c:ae:09:12:c4:7c:e5:bd:99:67:
ec:22:92:1c:f4:6f:4a:6a:a1:ea:2d:92:21:cf:1a:
a7:10:45:2f:e6:3f:4a:7c:5f:c1:10:e4:65:1e:fa:
b9:db:45:a4:0d:d7:3a:86:f3:6d:9c:6b:e5:bf:0d:
dc:bb:ff:21:68:08:4e:4d:2b:a5:70:84:c1:18:4d:
28:73:e1:eb:84:fc:f8:41:b5:5b:43:fd:8f:ea:92:
3c:6d:b2:b6:6a:1b:9c:66:74:92:c2:ca:04:41:9e:
33:17:a0:73:16:c1:d8:ab:5f:d9:f7:ec:84:7b:86:
b2:16:8e:5b:72:39:4f:e6:69:b3:bb:e1:a4:06:e6:
d9:55:05:26:73:fe:82:bc:bb:ee:ec:70:59:b2:82:
b0:21:98:7d:a9:14:00:3a:4c:04:a4:12:3a:f4:7e:
a0:b0:7f:a7:86:a3:04:36:fa:c6:5e:ca:7d:2e:60:
66:43:d5:a0:93:16:a3:16:be:83:c5:d1:bc:b3:f6:
d2:1b:13:4d:d0:38:ca:fb:cc:76:89:c0:f6:32:16:
b3:cf:7e:48:72:94:87:f3:67:6b:d6:5e:db:a5:28:
1b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:47:2B:99:C8:98:F2:11:51:79:15:6E:80:6D:98:54:46:4F:2D:90
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9343f106-ef19-4d67-b54d-350e79d679a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.162.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2b:48:0e:da:59:0e:07:7d:04:c4:10:3d:19:bf:44:c1:01:ec:
51:58:75:ca:24:59:09:7c:cd:88:bb:e4:54:8e:69:b8:a1:a7:
9a:a5:7d:fe:9c:67:7d:17:d8:91:cd:07:be:39:1a:21:92:76:
58:61:46:1a:a0:f6:ba:3b:18:35:f9:30:1d:f3:62:46:c4:4a:
e0:db:25:3a:72:3f:9a:e8:57:29:b3:6c:47:37:e7:c5:25:88:
65:d0:f2:1c:00:4c:5c:ee:96:c4:f2:1b:9f:da:c6:0a:3c:33:
f4:60:b0:db:6f:6f:37:20:98:64:1f:9b:db:bd:07:b4:52:79:
a2:a1:43:b3:1c:d6:88:b7:27:c9:4f:a0:bb:c5:e6:f3:4e:0b:
58:a0:52:3e:a1:83:b1:0c:dc:81:70:2f:01:a2:3c:af:6e:85:
a6:86:b8:dc:d1:20:86:96:99:85:1d:ff:12:90:90:d0:bc:80:
72:06:86:b6:fd:83:5b:f2:8f:83:4f:50:ba:ca:da:fd:c7:6b:
4f:02:20:5e:4b:9a:7e:ae:2d:68:f0:c6:15:8a:9e:8b:03:3f:
b8:f3:00:c7:f0:0c:02:fe:f2:b6:74:43:c9:1e:c3:5e:2b:c9:
b6:87:4f:0c:33:d6:95:f2:4c:90:30:5d:26:b3:be:19:bc:f9:
9a:98:0f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:05 2025 by rpki-client