Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa549078-8f5b-481d-a5b3-712cf5e11fa8.roa
File: aa549078-8f5b-481d-a5b3-712cf5e11fa8.roa (raw, json)
Hash identifier: p9a0n2ta73+F1oUPz8h+GmJLdNt2HqdfKYSSQqy0plg=
Subject key identifier: ED:ED:DF:78:53:38:BE:85:AA:B0:D4:73:6F:98:78:37:92:74:F1:53
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 71DD0FC2C1DD0194FE8A1A04D09C9A63F552122F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa549078-8f5b-481d-a5b3-712cf5e11fa8.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 165.94.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:dd:0f:c2:c1:dd:01:94:fe:8a:1a:04:d0:9c:9a:63:f5:52:12:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1c:d2:1b:b7:76:9f:55:62:63:58:e1:3a:71:
a1:3c:6b:b4:33:55:c2:9a:cc:20:4c:be:3e:38:b6:
74:91:71:24:c9:cc:24:05:ac:8c:14:17:55:4a:c2:
d2:0c:7a:58:e4:6f:65:45:d8:c9:e1:68:a5:35:92:
67:3a:07:3c:d9:50:4c:ce:90:c8:39:aa:1f:f5:5f:
d2:a1:3c:62:13:3c:a2:1d:64:39:8b:81:ee:ae:4e:
01:52:76:aa:fc:41:37:79:f3:1e:b6:7f:58:94:20:
7d:29:df:1a:31:b7:bc:94:0b:62:f3:3e:40:7a:73:
6d:7a:b4:bc:a1:9a:ee:d2:92:3a:84:ab:38:9f:cf:
21:90:cb:7f:4d:85:52:4c:61:2e:a8:eb:96:da:8f:
96:4b:2e:0f:7a:41:3b:44:9d:01:1e:62:6f:20:c2:
71:da:95:3a:9a:ba:18:db:34:ef:e7:e2:72:e6:8f:
21:a3:95:ab:cc:31:1d:35:69:59:6b:ee:95:ef:26:
f5:55:cd:0d:9a:04:5c:a9:30:e9:a5:6b:37:c7:7d:
96:f9:38:0f:d8:f0:0c:7a:48:9b:76:cc:78:c5:fe:
fb:8a:a1:b1:6c:97:d0:55:e6:17:7d:f3:49:62:4e:
ad:88:37:d0:db:52:c2:58:be:7e:1a:4e:cb:a3:5c:
75:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:ED:DF:78:53:38:BE:85:AA:B0:D4:73:6F:98:78:37:92:74:F1:53
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa549078-8f5b-481d-a5b3-712cf5e11fa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.94.0.0/16
Signature Algorithm: sha256WithRSAEncryption
39:63:00:6c:ea:90:ce:7a:3e:c2:1b:3c:3f:dd:8b:87:9a:d2:
ee:45:a7:b2:27:f2:14:fe:e5:12:62:3a:d1:c0:7a:8a:dd:e4:
93:8c:d0:dd:90:c0:72:f4:3c:01:19:9b:aa:ea:b5:ef:fe:5c:
56:2c:8f:63:34:72:c3:f8:c0:ae:1d:f8:1c:8d:3c:a1:47:06:
07:36:f7:0c:fb:05:d7:dd:fc:79:f0:fc:6b:d9:2f:41:51:b6:
63:10:ef:d6:91:98:c7:5f:c7:84:b1:58:41:4b:ea:20:c6:38:
05:dd:cc:26:7b:9c:c7:03:56:1f:47:41:94:61:83:17:99:24:
df:4e:9c:17:02:61:f1:e5:8a:3b:79:0a:da:bb:3e:f2:e7:e9:
d3:4f:ad:a9:8c:dd:be:43:c0:d4:70:59:e2:3c:17:d7:42:68:
53:44:41:98:74:72:20:30:9f:c4:7d:0e:fc:e7:a3:7e:f4:aa:
eb:a9:2c:8d:97:3b:ba:ee:7f:25:6f:92:01:68:e1:2c:02:56:
84:eb:2c:b8:85:4e:79:02:40:d1:96:ec:e6:27:98:63:b4:a7:
74:d8:a2:d4:73:a9:42:18:7f:27:cd:55:1e:fd:9e:de:78:6c:
98:74:cf:1c:90:cb:fe:0b:c5:91:1a:04:f3:b3:d0:04:5e:1a:
53:2f:bc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:11 2025 by rpki-client