Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf4d229a-6c43-4411-87ff-fd32d22797b4.roa
File: cf4d229a-6c43-4411-87ff-fd32d22797b4.roa (raw, json)
Hash identifier: SWMYya4cYvUckQY7h1lR0GGMfDHCoIj7xlst0Y5G/2E=
Subject key identifier: DA:40:50:1A:AD:F6:26:C5:D3:BE:B8:15:CE:22:74:82:C9:03:6A:4C
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 438C07FC8189888D4E1F25657781BA37C6FC99D5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf4d229a-6c43-4411-87ff-fd32d22797b4.roa
Signing time: Fri 20 Dec 2024 00:00:00 +0000
ROA not before: Fri 20 Dec 2024 00:00:00 +0000
ROA not after: Fri 24 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.240.230.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:8c:07:fc:81:89:88:8d:4e:1f:25:65:77:81:ba:37:c6:fc:99:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 20 00:00:00 2024 GMT
Not After : Jan 24 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dd:be:c4:01:72:7a:24:e6:c2:f0:69:15:98:
8c:1e:15:bb:99:5e:d6:dd:fb:d8:34:70:36:4a:88:
c5:92:d1:18:68:1c:3a:4a:8b:e0:d6:fc:fa:38:aa:
ea:80:ff:69:0e:0e:37:89:34:25:1a:9e:35:71:b4:
79:a3:ef:56:e8:45:78:d8:b9:8b:d3:9b:fa:3c:61:
7a:09:16:79:f8:13:2f:f5:68:2e:4b:45:c9:1e:db:
db:d9:65:e9:b1:ff:2c:b3:8e:ca:d5:b6:38:3b:a3:
88:85:d7:79:f7:f5:b6:a0:bc:3d:69:cd:54:8b:c5:
39:be:bc:80:72:cb:14:86:9c:5f:de:34:69:9c:4b:
b7:45:c2:ce:72:ec:be:8b:0a:61:94:da:42:dc:5c:
96:93:40:c4:36:d8:c1:74:b7:92:43:7d:ad:1e:a5:
7a:53:41:fc:6e:c0:5e:4c:2f:79:90:bb:6d:94:42:
0e:0a:26:2d:a7:0c:d2:33:37:0b:7a:53:dc:4c:7d:
6a:4d:5f:dd:7f:40:ee:4a:87:1e:c2:f3:78:fd:6f:
23:62:cb:72:11:98:9e:1b:97:64:5f:e2:02:26:58:
31:21:55:57:7f:96:7a:f2:53:07:f1:b3:28:04:e2:
37:4a:77:68:76:35:f1:72:2e:9a:57:36:3a:37:85:
ac:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:40:50:1A:AD:F6:26:C5:D3:BE:B8:15:CE:22:74:82:C9:03:6A:4C
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf4d229a-6c43-4411-87ff-fd32d22797b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.240.230.0/23
Signature Algorithm: sha256WithRSAEncryption
30:91:d9:6c:20:a0:2a:c7:a9:3c:58:40:f9:3b:eb:4f:92:94:
6e:d5:1f:9f:58:e4:ed:9e:0e:e6:03:e7:71:ca:7b:63:d6:7c:
69:07:ee:c1:0d:6c:fc:b5:d8:48:9a:f5:cc:73:9a:0a:9d:b8:
13:33:e8:27:f4:ba:f2:de:79:3d:61:65:ac:56:f5:c8:72:ea:
d6:f1:02:b7:0d:29:7b:ff:55:bc:e2:7a:7f:8b:30:a2:f5:88:
0d:19:5f:a1:76:6c:04:13:6c:de:62:ed:af:e0:87:e4:91:9e:
e7:6c:f7:a9:f6:6f:d2:7a:85:27:61:d1:0f:be:a7:ec:e0:71:
e4:03:a6:17:10:90:10:d1:fe:31:6d:43:2a:38:16:48:67:18:
f3:e2:d3:e7:fb:d8:20:78:28:04:03:92:12:1a:55:b2:77:36:
fe:45:22:64:26:73:ae:f4:22:e1:1a:7a:5a:d2:64:54:a3:5b:
da:4e:27:f9:23:41:27:f3:c3:70:ab:c0:1c:16:a8:42:74:93:
76:68:7f:b3:17:82:e3:dc:da:d1:1c:68:64:68:49:7b:0c:33:
97:f0:b4:a8:eb:8a:20:30:4f:fa:a8:a0:48:66:3a:9c:5d:ad:
fd:3b:4b:40:56:43:de:c3:f8:73:e1:af:5f:a6:4a:42:4f:ae:
ac:52:4d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:04:05 2025 by rpki-client