Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d9611cb2-6bbb-4e81-8341-6b103aa4e01c.roa
File: d9611cb2-6bbb-4e81-8341-6b103aa4e01c.roa (raw, json)
Hash identifier: rSNFXZTlkHCe4Vq93l1kRl1+iJeqQnvLlKh7/Qxi98g=
Subject key identifier: 78:7E:82:51:F4:37:E3:41:79:23:94:C4:08:2D:77:3C:98:39:C0:DA
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 53F252411CEF267A44C36550E4301F9A7AF7DE
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d9611cb2-6bbb-4e81-8341-6b103aa4e01c.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 35.160.0.0/12 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:f2:52:41:1c:ef:26:7a:44:c3:65:50:e4:30:1f:9a:7a:f7:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:14:cd:f4:e2:61:c4:3f:42:5e:77:de:b7:ea:
7d:0b:c9:ab:54:11:6b:fc:c7:59:ae:3a:b0:8c:0c:
31:d3:fb:18:02:f9:58:2f:81:b3:10:ab:07:67:0e:
4d:a0:05:43:7b:2f:46:72:d5:65:ca:55:ca:83:84:
e2:03:cb:34:a8:99:c0:6b:ff:14:6c:ec:45:48:b2:
72:a8:01:c9:b4:9e:53:ba:c6:27:c1:14:1f:c3:28:
da:57:d7:ef:2b:a7:d8:64:c1:18:bb:30:7f:0b:61:
10:e9:46:7d:d8:1b:1a:27:0d:d8:a9:16:33:4f:71:
83:e8:b2:81:e1:6c:86:41:b3:30:a7:0e:13:78:53:
48:27:31:3c:d2:7c:82:66:d0:26:6d:16:59:5f:43:
a5:58:9f:cf:3e:9a:53:e6:3c:5a:c9:ce:29:19:80:
32:76:01:c8:d4:d8:d4:a7:04:12:58:2c:8b:60:6b:
33:87:9f:76:34:ae:e2:f6:a2:2f:e7:d7:db:35:d1:
f1:1e:87:39:2f:47:80:fe:d4:ec:60:d5:8f:e1:2d:
c7:62:63:86:bb:9a:ce:b5:b9:4b:d3:e6:ed:5e:4a:
9c:fa:cc:79:59:a8:14:dd:20:c5:ff:a9:34:13:42:
49:98:b6:99:bd:3d:1f:84:1c:3c:8d:ee:04:99:c5:
cb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7E:82:51:F4:37:E3:41:79:23:94:C4:08:2D:77:3C:98:39:C0:DA
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d9611cb2-6bbb-4e81-8341-6b103aa4e01c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.160.0.0/12
Signature Algorithm: sha256WithRSAEncryption
35:40:42:b9:aa:98:9e:e1:35:9b:25:41:d9:c7:65:a9:9d:46:
14:7e:be:c8:7e:16:b6:fb:bd:48:04:2b:61:8d:9b:7b:e2:5f:
99:bc:a1:a5:04:be:1f:7b:09:64:08:33:09:29:14:00:05:92:
99:af:25:02:63:d9:41:d1:f3:e0:41:8c:03:2d:91:c0:ab:26:
f8:6f:e2:cc:70:67:2b:4b:d9:f9:f0:84:d7:69:2e:fc:ee:2e:
3d:0e:80:0f:34:e6:dc:74:c5:5f:dc:f7:10:bc:31:17:4e:3f:
35:22:df:e3:22:b2:36:1f:ae:89:5d:66:fa:d0:8a:12:93:2f:
ed:88:8c:ed:0f:d8:be:48:02:0b:a4:9a:b6:14:75:bc:11:2a:
9a:f6:a6:4a:48:c0:16:ac:0d:6a:d2:99:56:86:c4:16:12:4a:
4b:d3:b8:a2:c5:42:b6:41:63:f1:4d:45:67:58:7e:c6:51:96:
6f:9a:c3:af:7c:ce:83:44:33:04:78:a9:29:82:c7:a4:cf:61:
eb:0e:64:eb:b1:19:51:c2:3c:9d:ea:8a:c5:3d:74:60:f2:ce:
02:c9:5c:39:c0:cc:c9:b0:4d:ef:ec:e8:e6:ce:f2:db:c1:e8:
c7:cd:4f:9b:31:94:9f:88:73:fe:66:1a:8b:d0:8a:b2:20:b7:
2d:7b:ba:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:27 2025 by rpki-client