Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fda4b27-9a42-4f8e-a351-096ae9af001f.roa
File: 0fda4b27-9a42-4f8e-a351-096ae9af001f.roa (raw, json)
Hash identifier: 9Dnav3B/qeH0pVvBavqPDTJmKhWuGtoclj6FtPJeXxg=
Subject key identifier: B2:51:C9:86:CE:B5:BA:07:51:5E:24:CE:47:09:3A:A2:DE:7D:D1:F8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3A9D6C40495D4565556A6B7FB432B9332961B184
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fda4b27-9a42-4f8e-a351-096ae9af001f.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 56.123.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:9d:6c:40:49:5d:45:65:55:6a:6b:7f:b4:32:b9:33:29:61:b1:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=d1d37bd14796f741365968ec5f89fac55f63ae440721152637e4ce94db42e28b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:cf:7f:88:bd:d3:2c:0d:ba:34:7d:9c:72:
90:06:1d:bf:25:80:ec:57:b1:67:94:94:47:31:14:
10:b0:64:9c:41:89:87:73:e6:f6:0d:97:4f:9f:d2:
9d:4c:78:df:ab:2d:49:ff:32:44:c7:19:d9:f1:f8:
4c:6b:b4:b6:e7:42:c5:a4:69:17:7c:cb:38:9e:ab:
82:f4:19:95:59:5c:a7:2e:4c:43:8e:bd:ae:8e:d0:
b3:1d:80:66:a1:32:0b:e0:f4:a1:a8:58:d1:0f:76:
35:7e:91:96:47:cc:ff:42:bb:9b:0d:98:b8:73:46:
ce:85:1c:20:b8:00:d5:53:db:bb:f9:a1:be:63:85:
ac:61:40:b7:1f:26:5c:29:2e:d0:4e:9c:dc:b2:94:
90:e9:43:a7:6e:c6:39:dc:cb:e2:28:7a:fb:9c:04:
f9:86:09:41:49:45:a8:bd:26:fb:da:3a:d5:66:2b:
99:b2:5e:63:1f:9d:02:71:cb:62:e9:44:de:7a:80:
40:24:69:41:2a:00:ec:5d:9e:2a:96:e9:d9:ed:01:
9d:58:93:3a:27:02:e1:4e:c7:a0:d8:7e:b5:6b:ae:
75:37:78:09:de:30:05:e9:20:69:fe:df:31:89:06:
8e:ba:13:fe:c3:0c:8e:ed:63:95:78:1d:e5:69:47:
84:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:51:C9:86:CE:B5:BA:07:51:5E:24:CE:47:09:3A:A2:DE:7D:D1:F8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fda4b27-9a42-4f8e-a351-096ae9af001f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.123.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c4:af:49:c5:bb:42:af:cd:fe:67:14:de:aa:a7:e2:c2:cd:80:
12:e6:ac:88:3f:be:b5:60:c3:f0:62:e5:a3:1a:c5:ac:3a:19:
12:40:5f:fe:81:83:21:74:6d:be:b2:70:a0:58:a9:c3:10:4c:
7b:36:55:8e:d4:04:72:9b:bd:38:c7:96:71:33:86:07:c9:29:
58:7c:8b:63:9d:b1:12:e5:f7:86:35:f4:9d:b6:83:0f:8d:d6:
6a:eb:aa:fd:c8:f1:0f:d7:0d:42:7f:37:9e:26:ff:3a:04:6c:
86:c6:d5:59:85:46:81:64:82:08:e4:0d:4d:1a:25:5b:22:e1:
cc:2a:ff:08:86:29:37:dd:d1:ad:04:ea:69:3e:54:25:e0:dd:
cf:09:52:3d:23:f3:08:de:93:e4:15:d1:56:ba:c4:ad:56:5c:
8b:28:98:dc:ad:35:8d:e7:87:e0:3d:26:33:89:4d:6d:bd:22:
63:48:82:47:3f:02:86:7a:38:ae:77:12:79:97:a5:26:88:91:
77:ae:b2:22:27:61:d8:67:6c:ad:0b:34:80:02:33:42:bd:9a:
ef:e1:b2:9f:df:52:22:f5:21:f9:94:13:fc:11:c6:be:72:40:
cf:a9:40:82:df:48:d6:11:ac:1d:c6:ab:72:f2:4d:44:d9:99:
50:8b:5d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:47:07 2025 by rpki-client