Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ff46bc4-0e3c-4988-8235-09fb526ac293.roa
File: 0ff46bc4-0e3c-4988-8235-09fb526ac293.roa (raw, json)
Hash identifier: 8LVLJvNxM3ceQecWL7R2jeCCdsvQm1Lgyhy4mXHWb70=
Subject key identifier: 64:8C:26:59:2D:39:CF:57:E6:E3:D4:1D:FB:4E:EB:3B:EF:D1:7F:1A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3A1FC2505D589CD61E36F78E03F43502AD5C747C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ff46bc4-0e3c-4988-8235-09fb526ac293.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 56.242.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:1f:c2:50:5d:58:9c:d6:1e:36:f7:8e:03:f4:35:02:ad:5c:74:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=4499f7208d3ec4ece86bdf10d8954b4e18d42030e06519b293fc322169a83d45, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e6:72:c0:9c:ee:8a:a7:22:ae:85:ee:00:7e:
70:3c:20:2a:82:db:d2:5b:5a:ea:70:8d:d0:79:e3:
5a:72:38:18:d3:dc:0e:3c:fb:c3:59:c4:fc:4f:04:
91:86:8c:a0:87:cb:7f:cd:d6:ee:e3:d1:3e:d7:47:
90:05:34:b2:70:a7:59:6b:04:b3:45:70:5c:ff:2f:
06:22:71:2e:18:d6:ef:d9:e2:f3:69:c6:32:9d:14:
b2:d2:de:b6:57:c0:45:70:9d:8d:e6:3a:bd:0a:40:
1d:5c:ec:69:d0:01:db:d5:96:8b:bf:65:aa:22:c5:
c6:ea:cf:ff:fa:da:8a:da:be:15:86:4f:a8:67:ff:
46:ec:bf:7d:f0:01:8d:1b:40:c3:28:9d:69:21:ca:
f7:bc:18:81:46:f5:c0:19:59:4f:4a:5c:5a:91:ff:
be:a6:85:36:72:f8:83:d9:e3:bc:dd:fb:d1:e2:e9:
51:c5:de:ad:0e:fa:a2:71:4f:27:91:f6:23:10:6a:
b7:66:61:cd:3a:cf:70:22:44:b8:db:f3:0b:aa:5a:
9f:10:21:24:43:ca:60:61:21:1d:8e:53:a3:6e:ce:
2b:68:2d:63:97:10:6c:39:7e:3c:1b:e1:66:94:9a:
08:c8:65:ac:25:8c:70:0b:0f:3a:ee:ba:14:12:4e:
e7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8C:26:59:2D:39:CF:57:E6:E3:D4:1D:FB:4E:EB:3B:EF:D1:7F:1A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ff46bc4-0e3c-4988-8235-09fb526ac293.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.242.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8a:93:6e:4c:ad:de:b1:07:8a:50:03:47:e9:ff:d9:b2:d0:ce:
d8:fe:75:a8:ee:29:18:69:ca:7d:db:3d:19:8a:d5:63:83:ca:
94:d3:cc:c7:6c:c4:2c:7e:b5:b6:07:8c:3d:9e:eb:80:b4:4e:
27:97:07:4f:d5:8c:25:b7:9c:7d:ef:a5:ba:b9:76:4a:e2:8d:
6b:d9:a0:61:ab:93:58:e9:c7:3a:d8:56:62:ce:48:46:2e:c6:
8d:53:5e:e2:c6:b3:f4:d4:31:1e:e4:d2:9c:2a:5c:ba:ab:b1:
64:c5:59:00:d2:1f:6b:e7:08:76:04:f4:d2:83:aa:62:a9:f9:
db:15:10:e6:e3:49:db:d2:21:a1:96:aa:5a:e8:5f:8d:a4:1c:
21:ca:89:5a:38:e9:da:56:a2:85:bd:5f:86:88:9e:7b:80:1a:
56:d6:5c:58:e9:b1:d5:79:83:a8:7a:7e:ba:6a:9e:03:d4:34:
78:83:ca:c3:42:96:11:33:27:c7:93:03:ea:ce:30:0c:b8:d8:
6a:fc:de:9d:a1:4f:1d:69:f0:f8:7e:c1:a9:63:06:56:c5:f1:
f1:05:06:d8:1c:cf:fc:75:53:ad:dd:5b:e1:7d:80:5f:19:d5:
20:d9:87:eb:7c:ee:fa:71:37:c1:33:bf:e0:f3:78:2a:ad:04:
00:86:ab:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:11:40 2025 by rpki-client