Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12047a03-773a-4c55-a097-31b0e28f1471.roa
File: 12047a03-773a-4c55-a097-31b0e28f1471.roa (raw, json)
Hash identifier: jWcP9LkBcZUCUHv67C5QtxOz6YhXdORhkJfYmiQtHi4=
Subject key identifier: AC:0F:67:0C:8C:48:C6:C0:85:9F:FA:E7:DC:BF:25:C0:42:D7:2A:57
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 084BB38907FF56A3D4546773D5E0BD813791BBD8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12047a03-773a-4c55-a097-31b0e28f1471.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f10:4000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:4b:b3:89:07:ff:56:a3:d4:54:67:73:d5:e0:bd:81:37:91:bb:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:64:e6:e8:90:50:98:5b:25:cf:0d:6d:51:f4:
68:e7:d9:d9:89:e4:f6:d2:e7:17:4e:e9:cf:8e:de:
56:84:68:87:aa:b9:9c:f8:da:f4:de:cb:89:35:7f:
6c:dd:98:b4:12:3a:78:66:da:c2:57:8a:be:03:96:
cd:46:85:dd:e4:70:1f:10:ef:1d:2c:56:5f:3d:51:
af:88:b8:7d:2c:89:ee:af:b3:d2:3e:80:5e:23:ec:
a3:c7:f6:90:fd:c4:06:43:fe:5e:da:fe:9c:9a:46:
d9:f4:61:81:aa:d7:43:d8:f9:28:b6:b7:1d:a1:4e:
42:2a:ef:38:1b:26:2c:41:00:bd:d4:05:36:cd:b0:
e1:b3:35:98:35:c9:ef:52:bf:25:d9:ac:2a:f6:0e:
d8:9f:93:b6:b5:f3:e1:05:d4:fc:38:71:d9:5c:c5:
22:31:9a:ac:e1:05:81:98:d4:06:7b:1e:85:0b:51:
41:62:bb:88:c0:94:a2:1c:2e:7c:ff:e5:a2:cf:c8:
72:d1:bb:eb:25:b0:eb:4e:de:6a:fe:90:6a:db:31:
a2:91:52:54:08:35:80:54:b0:f4:e9:a8:bb:e3:ba:
ae:18:96:20:51:62:92:f8:b9:77:5e:8d:71:33:a0:
be:df:82:90:0a:d8:7f:4c:3a:25:20:ea:a2:7d:c5:
c4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0F:67:0C:8C:48:C6:C0:85:9F:FA:E7:DC:BF:25:C0:42:D7:2A:57
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12047a03-773a-4c55-a097-31b0e28f1471.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f10:4000::/36
Signature Algorithm: sha256WithRSAEncryption
b0:28:04:91:aa:85:67:a4:91:70:66:9e:5f:da:c0:4e:dc:c3:
8b:af:bf:2a:eb:84:3f:18:8e:f4:24:af:09:ca:3e:71:23:57:
7e:29:32:f9:05:20:73:73:23:eb:cb:08:1a:8f:71:d9:91:5e:
62:90:76:a7:45:d1:69:14:f5:b8:79:95:6c:77:a2:38:82:bc:
17:6e:2a:e6:3e:9f:a3:a7:46:fd:8a:12:2a:ad:9a:6d:21:3d:
68:4e:2b:5d:36:e7:63:d9:64:76:20:ce:21:1a:f9:65:c3:7c:
7c:44:f2:91:36:45:87:74:8e:2b:0c:54:c2:89:cd:b3:d2:25:
a7:f4:84:86:9d:b0:d2:aa:dc:36:b7:4e:f1:77:af:88:38:5b:
19:46:b5:40:25:ac:4a:a4:60:99:5c:f7:53:f8:9e:fe:eb:78:
c1:ac:ef:81:d8:36:03:74:4f:65:57:66:55:c6:a4:72:8b:19:
31:9f:99:46:81:96:5e:63:8b:e7:5b:c4:b5:b8:97:7b:30:99:
90:a4:02:fe:d2:50:cf:22:11:45:b7:0d:ed:40:96:92:eb:96:
59:fd:94:f9:46:2e:27:17:e9:9d:13:06:53:97:8d:e2:c2:5d:
e7:ae:e4:df:2e:ce:5a:b9:9b:11:65:c0:6d:d2:42:6b:6c:cd:
fb:e1:4c:aa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:56 2025 by rpki-client