Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13edaee2-4822-4b46-a40f-7eaa9373cf95.roa
File: 13edaee2-4822-4b46-a40f-7eaa9373cf95.roa (raw, json)
Hash identifier: asUxhgPHJnwxJ21W9Rx1KmTfuW4dx6QicPab7+/Ao5A=
Subject key identifier: 9B:BC:7E:C9:10:1F:82:9B:50:54:30:47:41:8A:4B:88:4A:81:83:3F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 24F07242EDA70A59E07E927A2FFA4BFB1A45843A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13edaee2-4822-4b46-a40f-7eaa9373cf95.roa
Signing time: Mon 02 Dec 2024 00:00:00 +0000
ROA not before: Mon 02 Dec 2024 00:00:00 +0000
ROA not after: Mon 06 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.170.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:f0:72:42:ed:a7:0a:59:e0:7e:92:7a:2f:fa:4b:fb:1a:45:84:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 2 00:00:00 2024 GMT
Not After : Jan 6 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0e:74:92:d1:40:30:30:4c:45:c1:36:6b:74:
6d:e0:77:01:49:01:ae:e3:f5:ca:7a:d8:c9:4a:66:
16:c8:96:25:3a:e0:ba:cf:6e:e6:b8:a8:b6:93:e7:
d8:7a:93:ba:c5:ab:9e:1f:b4:66:24:8a:8f:e0:62:
77:a5:fd:fd:19:0f:f2:81:3a:c7:06:0f:3f:a8:56:
3d:f9:fd:84:28:c7:3e:c6:da:88:43:57:63:42:45:
f4:ea:08:9d:79:86:7c:f2:7f:3c:1e:f7:35:6e:76:
13:b2:7c:99:00:dd:53:06:33:0c:38:aa:92:cb:2e:
21:a3:67:99:bd:b9:bf:af:73:d9:e6:90:a7:f9:e4:
1b:63:e7:96:2f:81:9a:8b:24:0e:9a:37:71:49:49:
78:df:2d:cb:63:4e:72:db:de:fa:aa:4c:7b:0d:41:
20:3d:8e:34:9c:b1:72:55:dd:b6:a4:6f:92:fa:42:
6a:a6:fc:e7:1d:b9:7d:f3:e0:c5:8e:4e:ae:07:a1:
03:79:f6:a6:95:05:73:c7:5d:64:92:88:e4:bf:e7:
a3:c1:1e:87:ac:5f:65:35:17:d3:07:ab:d9:cf:08:
2b:d2:9e:c7:8c:48:33:de:df:d1:38:e7:31:21:aa:
b4:8f:91:fd:9d:d5:04:01:ef:2c:75:90:83:68:fe:
fb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BC:7E:C9:10:1F:82:9B:50:54:30:47:41:8A:4B:88:4A:81:83:3F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13edaee2-4822-4b46-a40f-7eaa9373cf95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.170.0.0/15
Signature Algorithm: sha256WithRSAEncryption
62:a9:20:a7:aa:a2:4b:64:67:71:07:a8:90:be:39:bb:4b:c4:
ed:a6:4c:af:b5:4c:8b:34:8f:fc:21:7b:4c:96:0e:3c:ac:71:
1d:36:7f:44:6a:2f:c2:35:77:9b:ca:3e:e0:98:cf:f1:21:22:
dd:49:48:16:68:86:06:89:fc:cd:e3:be:46:6c:c2:89:e1:b7:
0c:cc:01:7c:e5:60:fe:93:53:72:a5:4a:5c:07:cf:4f:ef:f7:
54:c3:0d:20:78:3b:c0:74:51:c2:54:e3:50:74:94:c8:0f:ee:
ff:b8:5a:00:95:a0:dc:2f:48:42:17:a8:01:8a:05:6e:bf:19:
e6:4f:e9:d1:b8:51:37:2a:2c:2e:b9:60:d6:37:3d:95:da:a9:
2d:fc:08:0d:e4:bf:7a:7f:88:9b:4f:7f:2a:0a:46:e4:17:dd:
3f:38:c6:de:1b:88:49:43:ba:f8:7e:ce:89:de:c9:4b:a6:28:
45:e5:d4:3a:c4:49:e3:06:d5:5c:a2:ad:e8:46:05:58:58:52:
8e:d0:e6:29:f2:9a:e6:e0:44:da:e1:cd:ce:fb:b2:b9:fd:00:
c9:7c:45:4e:ff:62:5e:d3:92:3c:03:2e:1b:8d:09:bb:e4:30:
6a:8e:70:22:d7:84:df:89:8d:74:a1:c5:39:41:29:83:5c:0d:
c7:46:79:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:49:17 2025 by rpki-client