Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/170ad902-ddbe-4edc-88ca-78ef78098b54.roa
File: 170ad902-ddbe-4edc-88ca-78ef78098b54.roa (raw, json)
Hash identifier: 10S49BLYw+2pFNmxquyjcMJkKp556Prz3gqW70ykzQQ=
Subject key identifier: E9:9D:63:81:F3:2C:1E:02:A6:0E:48:99:13:85:AC:6E:AC:9A:4F:59
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4A0BA0CD35FC990FA1CE8BB93219AE2370BA27A4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/170ad902-ddbe-4edc-88ca-78ef78098b54.roa
Signing time: Tue 03 Dec 2024 00:00:00 +0000
ROA not before: Tue 03 Dec 2024 00:00:00 +0000
ROA not after: Tue 07 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 54.112.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:0b:a0:cd:35:fc:99:0f:a1:ce:8b:b9:32:19:ae:23:70:ba:27:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 3 00:00:00 2024 GMT
Not After : Jan 7 23:59:59 2025 GMT
Subject: serialNumber=6dd52818b48fe90ee8985e745a0b5937ccafb2ae6b33ad53fe1da34527cecb9b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:aa:06:80:3d:50:bb:8e:18:14:89:b8:a3:cf:
ae:50:14:a9:b2:40:fb:2e:88:4a:67:5a:72:bb:b3:
f7:ef:3c:98:c6:61:41:1e:5a:95:f4:2f:aa:cd:c2:
f7:58:f2:e8:76:f5:55:6e:5f:66:4f:2d:70:08:84:
18:68:09:0f:2f:f5:2b:9a:37:ea:36:b2:f0:46:21:
49:37:35:64:43:d6:9d:49:a8:da:fb:69:da:ab:af:
ad:cc:7d:26:6b:a1:31:86:8c:d8:cf:88:7f:fb:79:
7a:87:0e:ad:cf:d8:c1:d5:96:ac:85:44:81:9e:d9:
50:a6:bf:fb:1d:2b:5e:f5:03:d7:f6:de:41:ac:f6:
25:76:72:f0:f9:20:57:ee:97:dc:d7:23:5b:ba:bf:
cd:1a:d0:76:d5:5f:d4:c3:70:65:c1:df:39:68:ac:
47:b1:c8:93:7a:9b:00:54:e1:0c:5a:fb:d9:c9:cf:
a7:66:67:f0:46:12:d5:01:8f:8f:fe:41:ac:e2:02:
3b:9f:bc:af:d7:a0:0c:f0:b4:4a:7b:b2:62:f0:5a:
0e:3b:99:d6:74:82:56:17:b1:dc:63:87:e2:5f:fe:
03:70:93:01:c9:ba:b3:9a:67:7c:5f:69:2c:18:d9:
1f:59:98:95:96:46:85:4f:67:30:08:f9:6a:b4:82:
01:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9D:63:81:F3:2C:1E:02:A6:0E:48:99:13:85:AC:6E:AC:9A:4F:59
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/170ad902-ddbe-4edc-88ca-78ef78098b54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.112.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5f:d9:a9:d3:08:7a:e7:94:0f:fd:58:10:ef:35:41:17:5b:cb:
30:8b:8b:05:cb:20:d3:3d:b8:ea:dc:fa:e3:70:9f:09:c0:cf:
45:a6:05:07:f8:51:3a:aa:62:fc:7c:08:2d:67:6d:de:79:e4:
3a:2c:46:e5:bd:84:04:82:bd:c6:6d:a9:6c:be:85:03:bb:92:
bb:4d:d5:6b:fe:0b:ec:e6:ed:de:de:2c:d7:e3:97:f1:3c:ac:
56:d8:fd:51:09:6c:de:f4:00:09:aa:a3:73:bf:8f:b1:e5:2a:
1b:3f:0e:da:8d:87:4f:8f:8c:90:d1:da:5d:c8:66:3e:93:d3:
e7:96:91:92:52:68:54:34:ed:2c:76:37:31:6e:d2:50:33:96:
2a:5b:56:85:6b:61:b3:95:63:1d:c3:95:68:7c:d1:23:eb:3c:
3a:fa:fd:89:4a:a0:07:26:75:9a:83:3d:77:9c:46:2f:09:4d:
b0:ee:f6:19:c9:56:61:82:46:77:3d:2a:00:90:ae:3f:24:04:
6f:34:06:4e:6e:14:4a:b5:02:26:b2:7e:22:64:28:65:89:03:
17:ec:c6:3c:7e:fa:ed:a3:7b:63:a1:c3:7a:88:04:fc:9e:99:
27:7c:71:32:21:91:96:aa:34:a1:b7:9a:d3:58:72:44:15:36:
fc:d8:b3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:11:40 2025 by rpki-client