Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/185ef229-9ec0-42ec-954c-54102ab270e1.roa
File: 185ef229-9ec0-42ec-954c-54102ab270e1.roa (raw, json)
Hash identifier: INOlD0XTE9T0lDQ+by4MDTlt8DrkAswKR0fIe/zKbiw=
Subject key identifier: 46:3B:A3:12:14:DF:73:67:AA:8D:66:17:4E:E7:36:60:48:5D:21:D4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3AF3EC4D98DA16A8BE643964454CA2A1135C145C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/185ef229-9ec0-42ec-954c-54102ab270e1.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 92.201.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:f3:ec:4d:98:da:16:a8:be:64:39:64:45:4c:a2:a1:13:5c:14:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=b4c5089add7bd3d5746d6602d69cac4795fd21ae61871cc94e12bc41c9fcfdb5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:14:95:52:df:eb:b8:84:c6:2f:e5:92:d8:b6:
c1:1e:68:ec:fd:b9:d2:31:de:60:82:ce:c7:91:5e:
03:28:a2:5e:40:57:e0:ed:1f:10:b7:46:3b:71:31:
5a:da:b4:77:1a:e1:76:ff:94:26:9f:14:76:cc:17:
73:b0:77:1a:48:27:21:f6:b3:91:95:86:d2:20:2b:
9c:3d:f1:78:d3:ea:fd:60:f1:16:c3:94:de:89:79:
d6:63:a6:a4:81:20:b2:ce:24:41:c1:01:e4:73:9b:
2e:1e:46:9d:ec:df:56:0a:c3:12:4b:b3:1c:76:c4:
ab:f0:e4:01:99:22:3d:f3:d1:c5:eb:c0:a4:f4:a9:
61:50:da:19:45:d8:71:02:be:07:f2:37:c0:4b:30:
7e:a8:74:26:bf:eb:d4:10:6a:51:97:66:db:f4:81:
d4:b0:89:f8:82:7f:0c:a3:c4:2c:82:47:c4:ee:81:
3a:b0:53:92:1f:66:84:65:ab:92:bc:f2:d1:f8:ed:
7d:98:cd:c8:e1:3e:d3:f0:df:33:15:17:b5:14:72:
32:2e:e8:70:ca:c3:27:14:ae:25:25:4c:a1:11:a1:
6e:5a:83:08:54:da:6e:77:30:27:9a:0c:bf:74:cf:
5a:9f:1b:ed:99:c2:61:c0:d4:67:68:ab:e4:10:ac:
e6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3B:A3:12:14:DF:73:67:AA:8D:66:17:4E:E7:36:60:48:5D:21:D4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/185ef229-9ec0-42ec-954c-54102ab270e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.201.0.0/17
Signature Algorithm: sha256WithRSAEncryption
76:6e:41:5a:fc:14:66:2d:9b:9c:5e:3c:e4:44:75:55:96:70:
01:ea:6f:be:be:95:22:3c:97:ab:d8:bd:2c:0f:39:ed:19:4a:
46:81:c9:64:e2:ad:ac:87:d2:58:79:fe:7e:01:02:fc:26:38:
39:0a:20:08:fa:66:65:77:15:c0:e3:83:35:35:29:a6:d2:b4:
8a:26:32:f7:eb:0d:62:c4:b8:f7:d0:30:e6:d1:5a:ce:65:e2:
d4:5f:5e:d1:98:41:e4:cf:95:72:3e:16:8a:51:5d:d1:9e:6d:
31:27:69:b1:96:2f:19:fc:54:79:79:df:3e:2a:0f:d0:e2:c3:
20:2b:8e:9a:a7:7c:ca:58:f5:b8:a8:39:bb:4e:36:68:cd:7c:
93:15:5b:0b:ba:74:42:8a:2f:b9:01:37:ca:f1:7c:56:80:73:
ab:e8:16:48:1e:24:54:bb:ce:6a:85:ce:1d:5c:f7:60:44:ba:
8d:a3:ba:bb:3f:25:cf:23:50:ad:db:ae:e7:f4:61:e8:87:a5:
d0:1e:b3:1f:c2:4f:ef:25:a0:3b:cd:2e:e3:da:c6:49:ff:62:
f6:16:99:aa:bc:ed:62:2c:ba:94:33:08:69:84:ac:45:18:9a:
4c:90:ea:b2:b4:5e:e2:02:5c:93:0c:05:d8:a5:de:75:ab:23:
38:2d:4d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:17:51 2025 by rpki-client