Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a37f2c5-9f84-49b3-9b53-dc8a55e9d4c3.roa
File: 1a37f2c5-9f84-49b3-9b53-dc8a55e9d4c3.roa (raw, json)
Hash identifier: TxjLuAyU9/1OgejLY763xVnSS984ovESxiKpSi1pgOs=
Subject key identifier: 23:72:59:43:67:90:D8:6B:59:9B:0A:E1:FF:CA:22:DB:AF:CF:0F:3F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7463F095ACF4E7673556F10B065F35F1B8FA1A4A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a37f2c5-9f84-49b3-9b53-dc8a55e9d4c3.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 192.26.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:63:f0:95:ac:f4:e7:67:35:56:f1:0b:06:5f:35:f1:b8:fa:1a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=641c0ea98f98554874d9c659abfca21802f2cd35120a73e8c46f1744ba6b59fa, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f2:65:cd:94:8b:0b:4f:04:79:b2:ec:45:ba:
6c:01:d3:2e:ee:18:01:c8:5a:3a:93:df:89:00:b0:
f4:71:19:8f:ea:ef:7d:1d:ca:3b:18:b5:09:14:cc:
7b:7e:52:37:47:fd:6b:3c:28:15:a1:7d:de:82:9c:
24:ee:bf:34:f4:05:6c:13:83:26:40:62:c8:84:c4:
5a:3a:31:76:85:0d:44:46:72:52:8b:53:b4:86:b0:
6d:b7:cd:cf:34:75:dc:a7:c2:4e:3f:c7:03:51:02:
02:8a:d7:26:34:db:f9:14:73:6d:07:46:f4:38:98:
c3:e2:45:b7:52:c2:3b:da:64:2e:32:77:f0:1e:f5:
6b:7f:fd:64:b8:70:f1:b1:92:0b:5f:fe:67:70:81:
87:08:21:28:ab:ee:54:0b:ab:b9:44:9c:20:a5:d1:
d7:df:ea:f7:62:93:f3:e0:d3:39:e9:28:b8:da:d6:
f5:ba:1d:52:dc:e6:af:af:96:a3:2d:8e:f0:83:c0:
af:89:a9:dd:ab:78:16:80:a8:9c:9f:9c:e2:10:cd:
77:5b:55:40:36:74:83:c5:5a:4e:21:00:27:8a:62:
75:c7:36:74:ff:c6:6e:91:83:34:9a:c3:2c:ab:c0:
cf:d9:4f:fc:3c:4a:bc:69:68:76:1c:59:2e:c3:6f:
82:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:72:59:43:67:90:D8:6B:59:9B:0A:E1:FF:CA:22:DB:AF:CF:0F:3F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a37f2c5-9f84-49b3-9b53-dc8a55e9d4c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.26.25.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:f8:6b:65:39:f0:a7:c6:d5:f0:e0:27:d8:23:4a:40:a8:ca:
03:77:d6:97:3c:cf:f3:5b:4d:ec:e2:3e:8a:b2:47:f0:3b:00:
d3:06:cb:db:f3:a0:ec:14:0f:90:33:bf:db:69:6c:e4:46:77:
07:17:50:0a:90:35:a1:86:ae:7a:8d:89:3c:f1:c3:d0:70:31:
f2:d0:ed:4e:7d:50:cf:44:11:9f:4a:a0:26:bc:ae:8a:be:98:
9c:e6:74:18:aa:46:0c:d9:76:03:27:60:40:9d:7c:08:81:bb:
cb:bc:af:16:f4:68:05:9e:c9:19:b0:ed:55:e1:54:f2:a1:c3:
c9:5f:2a:0d:68:23:4f:ae:aa:2b:14:b2:36:a1:6f:9a:fe:f1:
16:5e:a4:b9:bf:ed:0c:97:67:7e:2b:d2:94:5d:3c:46:a3:6e:
2a:93:bd:0a:75:67:ff:a8:42:5d:99:d6:72:c5:0e:96:f9:2c:
33:7b:ae:9a:68:b8:b4:5c:66:f4:35:93:30:0a:25:f5:b5:2b:
26:50:eb:4a:aa:08:8c:d6:b1:92:1b:3a:c8:b1:d3:da:fd:0a:
4a:47:cf:c4:00:d0:27:1c:03:8d:b7:24:b2:0e:ae:8f:55:ba:
47:25:86:3d:2c:0a:a0:b4:ef:cd:63:ec:dc:36:98:00:dc:ba:
4e:9e:28:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:48:31 2025 by rpki-client