Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b726194-96cb-47bf-bd90-5e30ef9e1be5.roa
File: 1b726194-96cb-47bf-bd90-5e30ef9e1be5.roa (raw, json)
Hash identifier: 710fqz3e/iRfK1t+Fm+SL14rdBz/vxdVCr7cY7y3plA=
Subject key identifier: 1A:C1:60:3F:D4:7A:4E:DF:34:55:D1:57:26:CD:23:AB:43:8B:66:77
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7997F913D1A4EDCF6788EED3176382E7305ED7AA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b726194-96cb-47bf-bd90-5e30ef9e1be5.roa
Signing time: Mon 23 Dec 2024 00:00:00 +0000
ROA not before: Mon 23 Dec 2024 00:00:00 +0000
ROA not after: Mon 27 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 104.194.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:97:f9:13:d1:a4:ed:cf:67:88:ee:d3:17:63:82:e7:30:5e:d7:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 23 00:00:00 2024 GMT
Not After : Jan 27 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a3:0c:04:ab:c5:c1:e0:50:2b:07:2a:69:27:
9f:39:83:4a:10:9c:b7:d1:bb:a0:bd:2a:ff:0f:c3:
57:d5:03:b7:30:ef:4a:59:e1:97:b1:73:8f:22:65:
00:d3:73:6c:04:86:fc:16:d1:3c:4d:29:84:06:14:
a9:27:c7:91:ea:74:52:6d:0a:73:c7:08:63:35:33:
84:d1:f2:2a:2a:2b:4c:1c:16:ee:fc:da:76:6e:3e:
23:9a:d0:4f:c6:e1:b4:e2:48:5e:b4:4f:36:b0:cd:
35:5b:17:d9:e2:a3:75:fa:9a:24:6b:32:43:4b:23:
8e:47:7a:fd:dd:a9:96:45:12:fb:13:4c:1f:b1:13:
f8:d6:5f:e4:83:97:18:bd:3f:94:c7:1a:9e:56:a1:
0e:da:89:6a:c9:3f:61:e9:6c:b7:38:3f:16:db:3c:
0a:96:0a:d9:bd:4c:ed:6c:38:ea:c6:3e:46:bb:34:
4f:ca:8e:fe:a1:91:0e:66:7d:b6:f8:4a:53:e7:f6:
a4:f4:e8:2e:67:68:af:5b:59:f8:7b:6f:ff:33:e3:
1f:fc:b9:c1:0f:d1:50:9e:ee:84:d7:3c:25:20:5f:
51:b2:be:c8:5c:84:b0:7d:7e:ad:cf:af:03:ce:6c:
f5:d6:09:67:28:83:8c:01:0d:ec:10:8e:d5:8d:6a:
ff:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C1:60:3F:D4:7A:4E:DF:34:55:D1:57:26:CD:23:AB:43:8B:66:77
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b726194-96cb-47bf-bd90-5e30ef9e1be5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.194.224.0/19
Signature Algorithm: sha256WithRSAEncryption
30:6f:48:24:95:51:db:b1:d9:16:88:00:1e:dc:15:52:f5:26:
92:c4:da:ee:12:c7:70:6b:65:10:fe:cb:d2:fc:c3:8f:b4:96:
1c:a7:15:6f:f2:61:bb:39:a0:c2:16:91:dc:84:12:7b:3a:0a:
42:82:c7:33:4d:c6:02:c4:89:7c:4d:7a:ed:3b:db:a2:b7:0a:
b3:c8:4b:f0:56:3b:f0:56:63:ae:a6:4b:47:d2:6b:ab:45:05:
3f:08:2d:80:d4:88:46:e3:d2:53:94:c8:73:dd:94:e7:59:5b:
89:fd:41:ec:6f:37:f7:47:39:1a:a5:84:2a:03:9d:2e:d2:0e:
9f:e0:62:7c:a3:ff:65:5a:96:3f:8a:39:a8:35:2f:5b:48:b9:
0c:98:5d:75:f5:c1:77:cb:fc:fa:d5:ae:47:f3:be:33:e3:f4:
04:3e:94:44:cf:28:bd:42:82:a9:ad:c9:52:9a:e9:bc:1b:a4:
3e:fb:e4:23:5e:03:c8:2b:71:ce:ea:85:9b:97:e4:b6:2b:ca:
b7:36:97:e2:e7:af:83:bf:22:ac:9a:36:36:35:d7:9a:42:28:
69:cf:7f:1c:08:2f:f4:44:3c:0b:8f:26:e2:5d:04:d0:55:be:
bd:bf:fd:da:d1:0b:62:9a:44:1c:ec:55:32:93:57:8a:4a:75:
f0:f0:e9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:40 2025 by rpki-client