Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d357a5d-a132-41e0-941a-b5e58fdff1a9.roa
File: 1d357a5d-a132-41e0-941a-b5e58fdff1a9.roa (raw, json)
Hash identifier: FRakbTrVi/tbWXtuB3l5kyMuNaRzmlt4PND77IX5LZo=
Subject key identifier: 02:D6:6E:40:5D:FE:07:60:8E:DD:5B:6A:F2:29:68:53:30:E2:39:DD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2F8F3F65E0C50BFF72CD67ED0267C82C339F1956
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d357a5d-a132-41e0-941a-b5e58fdff1a9.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f69:e000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:8f:3f:65:e0:c5:0b:ff:72:cd:67:ed:02:67:c8:2c:33:9f:19:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:56:45:e0:7a:1e:ef:c3:ce:da:94:32:9b:65:
a2:10:f1:a2:42:8c:0d:48:74:5d:b8:e7:a0:1a:d7:
b5:37:14:86:b4:fe:ae:1b:00:00:35:19:8c:d1:a2:
08:5e:fb:c9:26:87:43:53:ff:c3:f6:07:db:1d:93:
36:e0:fe:f7:8f:d5:c8:39:93:83:ba:33:ee:36:df:
e8:8e:1c:40:87:4f:85:58:53:aa:ea:b4:6b:95:4b:
48:ce:41:ca:af:76:b7:8f:d4:ac:6e:1a:c4:74:69:
ce:3e:09:7d:0c:aa:b3:bf:ca:c4:72:93:d1:5a:9b:
16:9f:02:db:a3:ca:be:f7:dd:b3:d8:9a:4b:fb:68:
94:11:08:4c:dd:72:97:aa:87:60:39:1c:45:70:87:
31:8f:e7:fc:7e:42:26:c9:e3:01:ef:aa:0d:7a:58:
bd:14:8a:04:58:1e:30:aa:08:8e:72:f8:29:5a:d2:
5d:1b:8c:d6:f1:d2:d7:86:b0:c6:83:27:f7:f1:16:
3a:f2:ea:95:0b:0c:87:e3:9b:91:48:66:bf:47:ec:
34:c7:a9:c0:fd:d7:2b:d2:8b:c3:88:0b:d7:73:cd:
44:ba:92:14:d3:cd:60:a3:f6:90:e1:d7:4f:ea:b0:
00:66:53:1d:94:2d:ae:ca:7b:d7:be:59:e9:88:85:
18:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D6:6E:40:5D:FE:07:60:8E:DD:5B:6A:F2:29:68:53:30:E2:39:DD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d357a5d-a132-41e0-941a-b5e58fdff1a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f69:e000::/40
Signature Algorithm: sha256WithRSAEncryption
96:5d:9f:59:f4:e8:1a:2d:76:b0:71:7c:c4:f7:71:f8:60:81:
1e:2d:e1:90:4d:e2:30:59:05:25:5b:48:18:00:4f:79:70:51:
0f:5a:0a:76:cd:83:5d:e9:3b:6e:ee:06:3e:0c:16:5f:18:15:
e9:37:82:5e:f8:46:20:b7:90:5b:c5:4f:44:47:69:ef:1d:bb:
38:14:a8:e2:b6:22:88:2e:3c:cc:e8:b6:8e:92:5c:f6:70:67:
5a:90:ab:97:9c:54:93:b3:4e:c8:5a:98:e6:0e:93:d7:23:7c:
86:9b:d9:63:4f:25:63:16:4e:c2:93:c4:6a:4c:d1:4b:c5:aa:
29:d5:75:78:44:3d:8a:00:57:ed:18:b0:c5:dc:49:3c:c7:88:
1c:4d:85:e8:50:37:d6:37:89:07:7e:b1:da:e3:60:2e:69:32:
01:a1:e6:53:a1:aa:67:01:01:74:fb:01:d8:f9:c2:74:64:f2:
a6:b8:d8:b3:8b:a6:7b:cc:d1:b7:c3:ff:fd:6b:38:4f:51:6e:
b8:37:2f:9f:a5:90:ef:ae:51:db:97:83:e7:3e:f8:8c:eb:e1:
20:8f:0d:a3:9a:c3:c8:82:dd:c1:e6:17:ec:eb:d9:03:a5:50:
d7:bd:de:80:0f:6b:bd:ba:01:07:83:f4:7d:e0:74:62:74:8f:
5f:b6:37:e0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:22 2025 by rpki-client