Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22a49b25-e85d-4d5c-8c40-7d50f1650e57.roa
File: 22a49b25-e85d-4d5c-8c40-7d50f1650e57.roa (raw, json)
Hash identifier: oS6CgzQTkMtt6c1cbiZThukKMneYJNqNFK+TL5YxJ5Y=
Subject key identifier: D2:F4:16:39:2B:FF:10:FF:1A:AE:7E:E6:57:53:D1:53:45:F2:CE:DB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2A669D70AD3B1BEF1EE83DD40B10881D8E8710EA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22a49b25-e85d-4d5c-8c40-7d50f1650e57.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 56.98.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:66:9d:70:ad:3b:1b:ef:1e:e8:3d:d4:0b:10:88:1d:8e:87:10:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:86:1b:c9:75:04:35:19:87:5c:34:39:26:24:
0b:ca:a4:a9:56:a2:83:f5:f7:bc:39:49:00:38:8b:
59:a7:1c:62:2f:48:b3:0e:22:ed:3d:bc:a5:0b:f3:
76:f4:a4:19:8f:93:f7:0b:5c:df:10:7b:04:b8:c1:
63:03:d9:e3:9e:8e:99:df:5a:e0:18:f7:23:e5:88:
1b:dc:37:03:c6:a2:a0:7d:cc:49:55:42:ff:ba:bf:
bf:e1:13:97:ff:7a:10:99:a5:d8:2c:3a:6e:31:14:
5d:0e:da:2c:73:35:80:ab:97:fd:22:b1:2a:5f:b6:
5f:35:1d:52:72:ad:fc:83:41:88:20:c8:08:36:da:
48:6a:64:cd:13:dd:c4:7b:8f:a0:42:2c:6b:7c:7a:
37:bb:09:1e:f8:bc:c0:6e:29:90:ed:41:f7:28:44:
11:45:5b:b3:8a:49:a8:69:8b:d5:d5:05:45:e6:a2:
db:0a:ff:01:72:03:84:d2:f8:88:0c:d5:d6:12:55:
e0:d5:df:df:83:5a:14:26:dd:cf:56:05:43:fa:b8:
29:48:9d:ab:06:d7:4e:15:1f:85:6c:f3:33:91:a6:
0e:b0:0f:12:9d:58:b0:81:f9:73:48:22:45:4a:d6:
3e:a0:84:96:28:33:8b:05:94:d8:b6:2f:4f:a8:8e:
f6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F4:16:39:2B:FF:10:FF:1A:AE:7E:E6:57:53:D1:53:45:F2:CE:DB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22a49b25-e85d-4d5c-8c40-7d50f1650e57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.98.0.0/16
Signature Algorithm: sha256WithRSAEncryption
09:48:a1:f4:34:1a:8d:e0:bd:4a:28:0e:6f:63:ba:09:13:03:
5e:30:68:93:cf:4e:3c:8b:16:6e:4d:d1:3b:1d:ce:58:c2:f5:
c0:73:88:19:8a:40:46:b8:fd:68:36:be:3c:d5:b9:2d:b7:a1:
7d:00:25:8c:9c:8a:c7:03:ec:ec:26:39:d6:ce:33:1a:18:0d:
56:0a:61:56:0b:a1:45:b3:b4:58:f7:ed:26:09:4b:ed:da:8d:
41:8c:49:7a:74:b1:a8:af:33:bc:21:ab:1a:36:41:cd:d0:78:
c7:08:b3:52:69:6f:dc:38:63:e8:31:fc:a2:a3:e6:83:33:c9:
c1:7d:57:0d:0d:32:f0:57:21:22:de:17:cb:bc:35:af:4a:91:
6b:de:cf:c3:7d:4c:88:31:03:ae:ac:03:cb:1f:d0:50:04:00:
dd:b0:f6:ec:c2:31:a5:c1:d6:3b:60:f1:c1:e2:dc:3b:db:db:
a3:ae:ae:0b:a3:36:2b:66:78:b0:41:1c:08:4b:92:57:94:d7:
12:19:91:a0:e3:ff:92:a1:23:db:34:07:0b:a1:51:14:a0:74:
61:60:82:02:cc:d9:2d:4c:b9:ec:d1:a7:a6:70:9c:59:e2:23:
fb:29:03:bf:04:b2:fd:fe:57:91:76:ef:2d:0c:72:07:aa:38:
e6:95:ff:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:41 2025 by rpki-client