Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23c65e11-8e59-4a35-bca6-b2153ffd05c1.roa
File: 23c65e11-8e59-4a35-bca6-b2153ffd05c1.roa (raw, json)
Hash identifier: hAxtGJIKpSlGovjKZIEHRjJVh4aywuwwUep/h56szlU=
Subject key identifier: BA:0A:FE:B5:9D:62:F3:EE:70:98:C6:47:E6:0E:B6:78:D2:B6:47:4D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 392086DC96174F5653923BCE29AE1FAE9EE6B555
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23c65e11-8e59-4a35-bca6-b2153ffd05c1.roa
Signing time: Sat 11 Jan 2025 00:00:00 +0000
ROA not before: Sat 11 Jan 2025 00:00:00 +0000
ROA not after: Sat 15 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.25.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:20:86:dc:96:17:4f:56:53:92:3b:ce:29:ae:1f:ae:9e:e6:b5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 11 00:00:00 2025 GMT
Not After : Feb 15 23:59:59 2025 GMT
Subject: serialNumber=94ee31da8333c4f1a1cb2c3f90ed08fad143cf473ee22b85367db68bfa5c0051, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:51:72:4d:da:40:a1:27:c8:6d:af:3c:82:94:
1c:6a:c8:eb:9e:4e:4c:09:74:e2:d4:d4:1d:65:c7:
c6:f2:72:53:c5:00:8d:70:83:1c:59:54:32:e7:9f:
67:5d:1d:5f:b4:d6:71:77:8d:c1:6b:e8:f1:51:f4:
32:3f:a6:11:a7:6d:9a:38:37:43:7f:83:f4:20:0e:
fd:9b:22:6d:99:de:10:d2:84:f7:89:07:91:c9:72:
b4:40:22:73:17:c2:ab:e9:6c:7d:bf:8e:1c:1e:a0:
f3:45:1f:14:1c:7c:13:b6:11:75:46:7b:43:b2:44:
7f:85:fe:ff:3e:4b:bb:f6:aa:26:7e:79:d1:88:28:
6b:be:f5:d3:71:f5:d9:29:ad:12:b4:33:3a:54:66:
32:54:51:0f:1a:65:dd:eb:9b:6f:9f:c1:db:0c:f8:
1d:1e:8c:e4:af:26:98:61:45:5f:90:bf:de:16:01:
c1:04:a5:35:6e:e6:7b:74:19:2e:17:ba:98:6e:16:
0d:b2:23:2c:a4:8e:d7:36:47:fb:e7:e8:24:b4:78:
ed:aa:1a:cf:0f:a7:11:d1:6c:fc:9b:99:8c:65:20:
c5:33:e0:26:17:5f:a2:77:c9:3e:99:92:49:f3:8a:
e3:9c:70:07:fc:49:44:00:0d:67:d6:0b:eb:d3:97:
87:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0A:FE:B5:9D:62:F3:EE:70:98:C6:47:E6:0E:B6:78:D2:B6:47:4D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23c65e11-8e59-4a35-bca6-b2153ffd05c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.25.67.0/24
Signature Algorithm: sha256WithRSAEncryption
17:21:71:19:3d:2b:7d:f5:23:e5:0a:7c:eb:1f:8e:94:cd:9a:
1e:88:3d:a8:c6:23:e2:83:89:94:47:4e:61:57:d2:14:df:3f:
5d:59:a9:6c:27:2a:13:4f:85:47:04:1a:1a:2c:18:1d:0c:6d:
b1:d3:94:a8:9c:b0:b6:93:f8:27:2d:d7:24:be:92:f9:c2:7b:
68:75:1f:ec:1a:0f:d5:48:4c:cc:ba:28:f4:f2:38:ad:88:67:
2e:7b:a3:e6:c7:75:80:29:c6:f9:99:33:ec:3e:87:12:f5:9a:
b4:ad:a4:bf:f8:5b:68:82:38:60:33:30:47:14:f6:92:bf:98:
da:96:16:c6:36:8e:8b:23:12:87:8e:3b:3e:ed:10:11:9c:14:
0b:a4:7f:57:b9:29:d7:30:69:df:ce:05:6c:b6:6d:aa:6b:0b:
21:17:dd:32:17:cd:a4:b2:bd:7e:c8:0a:17:62:e4:43:e0:a9:
e1:b9:c8:47:64:82:e3:89:43:62:3c:a3:ce:b7:8e:6c:f8:bb:
f6:87:4c:de:67:9f:df:41:8d:fa:12:e9:8b:f2:25:29:06:7b:
18:d5:07:d1:b3:aa:a6:6b:43:b4:8f:57:2a:51:cd:e4:13:29:
3b:08:42:4a:74:f4:8a:ef:84:6a:4f:ad:1c:2c:a1:6d:75:5e:
06:cf:ae:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:00:30 2025 by rpki-client