Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/243d00ff-8998-4e10-a947-4cca6eff1dff.roa
File: 243d00ff-8998-4e10-a947-4cca6eff1dff.roa (raw, json)
Hash identifier: VtrQk7uyJjXkua5IHrvrbYT23lJAVB+6I8cz9mvq0FM=
Subject key identifier: E4:81:9F:29:75:34:4E:6A:23:44:ED:7A:9B:5C:98:14:BD:E6:AD:B1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 39AE53840FF38D15DAF4D27348F7BD62A1EF8DB7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/243d00ff-8998-4e10-a947-4cca6eff1dff.roa
Signing time: Sat 28 Dec 2024 00:00:00 +0000
ROA not before: Sat 28 Dec 2024 00:00:00 +0000
ROA not after: Sat 01 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 16.207.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:ae:53:84:0f:f3:8d:15:da:f4:d2:73:48:f7:bd:62:a1:ef:8d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 28 00:00:00 2024 GMT
Not After : Feb 1 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4b:84:f5:e0:69:d3:49:10:f4:29:e7:cd:74:
ab:aa:9e:6c:3f:3c:e0:fe:be:63:96:70:ac:b4:f7:
aa:5d:80:14:19:21:88:d3:7e:e1:5d:e9:1c:8b:5a:
b4:67:c1:c3:14:f2:4d:65:cb:83:2b:49:a8:3e:d7:
9a:54:3d:fe:a8:9c:f6:b6:af:3c:42:57:1c:73:c4:
80:84:78:19:e9:13:e5:66:6c:49:72:64:92:b4:e7:
aa:b7:8c:ec:66:3c:8e:f5:aa:ef:99:a5:82:ea:a4:
9d:da:27:15:f7:a2:cd:40:a4:17:a5:0d:93:0c:6f:
5d:5f:4a:38:b1:22:73:e2:51:1e:c1:b1:b7:f3:97:
7f:f8:4d:d4:6a:c9:7c:69:6a:f5:c3:01:d4:df:00:
7f:f1:74:84:b5:f6:e3:44:38:91:63:65:8e:71:d8:
2b:5e:97:b9:51:1f:87:71:d0:e8:3b:6a:55:47:4a:
c9:05:7a:38:01:b4:4c:c7:02:d4:5b:0d:20:fb:74:
b3:e7:5d:68:db:d5:e8:4d:22:d3:4b:bd:b6:69:c6:
53:97:3c:94:b7:52:56:8d:cb:d2:8e:6b:a2:a1:fb:
73:6f:ce:f5:05:5c:4a:b9:0a:84:29:ad:9c:b7:d9:
2d:55:c4:e8:ed:1d:d0:d8:af:9c:40:0a:bf:a8:25:
86:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:81:9F:29:75:34:4E:6A:23:44:ED:7A:9B:5C:98:14:BD:E6:AD:B1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/243d00ff-8998-4e10-a947-4cca6eff1dff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.207.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a4:34:da:f9:6f:d2:3d:75:b5:12:c3:74:37:27:17:36:5f:fb:
8b:fc:90:58:8e:df:ee:ff:54:2d:ab:ff:e2:0c:06:48:15:75:
b8:41:b9:07:50:2a:3b:e9:27:ac:fd:fb:20:e8:82:31:cd:ab:
d7:24:0d:9d:71:4c:90:32:b5:a3:c9:75:fa:2d:c8:99:e0:62:
df:5c:bd:b5:db:af:2b:da:2c:50:d3:d5:9b:47:62:5c:e1:cc:
96:cb:2b:4e:30:a3:cc:52:71:dc:e0:d2:73:1f:a5:da:65:c9:
36:6b:ce:8d:28:1a:6d:96:12:91:a1:38:2d:39:1f:f3:7b:4c:
cb:c4:03:c0:10:b0:f8:c5:ce:c7:c3:df:bf:40:fe:4c:e7:c1:
fd:92:33:2c:55:7d:40:ef:88:d1:72:a6:f2:12:0a:ed:2c:dd:
15:71:d5:29:f6:62:97:02:3f:5a:26:12:ed:f3:e9:a2:67:be:
1a:46:c7:6d:9a:ca:b9:73:3b:14:42:82:3f:97:59:f1:6a:cb:
f2:cd:ef:c0:1a:38:56:4d:fd:e7:b8:f3:c0:95:f0:b8:38:0d:
fc:b7:3a:93:22:8f:78:db:83:23:fd:5d:f5:9d:2e:46:c5:f4:
e2:c7:18:ff:a5:46:f8:36:fe:27:8e:33:34:ee:d6:45:af:0b:
ab:28:60:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:22 2025 by rpki-client