Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/251e6b19-9063-42e2-8cd2-68ea8b3bbaf4.roa
File: 251e6b19-9063-42e2-8cd2-68ea8b3bbaf4.roa (raw, json)
Hash identifier: FALCJDndAC0eUtBwP4HtRKx1cHuPiPuQU+PmEPNpm9A=
Subject key identifier: 2A:2A:21:69:8F:6C:39:B9:D1:6C:60:FF:65:34:CD:84:52:68:59:99
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1515426A5FB896373D1EBAE1D14B5DA903109170
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/251e6b19-9063-42e2-8cd2-68ea8b3bbaf4.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 156.15.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:15:42:6a:5f:b8:96:37:3d:1e:ba:e1:d1:4b:5d:a9:03:10:91:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=30106f44c0146c22a2d6bf8f439097f7c92a1d603defefdd6c8dc0059c5aad63, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b1:b9:15:e7:6b:74:bb:57:42:4d:5e:92:73:
cf:a6:c3:5d:ad:13:80:da:1d:e9:d4:33:b2:d9:62:
d0:e2:7c:94:e0:d4:95:2f:72:50:a1:db:0d:0a:7a:
86:32:f5:e2:27:57:a3:10:6b:1c:29:67:03:11:de:
57:6a:b5:9d:bf:f2:60:0d:90:ae:7a:40:13:df:92:
6d:81:54:e3:58:1c:ac:0f:7a:86:23:0e:77:88:c0:
b9:71:28:2d:10:ed:a1:44:fc:42:7e:fe:4c:9e:3d:
d8:78:a4:6a:b3:3b:4c:ea:0e:3a:26:8a:22:ad:aa:
d9:c9:93:28:fb:4c:88:64:52:49:23:7f:73:6f:43:
6a:e2:49:6d:de:83:df:1a:f6:50:2e:13:1d:32:5d:
5a:fc:81:11:0d:aa:a9:7f:6d:3e:15:84:1e:f6:c9:
de:40:89:60:2d:9e:1b:9e:26:3c:4f:91:22:ea:12:
cd:53:0c:ee:d2:ec:0a:7e:92:c0:4c:9f:5b:42:d0:
90:3e:4b:f2:57:c2:ad:8b:18:6d:b4:01:cf:46:4b:
5a:1e:d7:04:e3:de:18:ee:b0:a2:ec:95:18:00:99:
68:a5:5e:bd:c1:db:ce:56:46:1a:97:9a:cd:a8:0d:
ab:34:81:37:b1:64:5b:fa:95:af:2a:32:10:9c:80:
05:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2A:21:69:8F:6C:39:B9:D1:6C:60:FF:65:34:CD:84:52:68:59:99
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/251e6b19-9063-42e2-8cd2-68ea8b3bbaf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.15.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4e:7f:0c:50:10:13:dd:63:c7:84:f0:bd:92:8a:1d:dc:2d:72:
16:56:69:2b:74:59:c1:8c:7a:0e:36:45:93:a0:5c:8f:9c:1c:
e2:6b:cf:32:d3:97:37:8d:1e:1e:96:76:19:70:18:ca:21:01:
98:fd:97:35:af:3c:c7:21:78:23:a3:a2:ae:7f:f7:dd:39:be:
a6:6d:7a:57:44:96:4e:e1:23:b4:3e:74:75:18:24:e8:92:78:
d3:8a:9a:2b:67:01:d8:94:cb:ab:d7:fa:0b:71:76:3d:2d:85:
97:d7:b2:8e:43:3f:72:99:dc:84:3a:12:d7:dd:49:04:25:d5:
de:5a:35:db:03:c7:cd:de:ab:b9:56:b3:dc:c6:4e:ca:39:df:
f9:a7:9d:34:38:42:e7:06:ee:06:20:c5:8f:cd:2b:c4:08:d6:
da:f7:56:b0:d7:02:ea:cf:b3:70:6e:a7:59:97:3c:0a:78:30:
58:c2:28:b8:b4:fa:e0:c4:52:ea:ec:61:8e:f3:ac:d0:9c:83:
e0:0e:83:16:3d:9e:19:f8:16:c3:ed:5b:23:da:d4:13:4f:80:
cf:f5:52:d8:c0:4f:76:bc:86:53:d5:45:a4:0f:8c:6d:50:8f:
a4:bf:bf:4e:bf:55:9a:df:81:ac:fb:7f:ae:b7:6e:52:c7:c7:
26:d8:52:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:52:07 2025 by rpki-client