Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2665b7b4-034e-4119-b0f0-8302adbcb7da.roa
File: 2665b7b4-034e-4119-b0f0-8302adbcb7da.roa (raw, json)
Hash identifier: cXsBgvISszJksPn+ZwvO8efutW0HTxPxLD4KD7PhvUk=
Subject key identifier: 1B:4B:75:A6:11:83:A6:B7:18:AD:E7:49:7C:51:A1:F4:71:EC:95:F0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 42A0A080D7F9A967E0CAFF78DE98A044BF995708
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2665b7b4-034e-4119-b0f0-8302adbcb7da.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 16.19.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:a0:a0:80:d7:f9:a9:67:e0:ca:ff:78:de:98:a0:44:bf:99:57:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: serialNumber=1345487bc528e99bb55972141b5bce4194f735ced4a478c7b89abee418b6afa2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:21:e6:75:e2:4f:6e:e7:ae:8b:f9:94:41:a1:
b2:cb:50:16:6c:fd:5f:11:55:9e:db:ed:9f:64:ef:
9f:e8:50:b2:b4:c1:d2:d8:b8:29:36:c4:c7:61:ab:
64:7d:da:7d:7f:1b:de:27:f0:c1:02:09:70:92:c1:
ab:bd:b4:90:bc:9f:7a:47:95:35:50:cc:e1:d7:a5:
3c:14:9e:d4:ec:0b:2f:31:4c:b9:43:be:f7:ac:af:
44:64:83:10:d1:f3:03:e2:77:bb:45:7a:55:6b:35:
f6:0e:0b:1c:ec:c6:fb:4d:8a:e2:7b:a6:b6:b3:c8:
2e:52:d3:c3:5a:34:91:58:36:22:34:b2:7b:1f:eb:
8c:36:9d:b8:d6:6e:dc:64:88:64:7f:ad:8c:8f:f7:
d0:8c:d6:1b:98:e2:a4:10:a4:fd:ed:9f:cf:28:bd:
cc:66:c7:05:77:58:e2:cd:a8:3b:db:24:90:9d:af:
5f:b9:be:dd:82:50:5d:61:df:db:c6:bd:7b:40:03:
ed:85:97:1f:eb:e7:40:4b:ce:de:18:b0:fc:c8:2e:
40:0f:36:d9:34:98:4b:16:da:69:11:59:ac:32:63:
74:2b:7f:77:aa:73:4c:0e:53:7e:da:89:bb:b6:ef:
38:c5:cb:b6:84:c7:77:ac:36:25:32:ce:7f:0d:01:
f6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4B:75:A6:11:83:A6:B7:18:AD:E7:49:7C:51:A1:F4:71:EC:95:F0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2665b7b4-034e-4119-b0f0-8302adbcb7da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.19.0.0/16
Signature Algorithm: sha256WithRSAEncryption
27:c4:54:ff:a9:d9:2d:9c:a0:8b:0e:28:1a:a2:4c:8a:05:5d:
f2:26:de:60:b9:85:62:f3:ae:b6:f8:0e:7b:84:0d:94:c1:d5:
e4:b5:56:04:96:cf:11:e8:ff:fc:4e:9b:b5:3e:36:3b:dd:2b:
ef:53:ae:11:2f:54:84:ef:79:70:fe:50:15:e7:76:ba:f1:fd:
61:45:aa:43:1c:cc:35:14:cd:34:74:a8:22:79:43:d4:e6:f3:
e7:65:0c:72:61:78:6c:6e:78:88:9c:2b:3c:f0:7c:b4:e9:5e:
8d:b2:40:a1:90:dd:06:1d:79:3d:62:c4:7c:04:02:e4:44:f3:
ef:1b:91:a6:64:97:b5:70:a0:d4:b9:ba:e5:ab:2e:aa:31:fd:
3d:9b:ff:23:42:b6:34:fb:ed:70:3f:64:01:62:bc:dc:82:d4:
46:86:ae:21:99:e1:61:f9:26:63:e7:95:16:03:dd:f4:c1:01:
c1:bd:1e:6b:8a:a7:92:60:da:30:47:46:e4:0e:e0:da:97:39:
f8:75:af:b9:18:9a:67:74:a9:42:63:5b:e9:2d:52:bd:40:71:
e4:48:21:6d:0a:72:ea:2a:0c:e7:71:b5:16:16:13:f1:36:a1:
b8:ab:1f:49:0f:10:ec:e7:ea:04:2e:6e:e3:4f:b6:75:5b:f9:
26:4b:b7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:47:06 2025 by rpki-client