Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26fc5cbd-9c67-43ed-b70b-2db369c385be.roa
File: 26fc5cbd-9c67-43ed-b70b-2db369c385be.roa (raw, json)
Hash identifier: oC2OYHSAbWkmeh2PtbXgCBke46MqBrTFHNAhpNvW7OQ=
Subject key identifier: A7:00:5C:CE:35:97:88:9A:8F:BE:57:4C:8D:A8:C0:4C:16:CB:B6:7A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3A9EA10C303DCD77F8517D328F88DBC9F2B89D6C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26fc5cbd-9c67-43ed-b70b-2db369c385be.roa
Signing time: Wed 25 Dec 2024 00:00:00 +0000
ROA not before: Wed 25 Dec 2024 00:00:00 +0000
ROA not after: Wed 29 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 128.11.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:9e:a1:0c:30:3d:cd:77:f8:51:7d:32:8f:88:db:c9:f2:b8:9d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 25 00:00:00 2024 GMT
Not After : Jan 29 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d5:6a:4b:8c:7f:57:df:6c:b3:48:43:f1:3d:
8c:56:4e:d7:0e:9c:f3:b8:21:e3:64:d4:ce:79:a0:
e8:a9:b0:9e:17:63:34:a1:4d:1f:f6:44:0d:f0:1b:
74:22:40:28:af:fc:0a:a6:17:8f:03:e0:cc:5c:84:
1c:4a:d1:85:e2:0b:96:27:d4:49:fa:6e:c1:14:5c:
3e:ed:79:a7:5c:fa:d6:33:d8:50:37:12:47:a4:5b:
02:24:80:37:5f:b4:03:c5:27:e7:c6:ad:d9:43:d2:
3b:a3:81:62:b6:76:86:4e:de:a4:a8:6e:67:44:f3:
23:7f:6d:a6:b5:27:f4:f7:86:4e:be:d2:fb:3f:7a:
d4:f0:c0:f6:b9:8d:6a:4e:b9:90:11:60:52:2d:db:
84:cb:de:9d:6b:2c:8c:51:61:23:18:e8:a1:2a:c0:
08:54:4b:8c:42:d4:93:b0:56:5c:bb:54:f3:5f:1c:
71:24:62:43:d3:c6:ff:d7:db:4b:ba:31:1a:0e:5e:
61:65:8a:e4:62:39:1b:5f:b4:dd:6f:9d:2b:03:ca:
b0:e6:a7:ad:16:00:c5:7b:1c:81:ea:78:e9:01:9f:
0b:ae:8d:cf:b8:c7:61:37:ac:de:2d:b0:89:80:2a:
88:57:bf:7e:bb:20:8b:f2:d6:24:97:20:55:29:6d:
c8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:00:5C:CE:35:97:88:9A:8F:BE:57:4C:8D:A8:C0:4C:16:CB:B6:7A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26fc5cbd-9c67-43ed-b70b-2db369c385be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.11.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a5:31:a8:81:1c:db:fd:8a:a6:e5:e0:53:8a:09:e1:45:09:c5:
44:5a:8a:7f:7f:f6:11:28:37:1a:20:e3:ac:d4:12:70:0f:a5:
66:74:26:7e:44:b2:c5:b9:ae:4d:95:63:82:41:23:22:cd:bf:
a8:a4:81:2d:ca:f9:4b:23:9f:72:e4:08:40:48:f6:3c:0e:19:
3b:5e:14:5e:c8:d7:59:29:93:8b:df:9a:2d:48:a9:90:3e:c8:
e6:d0:22:2c:ee:8c:e1:b4:73:33:5e:70:dd:c2:f1:19:1e:56:
11:94:53:63:92:f4:b4:98:09:5a:a6:86:35:bc:a6:40:81:ca:
ce:76:d4:57:30:89:e9:d4:0e:94:eb:38:da:f6:4c:b1:7b:71:
3d:46:1d:db:4e:d0:2c:59:d1:5e:c1:b1:bb:29:7e:09:2c:57:
a1:f4:0f:0b:c3:4f:57:80:83:b2:5e:b0:2a:e4:a2:16:2a:3a:
df:d7:8a:50:15:6c:7b:e7:f8:ea:de:c6:90:ca:92:1d:50:a1:
44:fc:73:14:7e:d1:e9:8a:7f:46:b6:30:d7:9b:c7:fd:93:7d:
c3:e3:16:b6:c4:63:f6:51:98:77:b6:69:d4:5b:a7:97:0c:35:
21:94:00:a4:72:b4:67:77:66:e6:68:8e:f4:f2:d0:be:50:eb:
01:30:9f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:48 2025 by rpki-client