Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ad471bc-2bd8-48f7-93ff-4afa18618192.roa
File: 2ad471bc-2bd8-48f7-93ff-4afa18618192.roa (raw, json)
Hash identifier: d/3X6XZ1O02zaxzMJWxtc58EzIqR1oBvOoaeTyv6iJ4=
Subject key identifier: 8D:D7:5C:44:4C:2E:49:6D:E9:22:A8:94:55:68:89:98:BE:B2:FB:42
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 27557407605FA95A68AD5072B0788F54FB439805
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ad471bc-2bd8-48f7-93ff-4afa18618192.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.151.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:55:74:07:60:5f:a9:5a:68:ad:50:72:b0:78:8f:54:fb:43:98:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3d:a0:0b:a9:8a:f1:ae:10:59:7e:3c:8a:c7:
a2:f6:80:c5:41:f7:77:06:f4:25:e3:5a:33:5b:db:
a7:1a:2e:45:e1:72:da:8d:91:6e:34:37:de:7f:10:
98:e5:28:2c:47:29:48:93:7f:8b:67:2e:33:d6:98:
ba:3f:a3:a2:90:99:8a:fc:f5:59:24:94:65:90:dc:
0a:43:d1:33:55:b1:2a:17:f9:1a:a6:7c:05:27:28:
40:86:e9:0c:f9:0c:ee:ee:34:c3:11:b2:24:5c:a8:
6c:ee:53:96:b8:df:1d:cf:2e:82:ec:b7:25:f3:f2:
2e:c3:2c:a7:8c:c2:63:d1:da:1e:d8:24:5c:16:f7:
f3:c0:f5:80:86:d6:58:e5:2a:4f:f6:ba:b3:62:fc:
1d:52:11:df:e7:ec:52:dc:ca:7f:56:95:42:3e:d2:
12:b4:bd:6b:f1:09:e4:f7:2e:99:ef:43:e0:51:8a:
93:cd:52:73:33:f1:a5:f2:c3:37:45:e3:98:25:af:
16:5f:cb:80:f6:84:8e:b9:41:58:57:36:d9:86:56:
42:ce:26:e0:80:fa:4b:83:66:7b:b8:d0:9f:f4:79:
5e:36:de:07:8d:8a:ae:db:d7:6d:43:7d:f7:a6:cf:
55:3f:ae:67:28:22:ac:08:c4:e8:50:0d:56:33:9b:
75:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D7:5C:44:4C:2E:49:6D:E9:22:A8:94:55:68:89:98:BE:B2:FB:42
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ad471bc-2bd8-48f7-93ff-4afa18618192.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.128.0/18
Signature Algorithm: sha256WithRSAEncryption
13:45:b7:d4:46:11:a1:7c:88:c9:d1:30:c6:49:4d:27:95:69:
50:0c:ca:80:33:c5:cb:c0:92:05:3e:ad:d0:ba:ad:db:1c:4c:
1d:8a:6b:63:f0:a2:ee:84:48:53:8e:a2:d7:da:54:dc:5c:e9:
2e:f0:f4:de:6e:3c:06:c4:f7:12:79:1d:75:fd:78:c3:2a:74:
55:a6:93:f5:6a:c5:0d:83:6a:d1:ac:0e:76:38:1d:dd:e7:4f:
ad:bd:fb:3b:7e:3a:27:2e:49:52:dc:83:80:89:04:76:f3:7f:
03:74:0f:86:d0:b6:0a:5f:8b:12:57:93:6f:b2:d2:a5:17:b0:
4e:ef:81:7a:3b:2f:76:d9:1e:60:bc:cc:16:0c:7a:ee:88:aa:
d6:b5:68:5f:3a:a6:be:a3:a4:f4:38:10:7a:19:8c:94:10:b6:
c5:af:dd:7c:c5:e1:22:78:81:62:dd:d8:67:84:d8:a7:8f:d5:
23:d8:f9:f8:aa:bb:6c:ea:12:80:ed:1b:08:05:42:7b:bd:60:
20:b8:7b:1a:48:da:9e:fc:81:54:75:3e:bd:c8:82:91:8c:f4:
5a:05:fe:b7:2a:3e:6d:87:20:37:fc:c4:ea:54:f7:b2:a4:b5:
9d:e1:f2:44:a9:81:60:3e:a3:d6:7e:9c:aa:71:a9:d3:a6:e0:
18:20:22:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:21:01 2025 by rpki-client