Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b29985c-bc89-41d8-8dd1-964100b75f47.roa
File: 2b29985c-bc89-41d8-8dd1-964100b75f47.roa (raw, json)
Hash identifier: HWMnyJvddDn2gi6jlE0NrmAfVNOCSBNFqhiHG2mPqNU=
Subject key identifier: D7:38:7F:B8:C5:59:4E:0D:E0:FC:51:22:AE:F2:A8:14:BC:8E:8A:7F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 437E45CCCA2866B8765BD95F49629110801AF6F8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b29985c-bc89-41d8-8dd1-964100b75f47.roa
Signing time: Mon 02 Dec 2024 00:00:00 +0000
ROA not before: Mon 02 Dec 2024 00:00:00 +0000
ROA not after: Mon 06 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 98.130.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:7e:45:cc:ca:28:66:b8:76:5b:d9:5f:49:62:91:10:80:1a:f6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 2 00:00:00 2024 GMT
Not After : Jan 6 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:17:a2:5a:9a:f5:0e:52:0f:8f:76:11:8e:
97:1a:e8:cf:a4:86:cd:50:0b:db:0d:9d:c8:85:01:
97:42:97:4b:a0:9a:c3:0c:fe:8f:e4:b0:06:5d:fc:
5e:e9:bf:f2:b1:72:69:ae:44:83:fc:5c:5d:4b:39:
8e:65:18:8d:8c:40:ad:b8:85:49:31:f3:50:bc:60:
b8:f5:89:f2:b2:d5:94:74:7a:4e:63:f8:66:97:1b:
d8:1d:b7:d2:78:16:40:28:28:37:a4:83:9a:d3:64:
b5:13:1e:b1:38:1b:12:31:15:a7:55:14:79:15:1e:
e2:cf:8b:dd:68:30:58:b5:01:b0:b5:b0:91:63:3e:
af:f3:3d:2d:ee:d9:24:6a:73:a8:ef:df:b1:0e:2b:
90:ca:5c:6a:c0:36:ea:25:bf:30:ca:c9:a3:25:c5:
0c:03:cd:0c:68:f3:90:42:8a:d6:91:87:13:bb:ab:
09:bf:e7:a9:fe:36:4d:d8:f9:45:e4:f2:2f:55:ff:
ed:a6:b0:9e:c1:f6:48:09:b9:78:67:00:75:8d:c9:
26:2d:24:e6:bd:02:7c:67:de:be:46:38:08:ed:da:
13:cf:9b:5e:0b:b4:5d:3f:05:36:ce:7e:a6:74:03:
d0:34:69:ed:80:93:79:93:83:88:29:0d:9c:e1:3a:
a5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:38:7F:B8:C5:59:4E:0D:E0:FC:51:22:AE:F2:A8:14:BC:8E:8A:7F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b29985c-bc89-41d8-8dd1-964100b75f47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.130.0.0/15
Signature Algorithm: sha256WithRSAEncryption
44:cf:5f:ff:df:33:04:c3:dc:cc:9b:fd:f4:6a:1d:7d:dc:23:
fb:95:b3:ff:94:e7:c7:6a:ae:a3:89:88:18:9d:1b:32:1f:7a:
b1:44:5c:7c:d6:70:0a:42:cc:2a:95:25:bc:01:b0:58:97:e4:
23:4f:9e:ae:af:8b:3e:70:88:8b:8c:07:cc:80:7e:d4:56:d6:
0f:69:7c:aa:f6:e0:28:20:5e:27:7e:d4:55:b6:30:b9:19:d4:
13:e5:fd:11:61:73:71:a8:9d:9c:aa:1d:5b:33:7c:97:47:8f:
6f:26:38:e6:61:0a:8d:26:33:b9:29:44:c0:f5:ea:fc:36:74:
62:ac:70:3d:63:63:8a:0d:15:c0:1f:80:3b:11:2b:3c:be:a9:
8d:20:31:7f:d8:23:90:67:48:8c:a8:36:42:aa:de:c5:3b:f3:
3f:75:25:0d:7f:00:8e:ac:4c:ff:95:f6:a8:ae:06:f5:5a:d7:
fe:62:b1:5b:d6:9f:f0:bb:7b:4a:85:92:db:ee:e5:64:9a:78:
41:f7:bc:f8:91:1d:b8:54:4f:50:d0:40:81:28:86:af:f4:91:
00:95:a2:d3:d0:07:2a:2f:ef:68:0d:fd:4e:03:4d:49:1d:ae:
c1:55:a1:d8:96:a0:26:4d:c5:44:ac:ea:63:21:28:c0:eb:a7:
81:e7:20:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:29 2025 by rpki-client