Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c00e879-6555-4a17-9915-98bb20968bae.roa
File: 2c00e879-6555-4a17-9915-98bb20968bae.roa (raw, json)
Hash identifier: ZJSULwOJQsD1OA00E34KeAXaUgVGQRGqeshkpdgzDWM=
Subject key identifier: 54:D8:B7:F1:D1:27:4A:FB:D3:33:0E:B1:7F:6C:A9:D3:5B:A1:6B:CC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5035E464748D91B8DD27DD0B6346EC2C21CE2088
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c00e879-6555-4a17-9915-98bb20968bae.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 56.9.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:35:e4:64:74:8d:91:b8:dd:27:dd:0b:63:46:ec:2c:21:ce:20:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: serialNumber=e091c4c239c7c6b30fc08fe3ccb8834a0fee55c36b0f2515fc2c905a69b758f5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cd:91:80:29:4f:e1:ac:93:de:89:c8:ee:70:
43:8f:cf:70:10:25:7a:1b:c8:5f:55:57:f2:42:68:
ee:50:19:4e:de:01:eb:16:29:b8:6a:d1:9e:24:46:
a8:45:30:c4:ff:47:84:b4:65:fe:1c:44:ca:82:b6:
5f:5a:78:55:e6:c2:d2:4a:22:da:52:62:8b:7d:da:
3d:34:24:86:aa:a9:3e:e9:1e:3f:7d:5b:91:40:fc:
75:af:fe:f0:f0:f1:79:72:32:b3:b7:0e:e3:a5:2c:
f6:b9:b9:cf:84:ef:52:51:eb:17:e0:43:e0:1e:26:
3e:b5:71:53:70:f1:be:a6:21:8c:56:7a:24:05:49:
da:c3:39:25:84:2b:af:7a:49:2d:d8:c9:81:e6:0f:
59:11:c7:da:3a:6d:65:2e:1f:4d:d6:a1:95:8e:9c:
4b:80:dd:4b:75:12:3d:39:e5:22:71:11:30:55:79:
cb:dd:84:6e:3b:d7:75:55:0a:c4:ec:00:ea:36:9e:
9d:28:5c:a1:76:02:84:95:7b:2c:23:dd:64:3a:65:
39:b2:07:c9:f7:3c:37:1a:f7:08:c9:de:c9:34:31:
15:65:2c:92:93:88:16:4c:de:73:24:b4:2c:c9:d6:
cc:a2:4d:ae:be:6a:2b:e2:d0:96:70:67:39:d8:fe:
a8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D8:B7:F1:D1:27:4A:FB:D3:33:0E:B1:7F:6C:A9:D3:5B:A1:6B:CC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c00e879-6555-4a17-9915-98bb20968bae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.9.0.0/16
Signature Algorithm: sha256WithRSAEncryption
94:27:18:6c:77:39:13:a2:34:4a:75:5c:0a:c3:bb:23:ab:f5:
05:1b:09:54:ab:88:e7:4c:a2:dd:ff:27:f4:95:7d:88:37:7b:
ff:2e:64:ee:93:73:a1:0f:b0:3a:8b:6d:f4:39:a3:0a:fc:3f:
e2:66:75:c9:83:d5:64:f2:52:0a:0e:f4:93:00:61:bf:ca:b0:
bb:e9:85:36:ac:31:9e:b2:0a:87:e4:1c:f4:36:1d:88:b1:5c:
09:fd:06:ae:5b:4a:48:01:22:65:9f:2a:aa:73:fb:64:69:ce:
b5:11:87:d8:d0:2a:f5:95:6b:72:10:38:21:19:ba:bf:6e:33:
39:7a:a7:1e:68:22:87:38:89:3c:5a:ee:56:2a:0f:2d:2f:8b:
d5:38:4c:32:43:a1:03:83:c2:68:48:56:1b:2c:f1:4f:fd:b1:
32:78:30:b7:81:93:fa:1c:2c:f8:1e:c6:e0:a5:54:c7:fa:3a:
11:82:9d:ac:93:8c:cc:a3:94:97:8b:e3:d2:37:d5:11:ca:47:
52:5a:7e:26:ef:eb:27:e7:8e:cb:79:d6:4a:cb:04:19:42:e4:
0d:dc:fe:7b:72:d9:e8:32:b4:36:b7:55:bf:36:1b:a7:1b:b9:
4c:99:ba:02:a6:00:89:14:c9:ae:2f:cd:fe:a0:81:84:61:85:
6c:82:20:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:11:32 2025 by rpki-client