Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fe5b7b9-f84a-4eee-a39c-489dc754f0b7.roa
File: 2fe5b7b9-f84a-4eee-a39c-489dc754f0b7.roa (raw, json)
Hash identifier: JRq/GxVxI5j79zBNKHZvyBFE1ATfWTIakkB0paJ+koc=
Subject key identifier: 99:2F:AC:AD:B2:7F:F2:07:6A:32:DF:24:16:8B:3C:E6:F3:99:08:14
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4425EAFF8328721F75402511CBC443A9E7FC0229
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fe5b7b9-f84a-4eee-a39c-489dc754f0b7.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 128.21.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:25:ea:ff:83:28:72:1f:75:40:25:11:cb:c4:43:a9:e7:fc:02:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:06:71:a2:97:c3:cb:e8:2f:2a:f8:69:e2:a3:
7e:9a:50:75:92:c6:3e:04:7f:92:94:e4:bc:af:c3:
c7:54:39:bb:a3:f8:80:fb:4e:ac:0b:53:1d:39:db:
9f:82:2e:11:9c:96:6b:c7:fd:e6:ee:71:9b:b5:80:
e5:1c:cc:5d:b3:31:bb:2b:8d:a8:8d:b5:aa:a4:9f:
f6:9c:09:85:1b:9c:87:8f:8b:40:e9:be:61:f1:c6:
a7:1b:7d:90:66:8b:34:01:1e:c6:06:c7:a3:24:3a:
aa:23:d3:ef:25:df:ff:64:bf:86:19:f4:ce:bf:7f:
b2:26:72:25:6e:49:55:75:ec:51:2a:fb:c0:8a:48:
ac:c8:53:cd:51:e5:9a:df:87:49:40:d0:1f:bb:97:
c6:d3:04:e1:10:9b:96:3e:0f:ec:83:b6:d3:59:0d:
35:bc:90:f2:21:a7:c9:52:6f:1b:73:0f:9a:06:75:
b9:fc:05:7e:64:8b:3e:27:82:41:ed:73:25:fe:2e:
ab:d2:c6:7c:17:80:1c:b5:d6:32:9b:f8:a0:b4:a6:
cf:c2:50:4b:1f:a2:1f:76:9a:da:34:05:79:2e:0b:
a4:f2:e3:11:2e:ec:28:95:88:17:54:c5:86:c5:a8:
ae:74:21:d7:0c:ff:ba:2d:2a:76:19:6f:63:89:4d:
33:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2F:AC:AD:B2:7F:F2:07:6A:32:DF:24:16:8B:3C:E6:F3:99:08:14
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fe5b7b9-f84a-4eee-a39c-489dc754f0b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.21.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9d:3a:aa:73:44:6a:3f:38:fe:d0:d3:d6:80:bd:22:ff:dd:f6:
47:d2:45:9d:ed:6d:31:4c:ec:41:c9:43:f8:69:ba:df:7c:e7:
46:3b:58:48:c9:0c:a5:d4:bb:98:52:a8:e6:3c:e4:8d:52:ff:
e0:35:b2:dc:89:26:29:07:0b:10:53:c7:34:2e:a6:a3:c0:4e:
64:8d:3b:cd:70:9d:98:a3:40:c8:d1:00:67:97:48:07:42:89:
04:f7:9d:d4:35:d9:ba:54:09:96:84:bf:20:b2:78:6b:e7:b7:
2c:f2:ad:7a:aa:0f:b6:9c:0b:79:40:eb:01:d2:9c:3b:fd:3c:
d8:32:3b:46:42:c2:b8:16:b0:2f:92:77:42:18:b7:b9:43:ab:
3f:e1:dc:47:ce:de:b6:fb:33:26:4c:9d:1d:02:8f:00:e2:2e:
5f:33:48:9e:4f:27:e3:34:81:ac:79:3b:0b:be:16:7b:15:fc:
5c:49:c3:e0:26:62:a6:a2:e6:c5:06:24:ec:35:ab:75:51:4f:
22:19:b9:d2:ac:a7:1f:33:dc:20:45:63:e4:ac:cd:50:3b:0c:
53:3a:af:f0:51:65:98:bb:20:da:ac:87:4c:87:12:85:c9:72:
7b:7d:0d:0a:73:cc:f8:40:a7:4d:76:e2:ac:61:43:8c:f2:f0:
8c:d4:f2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:17 2025 by rpki-client