Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3021f3c3-4ff7-4421-8458-f8e770a2d756.roa
File: 3021f3c3-4ff7-4421-8458-f8e770a2d756.roa (raw, json)
Hash identifier: GMViyWay7ZqBQDmgrGLmlMVr+5gLCKiEb5UrI5IVM+k=
Subject key identifier: AE:D6:BB:73:D1:55:2C:22:EF:09:29:C6:6F:BE:DD:04:FF:2E:C7:45
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 12C84235A7883AFEE6420B0B652ADEB8820A7BE3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3021f3c3-4ff7-4421-8458-f8e770a2d756.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.25.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:c8:42:35:a7:88:3a:fe:e6:42:0b:0b:65:2a:de:b8:82:0a:7b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:70:ae:f1:4e:c2:0d:c3:f4:40:88:fc:e5:f0:
22:b3:fc:dc:69:f9:63:52:37:ea:6e:8a:4c:82:df:
25:d5:0d:5b:67:30:30:4d:a1:a4:6a:4f:81:91:73:
7c:66:03:77:99:8b:25:15:44:af:eb:4b:18:68:ef:
02:70:81:b2:b6:5c:59:63:dc:20:40:61:71:47:94:
23:ef:3c:f6:2f:8f:48:1a:ee:56:dc:3f:ff:d9:e3:
5a:f3:b4:cd:f6:b4:9d:29:72:21:f2:0d:c7:00:f4:
94:77:e9:d8:a1:3f:09:21:18:7e:a2:59:91:9d:1e:
44:fc:34:6a:0d:63:ba:d2:74:99:b7:5d:9f:5e:b4:
ff:2c:31:47:56:81:66:35:63:b3:71:72:93:ec:27:
b6:d2:2f:84:89:bd:5d:b3:30:63:ca:b0:c2:9d:07:
35:e4:6b:a9:30:fd:7c:0e:d5:fb:24:7c:35:1c:2b:
b4:35:86:d3:12:e8:2f:32:b8:09:a1:28:3c:5b:8d:
96:6a:8b:a9:3a:80:cb:b3:9a:47:89:da:6a:d7:42:
6e:62:e0:a6:bf:ec:11:14:82:fd:b5:c1:ae:ea:be:
c1:a9:48:1b:44:4f:df:c2:c1:19:b6:4c:87:02:0b:
05:69:b3:5d:4e:98:2c:f9:de:b1:9e:ed:58:aa:2b:
05:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D6:BB:73:D1:55:2C:22:EF:09:29:C6:6F:BE:DD:04:FF:2E:C7:45
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3021f3c3-4ff7-4421-8458-f8e770a2d756.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.25.79.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:83:b8:8d:49:76:26:54:b9:56:45:fa:19:cf:cd:d2:7b:1e:
bb:f7:26:b1:5f:49:6c:77:9a:fc:65:4f:50:ef:a6:34:12:08:
9c:2e:4d:f1:b8:ff:6b:71:1e:d3:b4:77:e7:a5:a3:f3:98:9a:
b3:98:d1:cb:06:44:17:0d:a1:46:81:14:e5:b0:a3:38:bf:fe:
ab:89:ea:02:81:37:5e:b3:ed:bd:69:51:78:3c:0c:89:5f:a9:
c1:ea:5a:ec:22:2f:7f:fc:96:6e:32:91:42:b9:af:8b:05:94:
08:d7:2e:c6:10:56:09:d1:29:69:62:7f:02:4a:71:48:02:99:
97:0f:d4:ad:a6:b6:c0:88:3b:4d:ee:b2:77:17:59:85:34:bd:
bb:53:2b:41:35:de:8d:dc:d6:97:dc:ed:28:64:d3:4a:38:1c:
94:79:4f:e0:89:6d:65:e2:ff:0b:b7:34:cc:7d:53:fe:be:24:
70:3e:89:71:13:25:f5:c9:7a:63:5a:89:32:65:2d:e1:8b:6a:
45:73:01:21:45:7d:4b:05:6e:06:9a:98:30:f6:8d:ef:63:09:
6a:1f:80:e3:87:25:90:39:f8:d3:5a:72:98:0e:84:e3:2a:78:
21:c6:d6:db:8b:20:b2:e8:94:70:7b:e4:e3:f1:32:5b:cc:bd:
b8:67:44:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:26 2025 by rpki-client