Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30974e34-2e38-47cd-969e-6fcfc4fd6dc8.roa
File: 30974e34-2e38-47cd-969e-6fcfc4fd6dc8.roa (raw, json)
Hash identifier: 5Dmri8DBJF1pJD4Gf5S8rO+7BTIo1o79LYH5Dtzz5kI=
Subject key identifier: 23:CF:AC:EF:6A:5B:6B:CB:E5:8D:75:04:56:D6:ED:75:50:16:D4:DF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 09089DEB29F88B9E9AD73DB82C61D8222567BDCE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30974e34-2e38-47cd-969e-6fcfc4fd6dc8.roa
Signing time: Tue 31 Dec 2024 00:00:00 +0000
ROA not before: Tue 31 Dec 2024 00:00:00 +0000
ROA not after: Tue 04 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 16.141.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:08:9d:eb:29:f8:8b:9e:9a:d7:3d:b8:2c:61:d8:22:25:67:bd:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 31 00:00:00 2024 GMT
Not After : Feb 4 23:59:59 2025 GMT
Subject: serialNumber=bb1cee4289c6b06e8b9d7ceb172a5ca9283efb1e7eed988628accfdd0d621a89, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6d:7c:6e:ec:72:a2:e2:d1:6d:84:a4:9c:19:
15:c1:c3:ee:3d:b0:9c:9c:34:d6:1b:db:26:6e:b1:
c9:ea:3f:90:d3:87:f4:69:4c:b5:a5:0b:80:b5:7f:
3d:03:69:f1:21:42:1a:85:d0:37:c1:95:b0:db:b1:
ac:b7:7e:89:53:0b:8d:0b:2e:f2:a4:89:ea:55:35:
1f:2e:61:d8:22:40:ea:52:de:cd:0d:12:89:f5:a8:
db:02:8a:b7:26:60:61:39:92:f1:75:fa:61:f1:b3:
e6:d9:fc:d1:a2:89:53:bb:32:fe:65:e1:11:c4:b3:
8e:71:96:a7:a2:57:92:3b:17:77:a0:86:2a:dc:2b:
e9:e2:d5:b7:76:cb:b2:e8:51:33:bf:c8:1d:8e:ff:
4b:c4:fa:15:f5:6c:3b:b5:5a:f7:bd:52:9e:7a:f9:
d3:73:22:de:d2:9d:24:9c:2d:b8:3b:ee:40:17:c1:
d0:31:eb:27:76:7b:ce:54:a5:d1:33:34:91:af:db:
2c:45:74:8a:97:76:ef:7f:53:b1:a1:5f:29:9d:cd:
ac:a7:53:28:11:19:a3:d0:6b:0a:cb:04:c8:7b:06:
c4:af:b0:21:ed:10:4e:f6:42:84:8e:60:28:5d:48:
57:c6:50:30:b9:9e:69:7a:f9:e6:27:ab:6b:cf:8e:
c8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CF:AC:EF:6A:5B:6B:CB:E5:8D:75:04:56:D6:ED:75:50:16:D4:DF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30974e34-2e38-47cd-969e-6fcfc4fd6dc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.141.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2c:0d:61:3e:ab:d2:0e:6a:7d:a2:79:98:19:01:0b:0d:5d:0f:
4e:c8:e9:2b:c5:3b:84:5e:62:11:1f:92:01:dc:69:fa:60:66:
db:a5:98:26:3f:f5:33:12:8a:c8:88:b7:35:ff:db:35:da:42:
d0:6c:70:60:de:20:6f:c2:ef:ac:78:6c:57:c0:80:9a:43:ff:
95:75:39:58:86:b1:68:8e:77:42:17:f4:ac:08:de:be:38:11:
b9:06:9e:ae:bc:91:ea:66:b0:5f:2e:1e:a4:56:38:34:ba:4e:
ef:c4:af:a8:ad:45:b0:1a:3e:d6:ad:fb:71:c3:c5:0d:d9:9d:
9d:ea:39:b4:55:04:09:7c:56:e6:95:98:e7:45:a6:80:30:27:
15:43:a4:4a:bf:ec:6e:93:08:b6:fb:6a:00:7d:e3:9b:6b:f0:
89:55:63:2f:c6:e1:1f:c3:e3:54:83:2e:c9:90:ed:70:ff:59:
b9:9b:5d:20:b1:78:ff:85:81:94:85:39:3f:08:1f:a9:29:f9:
08:27:3a:95:c0:ea:c4:68:c9:6f:c4:4c:ad:58:14:25:df:c5:
f5:09:34:4f:a7:a9:4d:fb:f5:88:9b:2a:19:65:9a:aa:e3:61:
9b:47:3b:8b:6e:1f:4b:8c:71:d3:f1:dc:d0:a5:3a:0b:33:93:
84:bc:9b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:06:41 2025 by rpki-client