Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/315c982f-2f15-4858-b7a7-fe06b85bb239.roa
File: 315c982f-2f15-4858-b7a7-fe06b85bb239.roa (raw, json)
Hash identifier: sGT5s+7B22l5D+TW1SDfG8iN8Dlz7cvKicJkMzbOlk8=
Subject key identifier: 5C:6C:0A:B8:2A:E3:E1:5B:8F:DA:92:A9:47:0A:61:4E:F5:E2:75:53
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 227209469F743E55F339104220A7AD92AA4BCAF5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/315c982f-2f15-4858-b7a7-fe06b85bb239.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 16.59.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:72:09:46:9f:74:3e:55:f3:39:10:42:20:a7:ad:92:aa:4b:ca:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: serialNumber=95ed49953148996a5a952878e357c9cc36bde96ce69c387a7479e49e0cbf9acb, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:09:86:45:08:ab:aa:42:f6:1b:45:ab:4a:8f:
16:ab:c0:cd:5c:ba:11:5f:1b:ea:60:17:04:f7:8c:
66:32:d9:04:ee:fd:6f:c2:8e:cf:3b:e0:da:d0:5f:
b4:05:5f:cc:42:ac:98:49:9e:c7:db:5c:6c:70:25:
0f:8e:cc:1f:6d:ef:0e:1a:20:67:20:3f:db:90:8f:
bd:98:4d:9e:18:44:12:19:9c:be:cd:bc:86:d7:d5:
51:ab:3a:9f:31:ba:d7:06:f9:1a:b1:29:64:02:fd:
47:4f:91:5d:21:f8:d0:5d:9c:a4:81:8a:1d:8d:ea:
a5:de:ed:70:6d:a1:c8:56:9a:41:9e:76:b7:b5:29:
2b:ac:96:d6:f9:01:fe:c0:5e:3a:5e:eb:95:b9:a4:
d7:7d:1b:89:38:f6:4a:49:17:ac:83:6a:bd:21:01:
c3:41:84:23:85:0a:9e:7b:ff:87:d8:f1:38:4a:2e:
fe:d7:18:ba:06:c9:dc:9f:94:57:61:4a:04:12:c8:
1a:0f:32:cd:b9:80:72:39:8c:c0:13:b8:8e:d5:65:
61:61:65:18:c8:fb:e5:95:40:76:68:9e:75:ab:20:
fc:58:a6:eb:4f:a2:f9:4f:b2:98:cd:2d:1d:91:ac:
67:a5:e5:2e:ff:92:fa:3e:15:8e:ba:cd:4d:06:0c:
bb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6C:0A:B8:2A:E3:E1:5B:8F:DA:92:A9:47:0A:61:4E:F5:E2:75:53
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/315c982f-2f15-4858-b7a7-fe06b85bb239.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.59.0.0/16
Signature Algorithm: sha256WithRSAEncryption
85:f1:5c:6c:cf:42:b1:e8:a0:1d:58:0a:ae:0c:cb:c0:83:78:
fb:76:40:26:04:df:3f:21:d8:8c:2b:14:13:61:6e:4c:21:07:
7f:08:48:0c:3f:fb:e6:6b:a9:ab:a3:f0:03:2c:4e:98:00:f9:
91:22:46:5b:09:c8:40:dd:81:f8:69:b4:62:bb:14:2f:17:c2:
42:ab:26:7c:0b:ff:e4:d2:2d:f6:cb:7e:33:6e:f5:a2:c5:42:
e7:7f:8a:23:34:c3:25:4e:82:f5:2d:6d:59:57:e2:ce:d3:5f:
a3:fb:c8:73:8f:06:12:d7:88:78:ef:6f:a3:4d:23:b1:17:94:
7f:85:53:d1:a7:5a:11:1f:f0:c0:ca:a0:9b:ea:23:dc:b9:f6:
bf:0f:8c:52:7b:f6:f4:dc:ba:2a:dd:50:92:0a:a1:dd:49:bb:
8b:ea:2d:a8:5a:de:c7:39:95:9c:d3:18:62:63:c4:72:b7:80:
41:45:ad:63:b9:40:b7:e5:8d:2f:b2:84:fb:ef:b0:47:40:ca:
32:13:d4:c7:e0:ed:ab:74:c4:09:8c:09:91:4d:66:77:43:39:
d3:66:9c:81:92:10:bf:6b:85:be:eb:1c:d5:7f:b4:04:17:00:
6d:cc:47:13:0b:0e:12:8b:4e:59:33:de:19:06:c7:a4:48:ba:
9d:ca:54:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:48:53 2025 by rpki-client