Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33538dc8-585c-46a1-8e85-1371eb4df57a.roa
File: 33538dc8-585c-46a1-8e85-1371eb4df57a.roa (raw, json)
Hash identifier: K3W1TS+tNhwXduPyRlhCKi/I8NCU+BKyQtCnZ9Fcqbk=
Subject key identifier: BE:E7:EB:DA:E7:FB:64:DD:85:B5:F5:2D:28:AD:62:96:34:A2:61:D7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 083FA720589940C56DA61E926844DD234AFA9CCF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33538dc8-585c-46a1-8e85-1371eb4df57a.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 56.246.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:3f:a7:20:58:99:40:c5:6d:a6:1e:92:68:44:dd:23:4a:fa:9c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=7344ce45bef3598872975a83d5c6368c65ee44e7d85ddaa931b3beef213cdd33, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:75:3e:a9:fe:b5:85:5f:f5:4d:3d:e2:64:c3:
02:03:3c:f6:30:ba:c0:45:c9:ad:86:4a:da:07:4f:
28:75:e8:45:ce:ee:24:23:4d:75:c5:42:16:10:96:
e2:00:15:33:d9:c8:98:24:f6:6c:66:2c:a2:a4:07:
9c:2a:6c:2e:b1:2e:9e:0f:8d:8f:3a:12:90:5a:30:
e0:5b:6a:28:a9:21:e1:a3:5d:f4:a2:8b:59:e2:e8:
f3:1a:6f:8e:18:dc:3a:af:91:8f:1d:43:d5:4d:a2:
47:bf:a9:dc:29:75:85:44:b2:7b:2c:a9:fc:e3:e5:
0c:9d:b4:1e:e3:87:a2:f2:71:ee:d1:50:22:b4:78:
68:0b:94:df:54:59:13:18:b5:2e:51:6f:1f:d0:2b:
ca:eb:05:28:49:a5:6b:11:3e:00:72:fd:6d:44:9a:
98:f8:97:4e:91:a1:24:9c:fc:ff:3e:49:6a:7d:c6:
e3:11:47:4a:df:b8:5e:09:65:fd:00:d7:0d:ae:6d:
e4:8b:be:00:8e:a7:5f:5c:ed:7b:3b:7c:f9:50:e4:
74:c1:2f:ba:5b:fc:4e:8e:e2:78:65:25:f4:19:d9:
62:20:bd:88:a1:2d:c3:8f:c1:66:39:2c:1d:71:ab:
25:06:eb:ae:bc:96:b1:59:a2:28:9c:77:86:3e:bd:
bb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E7:EB:DA:E7:FB:64:DD:85:B5:F5:2D:28:AD:62:96:34:A2:61:D7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33538dc8-585c-46a1-8e85-1371eb4df57a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.246.0.0/16
Signature Algorithm: sha256WithRSAEncryption
92:4d:ef:b3:cb:40:85:1f:2d:8a:fa:fe:85:a3:fa:f0:40:2d:
83:5f:74:ab:1a:58:a5:47:5f:6d:e3:da:c8:2b:d2:d5:7d:2d:
7c:8c:4d:bd:70:b1:b5:62:f9:df:28:fa:96:02:d9:e0:12:05:
74:7f:f8:31:f5:4b:a8:6a:12:b8:85:09:53:d1:73:d0:08:29:
11:c7:04:73:de:93:09:fd:3b:30:46:69:68:6f:6a:85:91:11:
2d:00:6a:82:60:f0:55:9a:9a:64:bc:d7:be:3d:3a:3b:0e:ca:
aa:93:48:70:a1:aa:97:63:f0:05:fb:4f:df:78:58:bc:96:41:
ad:eb:f4:d5:8b:57:53:d8:90:23:3a:4d:e1:0c:58:5d:2b:97:
14:a9:06:77:15:d3:3c:c7:b5:06:50:95:46:f1:d9:a3:9d:7b:
d7:ca:9b:be:dd:fc:06:11:ab:51:0b:b2:fd:dc:2c:b1:f6:c3:
d0:c5:4c:4a:fc:d6:af:49:41:f3:e8:0f:2f:75:57:d1:88:4a:
38:8b:49:ab:88:b1:63:73:79:0e:43:3f:a1:d7:f0:2a:a7:07:
76:5a:90:90:5d:5f:85:34:01:9d:23:0a:46:ed:a1:61:f7:af:
55:9e:8e:06:fa:07:95:24:b5:bc:6c:0d:35:72:8d:3e:ce:90:
cd:c9:e8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:58:25 2025 by rpki-client