Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34077b26-ea72-443e-a9a8-70a64af2e936.roa
File: 34077b26-ea72-443e-a9a8-70a64af2e936.roa (raw, json)
Hash identifier: NUfX9ltzAt/qZ5axIU7dqqaJ028arVULZQ4grHR1R68=
Subject key identifier: C0:F1:98:A5:47:88:22:DF:FF:8B:14:8D:6B:5F:1D:A9:16:47:41:9D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0C24F5ED74D820B54057129CB8EF953B2D556849
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34077b26-ea72-443e-a9a8-70a64af2e936.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff4:5000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:24:f5:ed:74:d8:20:b5:40:57:12:9c:b8:ef:95:3b:2d:55:68:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5e:49:86:4a:90:c9:c9:90:b6:f2:cd:ac:cc:
17:db:8a:e5:00:0d:61:58:1f:93:7b:20:f4:17:47:
d3:bd:4f:b7:47:41:bd:0d:4e:94:c0:bb:4b:8c:9a:
96:8b:18:57:1a:01:83:90:79:75:82:73:d5:1f:5d:
e1:4d:66:ab:b4:70:45:f1:c0:52:fe:a7:35:24:84:
8a:1b:a9:08:3e:52:52:23:79:57:45:4a:d7:1a:66:
03:24:94:f4:9f:89:47:8a:89:c4:b0:f9:77:9e:68:
3e:36:dd:a3:b0:9f:b3:6d:d1:7b:8b:8b:f2:80:8c:
05:f0:26:65:3a:81:fe:15:d7:3a:d1:32:1a:02:35:
89:99:8f:d6:03:10:ce:da:b1:fe:e9:ae:ce:c7:6a:
47:ab:bb:d4:75:bc:8b:5d:ff:1d:24:99:2c:df:b4:
78:72:ce:e4:38:68:92:0a:f9:c3:6c:d8:4c:6d:50:
96:ff:56:ce:25:f3:b2:ce:34:d3:ca:65:40:b6:f6:
c9:c0:2b:1a:07:8b:8e:db:1d:51:74:db:e2:93:b2:
3b:3e:d9:56:86:98:72:a6:a4:4c:ca:d0:64:c2:23:
4c:c9:07:0c:11:03:ec:c2:7b:73:81:36:cd:06:a7:
2f:c4:51:7d:d0:37:f2:01:4e:81:bc:12:d4:08:84:
59:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F1:98:A5:47:88:22:DF:FF:8B:14:8D:6B:5F:1D:A9:16:47:41:9D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34077b26-ea72-443e-a9a8-70a64af2e936.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff4:5000::/40
Signature Algorithm: sha256WithRSAEncryption
ad:d2:b2:2b:5d:ed:e1:5a:e0:c2:e9:6d:22:b5:c2:26:3e:eb:
da:d7:5f:c9:18:fd:e7:dd:7b:76:b6:8c:db:ae:9c:56:45:97:
9c:66:d1:ad:ca:6e:a3:c5:16:59:e4:a4:8d:1d:bf:56:d2:1d:
21:b3:80:9b:ff:9a:c9:e6:2c:03:4b:3a:a0:5d:e7:93:3e:08:
52:10:c4:49:b6:50:9b:fa:18:69:88:e1:77:57:c6:52:ef:1b:
9f:28:d7:3a:f8:8e:b3:35:36:5a:01:a4:cf:04:56:40:a9:5b:
e7:2d:6c:73:0b:97:4d:ce:25:f5:07:2e:af:41:b2:eb:98:85:
64:29:c3:1b:7c:1a:52:60:56:11:8e:c6:cf:8e:a6:8e:a0:4e:
fb:c9:6a:09:36:61:62:1d:f4:42:92:06:f2:66:af:0b:0b:73:
35:99:02:bb:ce:68:a0:78:f4:62:33:26:12:bf:41:3f:8f:c3:
55:9b:40:c2:b8:76:e7:a3:8f:a4:0a:d6:f8:e1:82:42:0c:d4:
52:84:ca:83:8e:d4:14:b2:18:b9:c6:bd:b2:43:1d:d4:1c:db:
9e:40:ce:b4:c4:ac:03:32:f0:4d:8f:74:94:35:7a:a1:3e:ec:
2c:90:b2:21:0d:25:1c:8b:44:bc:c9:29:ac:3c:88:70:15:ab:
f7:b4:bd:c0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:51 2025 by rpki-client