Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c10277a-43bb-4c80-9131-a3d039f12745.roa
File: 3c10277a-43bb-4c80-9131-a3d039f12745.roa (raw, json)
Hash identifier: EXL30Bx227d8xueP6vQZf/SGbzrmmoVbEZB8IrsmqDQ=
Subject key identifier: A8:AD:9B:6F:3F:B0:B1:75:3B:08:8E:28:F2:0D:FC:B9:39:C0:D6:8F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 09C2960ED8B7C1E3304D9AAA6FF7FF7CF533229F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c10277a-43bb-4c80-9131-a3d039f12745.roa
Signing time: Tue 26 Nov 2024 00:00:00 +0000
ROA not before: Tue 26 Nov 2024 00:00:00 +0000
ROA not after: Tue 31 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 23.254.8.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:c2:96:0e:d8:b7:c1:e3:30:4d:9a:aa:6f:f7:ff:7c:f5:33:22:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 26 00:00:00 2024 GMT
Not After : Dec 31 23:59:59 2024 GMT
Subject: serialNumber=e225dce4f7df144f725efd0baf1a5176fbdbb4e732f0b1bade606bc7c0629310, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:91:6c:b6:f5:ec:eb:8c:b0:d8:61:0b:73:84:
b4:47:b1:6f:a7:ef:23:0a:62:2a:32:3d:4d:eb:b6:
8d:13:8d:6d:bb:0c:0e:5c:36:ff:43:15:84:eb:73:
1a:28:5d:bf:b6:b3:e3:ad:f6:6f:99:8d:23:77:11:
de:33:14:a7:0f:0d:15:ee:52:dc:1a:0c:a5:ea:05:
d3:71:a4:d8:86:c4:f7:6b:35:86:1b:1d:0b:68:ea:
3c:95:24:bf:95:6a:00:24:c4:16:46:c4:ab:a6:2b:
37:bd:c4:1b:7c:d1:a2:29:29:d5:43:72:f8:25:cf:
1d:27:00:d4:79:35:eb:d6:34:a2:b4:78:b7:da:a5:
61:45:da:af:19:5b:1f:9e:e8:fe:6e:bb:3c:d9:c4:
55:7e:83:d2:45:25:e0:f4:eb:a3:2f:ea:25:13:52:
0b:06:44:83:60:62:4d:e8:45:88:dc:96:97:10:78:
91:64:51:0a:8f:11:51:5e:bb:28:91:f7:2b:ee:d5:
83:47:d4:8c:06:4d:c7:f9:4b:61:6d:e6:ac:2a:b6:
7d:24:57:94:20:4e:a7:a7:17:02:bb:11:f8:e4:d5:
8b:68:aa:f2:3c:5f:75:24:9a:eb:3f:e5:6d:f6:a4:
20:8f:03:2d:ae:e5:0d:ab:d7:98:c4:b3:ff:ba:a0:
d5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AD:9B:6F:3F:B0:B1:75:3B:08:8E:28:F2:0D:FC:B9:39:C0:D6:8F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c10277a-43bb-4c80-9131-a3d039f12745.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.254.8.0/22
Signature Algorithm: sha256WithRSAEncryption
60:db:3c:77:88:3d:c8:72:b9:0f:20:e2:0d:b7:7d:67:ec:41:
30:73:6e:43:61:0f:14:ff:8c:59:dd:73:32:ad:6f:4e:a9:d9:
ad:39:10:5d:1b:6d:9b:ae:74:25:64:c7:ae:14:35:c5:31:ba:
3b:15:e9:62:64:8f:6f:4d:4b:65:92:0e:13:d8:4a:a0:8b:2c:
7d:33:6f:2b:e3:2e:47:55:75:03:b4:5f:1b:1c:5c:01:c1:7a:
bd:35:db:d9:5f:2e:82:4d:7f:3e:20:fc:60:bf:38:18:a5:94:
9a:b4:e5:5a:2c:e1:50:83:8b:8b:8a:0e:e6:8d:21:b9:40:5b:
cd:f8:5f:df:16:8b:6d:e3:c1:ac:01:27:b3:cc:93:1b:0c:09:
a0:89:01:dd:42:b3:c2:61:a2:a4:9e:ac:a2:b1:8f:28:e7:10:
6d:8e:a3:9d:52:aa:87:31:1a:e6:22:3d:7e:7f:24:f8:dd:e6:
ca:3c:e4:29:68:0c:de:5c:47:c5:c3:a8:4c:ac:28:c9:d2:9e:
83:ad:17:5b:bc:1f:32:f9:c1:15:f8:43:bf:0e:8f:1a:fc:0f:
d9:a9:cc:d5:3a:1c:db:df:c9:63:e5:13:55:9a:9a:b8:7f:f1:
e8:38:4c:51:3b:fb:ea:0d:3b:b2:58:9b:98:76:d0:22:34:b0:
f5:03:14:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:16:49 2025 by rpki-client