Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41c1942f-7b3b-4a8e-a4e2-88ee27a0f685.roa
File: 41c1942f-7b3b-4a8e-a4e2-88ee27a0f685.roa (raw, json)
Hash identifier: IFLqRgjgSjRGvXaPOsWyQL7MTcyflJsVbT6Y6BcodOo=
Subject key identifier: 6A:F6:1B:FF:26:BF:A4:85:13:D5:B2:6D:34:90:D5:03:13:8B:2D:D9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 63FB5FAF078A8BDDED472CBF123BDF26E2B92873
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41c1942f-7b3b-4a8e-a4e2-88ee27a0f685.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 98.69.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:fb:5f:af:07:8a:8b:dd:ed:47:2c:bf:12:3b:df:26:e2:b9:28:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: serialNumber=490ef082f28636de7c3e1d2e405085e7931686197d2bb15fb2cab78dd2159ae5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bc:25:38:4c:86:42:70:db:c4:28:41:d8:b9:
97:dd:32:30:ca:11:54:3e:7b:ee:4b:23:b1:62:8b:
10:44:5b:c3:ed:15:8c:fd:7d:c6:11:a2:23:e1:45:
6e:04:55:10:90:80:67:2b:0d:c2:51:9d:73:7b:1f:
95:a8:d0:7c:1c:3c:61:72:70:18:b8:a8:96:17:9d:
f4:6f:ea:f5:e6:9d:90:3a:e3:d2:24:a8:63:59:76:
da:ed:71:38:3f:40:b5:d1:2f:fe:f7:c9:1d:66:9a:
5a:86:dc:18:46:33:4f:aa:28:c8:bf:f3:ce:ca:60:
53:9a:b2:c4:57:d0:b5:67:60:29:e3:c4:51:08:99:
8f:3e:c0:8d:3f:cb:fa:08:86:c5:ff:6a:e3:c6:a2:
8f:38:f8:7a:d6:d0:36:97:f0:97:1d:70:fb:37:01:
cc:e3:5c:9b:53:07:40:a3:7d:98:20:45:c3:98:b2:
11:5c:52:2b:cb:a7:31:83:37:d8:c5:f9:04:02:42:
4b:2f:f3:2b:5d:36:f6:d4:9b:60:b3:20:9a:05:c2:
0b:12:e2:7b:b2:b2:d4:13:9c:ce:03:32:18:fb:cc:
c9:ef:22:f9:db:e5:08:bd:85:3a:d4:ca:54:9b:51:
46:35:6d:43:09:09:c5:c9:48:66:16:7a:88:c5:6c:
6e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F6:1B:FF:26:BF:A4:85:13:D5:B2:6D:34:90:D5:03:13:8B:2D:D9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41c1942f-7b3b-4a8e-a4e2-88ee27a0f685.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.69.0.0/16
Signature Algorithm: sha256WithRSAEncryption
65:71:11:c2:66:2f:bb:b6:cc:bf:68:a3:13:b5:7f:02:b4:1b:
a2:55:5e:80:df:d7:ee:7d:1e:29:42:2f:fe:bf:ba:a9:01:91:
e4:fe:16:14:7f:bc:9f:02:40:a4:28:97:db:c8:56:00:22:8a:
7f:fa:82:2a:ae:22:a0:4d:3f:dc:a7:6d:71:15:15:87:e8:d3:
6f:6b:de:ff:9e:88:72:68:21:3e:21:16:ad:64:87:84:ca:9d:
00:28:dc:68:b5:e2:58:81:db:b4:87:81:18:65:2f:25:17:39:
02:12:e3:1b:f8:73:27:36:fc:55:31:06:fa:7d:38:4f:4e:ba:
9f:ae:c1:88:03:1e:37:fa:f1:2e:1f:97:53:ee:8e:3e:44:2c:
1c:f3:d8:ee:d7:9b:6c:2f:b9:b9:aa:ae:eb:b3:e4:84:f7:1c:
5a:58:4e:44:9b:54:02:ae:17:cd:7c:5f:2c:91:4d:f6:e9:29:
10:76:a9:22:72:84:a6:4f:d2:80:a1:70:73:15:bd:bc:ab:34:
74:71:ee:85:9b:a2:b3:83:a8:30:3b:1e:f1:27:37:b3:53:87:
02:0a:fd:dc:49:00:b4:7b:29:33:0e:13:30:e9:5b:c7:58:db:
8f:36:66:db:65:df:40:d4:d8:cb:e0:86:6b:8d:1c:09:ea:17:
f7:b5:dd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:46:59 2025 by rpki-client