Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45c0c9a8-b6ad-4626-b617-2c454fb67ec7.roa
File: 45c0c9a8-b6ad-4626-b617-2c454fb67ec7.roa (raw, json)
Hash identifier: nMLKTIle7mnEJS/WrbJFW8ouvVG+q2qQprZ/AolR7OQ=
Subject key identifier: 7F:AF:E0:9F:A2:04:DE:A8:7F:67:8C:40:E3:46:11:95:29:93:3A:EE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 55528A817E2D1EFC0360CE02374793E651FEA696
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45c0c9a8-b6ad-4626-b617-2c454fb67ec7.roa
Signing time: Mon 25 Nov 2024 00:00:00 +0000
ROA not before: Mon 25 Nov 2024 00:00:00 +0000
ROA not after: Mon 30 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 99.79.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:52:8a:81:7e:2d:1e:fc:03:60:ce:02:37:47:93:e6:51:fe:a6:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 25 00:00:00 2024 GMT
Not After : Dec 30 23:59:59 2024 GMT
Subject: serialNumber=a1b0a94a17630ab46583312653e47b9a4043671903aa6a3338da327a1143ccdf, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:af:0a:2c:a4:cb:07:90:03:f5:3b:a4:12:60:
4d:95:57:10:2d:e2:e9:01:a5:ec:fa:fc:ce:ab:cf:
1c:26:3c:7f:d4:a6:eb:a7:9a:97:20:37:57:13:54:
79:84:95:6a:66:69:3d:3b:78:7c:10:bc:3b:27:af:
56:d2:88:ad:9c:02:2a:4f:b7:61:c0:46:59:76:9c:
d0:56:6c:30:08:c1:df:24:5d:9e:23:9a:bd:96:0c:
f4:26:16:d4:4b:4f:18:71:fb:66:14:e9:fb:ee:35:
55:dc:f1:f7:19:34:37:2e:5b:e2:49:df:1b:bd:f9:
96:c3:46:93:2f:15:a3:6c:50:a7:17:b9:10:58:0d:
ef:d5:35:34:85:d2:cb:2a:0b:9e:29:c2:3e:23:ef:
9a:89:01:43:b9:a9:e0:31:06:36:be:b3:04:34:83:
e0:3a:05:6f:9b:b8:53:5a:77:c7:a5:b9:86:2f:4a:
5f:9f:40:af:bd:65:bf:57:85:2e:10:c0:8c:26:af:
44:62:87:c5:88:8d:db:f2:16:a3:a0:48:13:c6:76:
65:33:7c:61:f1:2b:9b:f3:17:ae:8d:75:70:51:1d:
d4:48:51:8e:ff:1d:44:c9:4a:7e:ac:81:df:e8:7a:
d9:fe:17:a5:61:3a:14:ed:a7:56:8d:f2:85:64:94:
db:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AF:E0:9F:A2:04:DE:A8:7F:67:8C:40:E3:46:11:95:29:93:3A:EE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45c0c9a8-b6ad-4626-b617-2c454fb67ec7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.79.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:62:8b:de:0e:3a:12:b0:9a:b6:4b:6d:4e:09:98:6c:e9:0c:
d5:a6:9e:37:f8:2c:1d:cc:97:76:fa:02:79:86:c5:f0:45:30:
77:6c:ed:a4:66:dd:9d:2c:a8:e6:8b:17:15:dd:c6:29:44:8f:
51:e3:8a:e0:a7:1e:17:94:b8:f9:a8:5d:3d:69:57:9c:b9:37:
70:75:f1:f6:07:da:f7:16:7b:35:fd:4d:ba:c6:36:33:66:1d:
60:33:ed:0a:e8:96:8f:7a:9c:b2:d3:a3:18:d3:11:65:e8:bf:
10:52:57:82:27:54:28:c8:2c:c1:7f:0f:c0:70:09:ac:35:69:
10:9f:02:83:70:13:17:00:67:6c:23:a0:54:3e:09:f2:7a:54:
0e:a4:41:bb:aa:1b:a5:8b:61:bd:c5:c7:9c:a5:bd:22:cb:29:
76:20:8f:48:a1:26:02:ce:0f:c8:19:15:04:83:14:44:78:02:
56:21:4c:05:4c:65:c7:f8:70:dd:da:b4:52:d7:8f:da:ad:88:
d6:63:26:43:89:97:2a:30:79:3b:1b:3e:24:52:09:91:62:6b:
73:fd:ef:22:3f:17:ed:07:8d:b4:35:10:db:3d:bd:86:83:29:
a0:7e:ac:29:fb:39:a5:59:58:c0:82:b3:13:5e:fc:ad:4f:89:
6e:53:60:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:12:40 2025 by rpki-client