Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b5c0d5f-8ddb-47c2-a471-f05291c54cb1.roa
File: 5b5c0d5f-8ddb-47c2-a471-f05291c54cb1.roa (raw, json)
Hash identifier: 4jK3l8P7Z4GHGZk52+16AYjNZDdUCcQvF9cxkR/XMyc=
Subject key identifier: 53:72:58:87:3F:2B:66:90:FE:4C:56:33:0C:00:86:4B:DE:D2:B1:AD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2EFDC7EEE7C0A56C3DAAD04AC780C4F35E694CAF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b5c0d5f-8ddb-47c2-a471-f05291c54cb1.roa
Signing time: Tue 03 Dec 2024 00:00:00 +0000
ROA not before: Tue 03 Dec 2024 00:00:00 +0000
ROA not after: Tue 07 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 16.156.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:fd:c7:ee:e7:c0:a5:6c:3d:aa:d0:4a:c7:80:c4:f3:5e:69:4c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 3 00:00:00 2024 GMT
Not After : Jan 7 23:59:59 2025 GMT
Subject: serialNumber=3d537a82763eb5433d1d6844715668a35d0f0eed2edb30fd424a905da13483d2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:6c:66:ad:8b:7e:8b:c4:29:7b:bb:4b:cf:
e0:de:32:38:ff:43:3f:8b:72:47:90:22:73:d6:68:
c8:a7:26:b7:21:6a:1a:b1:b4:c5:d4:c7:55:49:11:
f1:c6:e5:d8:a3:d8:fd:27:8e:f3:d2:0e:eb:29:f4:
78:b7:67:4e:31:67:4e:49:f0:e3:e7:95:17:2f:f1:
80:48:d2:a1:61:0e:0e:a5:86:13:72:d8:2a:b2:73:
3d:fc:cc:e8:7e:87:77:16:67:ef:ff:29:75:21:9b:
c3:68:ee:6d:04:89:0c:64:76:a3:68:04:65:9f:4d:
91:b9:9b:e3:98:19:6c:1c:1c:41:c1:fb:0a:eb:3e:
bd:5c:79:db:99:fd:10:ba:e9:ab:a9:09:1d:34:ed:
8c:73:5c:90:57:3c:da:f6:89:2f:5a:09:bb:6f:c7:
eb:fb:19:eb:bf:1d:59:49:44:07:e4:51:19:fd:94:
a3:9b:fc:9d:45:69:5f:98:53:ff:d3:31:71:4c:32:
fa:df:4a:7e:3c:cc:cd:6a:7c:12:78:63:ac:33:d8:
02:7b:11:a1:1e:9b:cc:ad:59:fd:93:b7:b5:32:40:
35:fa:0a:f9:27:47:88:f0:1c:c9:7b:19:75:38:14:
d5:f8:d6:e4:aa:ca:48:54:5c:23:a2:4d:6d:bb:31:
34:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:72:58:87:3F:2B:66:90:FE:4C:56:33:0C:00:86:4B:DE:D2:B1:AD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b5c0d5f-8ddb-47c2-a471-f05291c54cb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.156.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2d:13:99:0e:c4:df:b4:f2:8d:f6:96:8e:9b:4a:d6:2e:f6:e8:
63:12:53:04:08:3a:e1:ef:a2:45:60:a3:bb:a6:29:53:e3:9b:
4f:2a:00:06:d5:c7:33:5f:55:f0:f2:f9:99:08:0a:73:eb:a4:
96:67:4d:3f:07:e8:a8:85:9b:a8:ac:87:4b:1a:6f:ae:87:e4:
01:c6:0d:62:cf:67:44:41:ee:94:cc:65:c8:cf:d8:bd:f9:b9:
8e:96:f0:f6:10:cb:b3:33:3d:15:bb:24:db:09:7c:3e:f2:ba:
2a:e1:10:61:2f:10:74:25:ea:2b:f6:aa:d8:61:af:9f:3a:7f:
90:8f:e1:7c:40:88:a8:77:26:80:35:ec:b7:ed:41:db:1e:26:
c3:b8:52:1d:cd:d9:e6:ff:e7:45:67:7f:e6:47:dd:d5:63:f6:
c2:80:f2:8b:38:75:66:85:40:42:c2:43:f9:7e:4b:ad:62:5d:
39:de:db:cf:8e:8e:97:ce:24:d7:ad:4b:47:76:91:2f:fb:bd:
47:7a:25:06:f3:a5:fb:71:68:5d:f3:3a:98:cf:cd:78:23:6d:
f0:37:b7:b0:be:bd:02:ff:06:4d:ac:01:64:74:2f:da:11:76:
f2:93:36:d9:fd:f5:44:03:2f:e4:63:42:45:9c:96:a8:95:12:
2e:32:df:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:58:20 2025 by rpki-client