Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bdd4593-94bf-4b9e-9bde-3ced62ac4c4c.roa
File: 5bdd4593-94bf-4b9e-9bde-3ced62ac4c4c.roa (raw, json)
Hash identifier: do1nhLPoyS2YWgMK0xwBbp994mlkDEjEg22d29ObQTc=
Subject key identifier: 98:EC:3E:13:C8:65:C3:2E:09:B5:0D:F0:8F:7F:01:19:77:A2:72:38
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 73B36A2CC441F786928BC07B15CEB1DB20C923B7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bdd4593-94bf-4b9e-9bde-3ced62ac4c4c.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f00:7400::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:b3:6a:2c:c4:41:f7:86:92:8b:c0:7b:15:ce:b1:db:20:c9:23:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: serialNumber=4c6485b7479c3581d63036fb765e876441c64d96412112c1b743cea9cbad68a5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2e:2e:1e:f5:40:0c:97:b1:4b:d9:15:92:81:
46:c6:82:a8:b7:f6:d8:09:56:d5:8e:90:95:dc:2d:
14:50:68:62:06:00:f6:a2:02:55:8f:33:5b:15:69:
9c:b3:15:0e:aa:8c:6a:8a:3b:99:d9:f9:99:27:c1:
f8:76:ec:ff:2b:a0:d1:86:66:df:0a:fb:27:74:9f:
db:bc:76:3b:ab:94:d2:db:29:53:34:1e:e8:6b:cc:
ec:ff:b8:b0:c2:62:c5:69:99:13:49:71:e0:82:9a:
f3:48:00:0a:ae:11:89:90:16:7a:07:ab:02:ca:35:
31:29:7c:aa:5a:36:ea:c5:42:b4:49:43:ec:38:dc:
d7:4e:bd:e8:8b:96:3c:44:1c:d1:29:54:db:da:82:
a0:0f:df:27:f8:f5:b5:ee:41:06:cc:02:7a:0f:bb:
30:b3:79:0a:35:a9:da:ff:ca:79:0e:0a:cf:ef:87:
35:c6:07:9e:3b:6e:d2:3f:25:36:9f:36:77:3d:d0:
6d:1f:be:da:93:d7:ed:ef:e4:67:30:d0:27:75:9c:
59:35:15:ce:7c:c0:75:e5:02:dc:d9:1f:fa:58:99:
3f:6e:e1:99:69:80:41:f7:8a:a0:f2:d6:fa:8e:a8:
1c:e3:d0:0e:5b:aa:84:0d:8f:50:e3:32:eb:ef:db:
c3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EC:3E:13:C8:65:C3:2E:09:B5:0D:F0:8F:7F:01:19:77:A2:72:38
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bdd4593-94bf-4b9e-9bde-3ced62ac4c4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f00:7400::/40
Signature Algorithm: sha256WithRSAEncryption
4c:40:ba:61:e0:fd:33:1a:c8:2c:d7:0a:3b:83:d3:65:c9:54:
1d:a2:1a:38:cc:ed:5d:19:31:16:5e:4b:fb:44:3e:98:bb:ad:
1c:95:96:32:0e:a4:82:3c:42:9c:c4:37:66:4f:a2:f9:1e:5e:
3a:e6:a8:32:a4:52:fd:3b:55:39:07:43:74:d5:3f:ec:45:ae:
a3:51:15:a5:8d:8b:f9:e7:ce:96:b6:23:50:e2:12:f9:06:92:
47:f7:c9:a6:e6:ca:02:fd:c5:11:c8:33:01:2f:96:e2:ab:dc:
c6:fb:4d:9a:10:ed:ae:26:4b:5c:a4:19:e4:c4:2a:58:b0:25:
3e:a0:6a:ad:74:61:e2:34:aa:a0:97:b3:b9:4c:be:d1:19:ed:
a9:7b:8e:f0:0d:0d:92:47:a3:ed:ce:72:c9:e4:0f:8b:6e:89:
86:25:c8:81:70:69:2c:60:fb:fa:0b:90:a5:10:da:fd:e2:3a:
03:24:2a:da:65:b3:33:18:f8:0c:8b:e3:98:20:36:df:6f:ec:
68:dd:4c:af:6e:8f:79:95:36:9a:d1:2e:af:f1:a1:0d:50:13:
ad:b0:42:55:82:4a:40:a5:8b:53:a8:ad:d2:e4:7f:1a:8d:b4:
f8:b3:e8:1e:3b:ad:1c:09:d7:25:6a:7f:f2:f0:92:d4:b3:31:
13:5b:e2:ee
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 16 17:11:39 2025 by rpki-client