Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c7fd9fa-1449-41a9-a1a8-add0fb96e0cc.roa
File: 5c7fd9fa-1449-41a9-a1a8-add0fb96e0cc.roa (raw, json)
Hash identifier: G+8JbbsKTZe+T9KoI9tXAk02RJmJWG0G12hoAMNLwBU=
Subject key identifier: 22:02:10:76:8E:68:D7:19:AC:84:F7:B4:39:D7:C9:42:5E:1F:61:19
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0C377D6AC2E9637BB2F01406733E9BEC769F83C3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c7fd9fa-1449-41a9-a1a8-add0fb96e0cc.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f1c:c000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:37:7d:6a:c2:e9:63:7b:b2:f0:14:06:73:3e:9b:ec:76:9f:83:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:37:86:11:ac:9b:70:c5:5f:84:36:07:a0:
fc:1e:de:f9:65:c3:02:62:ce:2f:01:cd:6f:65:1c:
0f:03:3d:3f:fd:5b:7c:6a:ed:d7:95:10:b6:9e:fc:
79:ed:0a:6c:0e:36:fd:ee:6f:78:99:a7:fa:5f:42:
e1:d1:17:7d:89:e7:72:18:ec:77:28:fc:39:cb:b9:
c4:3c:bc:12:92:74:93:14:db:33:ba:77:be:53:59:
71:65:05:56:98:e0:d8:11:bb:9a:c1:75:9d:80:81:
85:3b:12:8b:03:72:e6:3c:20:6e:9d:74:8b:80:e7:
72:08:1a:96:fb:c8:a1:63:6d:ee:0a:fc:13:ae:15:
c9:4d:84:ad:b3:97:e8:b5:7a:95:74:d0:38:00:db:
82:9f:8c:83:6a:df:c4:5b:0f:3f:c7:28:d8:52:af:
a5:6b:95:31:30:2d:be:d4:cb:f1:6e:78:fb:b7:45:
6b:f4:5a:ff:c8:ad:6f:22:9e:f2:d1:ed:14:ec:97:
24:76:ba:0c:a3:ed:26:13:57:3d:40:39:93:b3:54:
64:ad:88:43:f4:07:4a:4a:63:b4:73:e4:d6:30:4c:
c1:63:03:c9:ff:b3:ae:b3:fb:fd:f8:02:62:ae:3a:
a3:27:2f:60:33:42:57:13:38:91:65:1e:1a:b0:81:
03:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:02:10:76:8E:68:D7:19:AC:84:F7:B4:39:D7:C9:42:5E:1F:61:19
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c7fd9fa-1449-41a9-a1a8-add0fb96e0cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f1c:c000::/36
Signature Algorithm: sha256WithRSAEncryption
2b:62:73:27:19:a1:b6:77:d6:ff:88:e0:ec:67:51:85:20:4e:
28:a1:b3:28:01:f7:e4:8f:89:a5:5e:9c:63:92:ce:46:fc:d3:
99:d6:03:cc:69:29:ae:b3:b3:24:4e:ae:8f:53:65:d0:44:8f:
21:aa:ec:03:15:80:8a:08:ab:09:a6:fe:b0:8d:06:3d:a1:99:
e1:47:6e:db:a5:14:93:8c:09:f0:f6:1a:00:41:7b:c2:5c:cb:
cb:d2:ab:51:fa:30:d5:8c:ab:50:ba:93:eb:e2:ff:83:b1:c1:
db:71:13:be:f0:e2:5b:17:9b:a0:02:64:b8:94:17:36:5e:8f:
c4:a7:89:0a:37:52:89:29:24:91:26:b8:7e:c4:a6:2b:b2:39:
d4:8e:af:d0:3f:fd:a0:ed:be:9f:07:d6:94:39:6a:f2:95:e1:
28:8c:14:ef:a2:d6:48:92:85:fb:d4:5c:73:2b:3b:16:60:b1:
c8:bb:d5:c0:e1:2d:14:e0:60:59:0e:3e:1d:8e:39:76:91:c1:
4c:6a:d4:ed:22:b4:6e:b2:91:e0:82:e7:8e:4c:d9:b0:a8:19:
5a:10:92:b9:a1:93:d4:1d:f9:6f:6b:ec:97:c8:1b:c8:7a:3f:
fa:d8:3c:ec:76:e2:52:48:7a:ff:19:f1:11:3a:96:07:48:68:
a2:c0:cf:bc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:32:47 2025 by rpki-client