Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6200a50c-8ed7-448a-9c4c-922bf39eccb0.roa
File: 6200a50c-8ed7-448a-9c4c-922bf39eccb0.roa (raw, json)
Hash identifier: LtbixgR0UkaJEgYgGAjv8y6o881pYBPkF08VPhAxsIY=
Subject key identifier: DE:C1:C7:1F:56:FA:A1:B7:CC:C4:0D:18:FF:6F:44:0F:07:CF:83:8F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 476BA3CD5C10975315B46EA5AB0266C1B05ABF7A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6200a50c-8ed7-448a-9c4c-922bf39eccb0.roa
Signing time: Tue 24 Dec 2024 00:00:00 +0000
ROA not before: Tue 24 Dec 2024 00:00:00 +0000
ROA not after: Tue 28 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 35.18.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:6b:a3:cd:5c:10:97:53:15:b4:6e:a5:ab:02:66:c1:b0:5a:bf:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 24 00:00:00 2024 GMT
Not After : Jan 28 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:60:2f:17:6b:e9:dc:d9:31:44:68:43:21:1e:
61:27:05:1a:3b:db:f8:dd:4f:c6:e6:d2:da:89:ed:
ce:48:f8:62:fe:33:e6:b8:e0:ef:04:e5:7d:66:b2:
1f:0d:4f:5f:34:93:f0:91:7e:08:40:d1:60:3e:b7:
45:ec:ae:1e:6d:07:7f:c7:8e:4e:78:e5:d1:70:5e:
7e:68:00:1e:28:fe:cf:90:d3:3c:8c:d6:1f:e1:48:
45:e7:8e:46:49:b4:34:55:ac:57:4d:96:eb:09:f3:
a5:30:f8:21:e6:45:76:36:0e:ff:00:c1:a9:84:66:
7c:47:5c:1a:72:10:6d:2f:9f:05:c7:08:c4:e4:e9:
3f:2b:5d:6f:9a:06:f9:86:3a:4d:bc:6e:78:02:3c:
8c:16:f6:fd:0b:eb:a6:f4:b0:d8:00:b8:b7:b9:ad:
82:da:7e:5b:04:0c:29:10:96:d1:43:05:89:01:d2:
06:83:e8:13:dc:1e:a2:54:8b:3a:54:ae:f3:8a:cc:
21:4c:35:03:62:51:95:33:7d:33:b6:35:88:d5:a0:
aa:3e:4e:aa:a5:5e:7e:ba:85:98:ba:85:03:ee:3e:
30:0f:81:6f:05:7b:5a:56:87:c8:03:10:e0:9a:39:
77:13:bb:a1:93:17:e6:77:0c:1c:83:39:15:e7:42:
be:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C1:C7:1F:56:FA:A1:B7:CC:C4:0D:18:FF:6F:44:0F:07:CF:83:8F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6200a50c-8ed7-448a-9c4c-922bf39eccb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.18.0.0/15
Signature Algorithm: sha256WithRSAEncryption
6d:5b:66:02:57:58:e8:fd:83:70:f6:69:14:08:7f:e3:93:e0:
d5:80:a1:96:1a:1e:e6:a7:15:eb:c4:71:90:87:ac:56:79:3b:
7f:d3:1d:5f:07:26:9b:d7:5e:c7:d0:c6:1c:78:d8:0c:61:d8:
ce:37:80:65:1a:ba:68:20:5c:2d:f9:4d:9f:91:59:1e:ef:d6:
15:81:a8:8a:25:de:27:74:00:2d:65:90:1f:96:9e:9d:94:df:
bf:7f:33:2b:89:37:3c:fa:44:96:ac:b3:24:59:f3:38:dd:5e:
89:8c:6c:64:7e:83:d9:53:eb:c2:fe:08:78:b5:41:59:dd:01:
bc:a1:d1:20:4c:2d:aa:eb:34:fe:5c:04:db:d8:dd:76:cb:1d:
0d:ee:9f:ec:f7:b6:81:1a:7a:93:26:54:20:71:7e:39:8b:9d:
49:6f:1f:f6:39:13:1b:79:8e:35:0c:ff:1e:77:b0:3f:52:e6:
bd:6b:b0:85:fe:08:5b:58:1e:ee:38:2e:1e:ab:bb:99:b8:54:
95:2c:0a:bd:cc:24:ca:1a:ff:71:78:81:65:f4:19:07:5f:43:
e1:6a:68:91:0a:91:a6:46:3c:d1:b8:e9:c1:b8:e3:7f:ba:65:
3b:16:5d:71:59:68:dd:c3:1b:90:31:9b:02:ba:7f:5a:0c:75:
e7:db:1e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:32:31 2025 by rpki-client