Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67da93f4-8a20-4590-b08e-6f1d49e73dd4.roa
File: 67da93f4-8a20-4590-b08e-6f1d49e73dd4.roa (raw, json)
Hash identifier: 4ORAsXGbrz8BV/6DeshZc9wHz4ecyw/1qbhcphek74k=
Subject key identifier: EA:B1:F3:63:CE:F1:0C:FC:F7:0F:04:43:56:53:DC:54:43:14:CB:B9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 63CB5B4AC0A3DA1555D48C978D830FA50ED51A92
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67da93f4-8a20-4590-b08e-6f1d49e73dd4.roa
Signing time: Thu 02 Jan 2025 00:00:00 +0000
ROA not before: Thu 02 Jan 2025 00:00:00 +0000
ROA not after: Thu 06 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 23.228.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:cb:5b:4a:c0:a3:da:15:55:d4:8c:97:8d:83:0f:a5:0e:d5:1a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 2 00:00:00 2025 GMT
Not After : Feb 6 23:59:59 2025 GMT
Subject: serialNumber=c6d04284eafa4ed7bf1c3938beef8b7c9b2aebe5675f6edacd4f9c802dbc8b41, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9b:86:74:d0:54:f6:ad:37:c2:e7:aa:13:44:
c4:00:ed:ed:6c:b8:6b:02:64:8a:bc:52:33:97:a3:
26:0b:83:1c:ee:67:ac:b0:d3:40:e2:6f:ff:75:fd:
cc:27:03:47:60:ec:cb:98:68:5a:08:a9:bc:df:3b:
29:13:22:d3:64:8d:1e:8e:8a:4d:ca:a9:a9:a3:39:
1e:19:ba:a2:18:81:0e:2d:ad:ab:59:a8:54:4d:ca:
53:bf:cb:f8:82:01:97:37:3e:50:78:79:24:ae:0c:
66:a1:d3:6f:f8:c6:67:7c:2b:5e:8e:ef:46:1d:ea:
f9:c1:37:02:2a:0c:58:6e:42:89:45:dc:96:ae:48:
2b:07:60:b3:71:a2:ff:51:b2:14:40:9c:03:06:7b:
97:8f:34:04:6d:aa:8a:f1:91:be:0a:08:1a:39:f9:
46:35:f5:8f:f4:b9:b8:d5:a3:eb:4c:91:4c:f9:6d:
6c:fd:ce:03:09:64:d3:43:53:d3:91:95:71:6d:64:
d2:8a:54:25:65:99:4e:82:b6:73:3b:83:9c:9e:42:
cb:11:67:62:36:c9:63:c5:0d:8e:5b:f0:2e:28:21:
a5:b0:ef:7f:dc:0b:69:67:23:95:62:9a:24:28:b2:
21:75:d9:fe:c3:2a:19:0e:a6:96:c6:6e:01:3e:eb:
91:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B1:F3:63:CE:F1:0C:FC:F7:0F:04:43:56:53:DC:54:43:14:CB:B9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67da93f4-8a20-4590-b08e-6f1d49e73dd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.228.192.0/18
Signature Algorithm: sha256WithRSAEncryption
58:c3:4a:d7:7c:d6:69:b4:ef:9d:98:c8:23:76:5c:0d:99:9a:
a0:f0:a0:6b:76:02:a3:48:d2:2c:68:63:63:62:50:b8:da:59:
e8:a2:e0:de:ec:09:8b:e4:7e:53:c4:f7:15:e5:b6:b9:b7:31:
cf:27:6f:8b:da:96:65:e7:20:03:00:10:61:fe:3e:94:c4:1b:
ad:2e:e4:c1:fb:2a:5f:a6:c5:15:7a:1b:eb:73:7f:6d:51:12:
0b:25:35:73:56:d0:b4:b1:41:9c:ab:82:97:98:65:1e:94:ca:
a4:94:20:04:5b:df:ea:fa:00:2b:42:2e:0d:9b:32:8d:f9:73:
0a:f4:a4:b3:2c:59:61:25:a1:cc:56:cf:40:ea:ae:a4:01:c9:
df:2b:b5:cf:22:13:22:94:21:bb:e1:a3:56:81:61:f5:79:8b:
9c:cd:2c:09:4e:11:42:b9:29:0a:99:00:97:84:b4:bf:dd:04:
16:32:b9:73:e3:d7:b7:81:f9:4e:36:e9:28:fb:3a:8b:41:f6:
45:87:89:83:15:29:d0:45:b9:39:54:46:df:94:bc:32:f0:d9:
1a:b3:29:f8:b0:c9:fc:c8:d3:67:d7:0f:c0:dc:9c:13:e2:1a:
d2:6f:86:9c:98:41:b0:f1:f2:1b:e4:c4:72:9b:0f:56:bb:84:
68:3b:34:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:58:26 2025 by rpki-client