Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e4eb0a8-322d-4197-87bb-79616b19b3a1.roa
File: 6e4eb0a8-322d-4197-87bb-79616b19b3a1.roa (raw, json)
Hash identifier: 8SVA1zCvM177jHzWvtspeOheRd0GtP0DrQShEIUcN08=
Subject key identifier: 77:CE:8C:79:28:57:8A:BD:14:CD:37:CF:C8:1A:B8:D1:E5:F2:47:33
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0F0215930B4D268E99B8327E94DB0470F33A333A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e4eb0a8-322d-4197-87bb-79616b19b3a1.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 66.36.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:02:15:93:0b:4d:26:8e:99:b8:32:7e:94:db:04:70:f3:3a:33:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: serialNumber=0daaa3cdfdce17ad6d366d4c3887a7af214909d82b2d276033cb0c2f71a75fd1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:da:2b:4d:68:77:5e:ff:50:8f:d9:d4:bb:78:
dc:cd:30:fb:44:36:a3:f9:04:70:9e:5c:9e:69:57:
bd:f6:e4:a6:39:79:15:da:aa:28:3e:64:70:21:c1:
37:bd:bb:e7:8c:96:8e:95:a8:a8:78:c9:9e:41:86:
c0:a6:c4:8e:1e:e6:a2:a5:10:5d:97:82:9a:56:ed:
49:a3:9a:e7:32:bb:0c:7d:9e:94:a6:11:bb:6d:6c:
7e:a0:99:ac:fe:a7:dd:8a:0b:e1:13:15:ff:d7:75:
77:60:20:3b:f5:36:e8:11:e9:c5:5e:0b:c3:fc:12:
0a:c5:34:2b:45:81:dd:72:77:76:cd:fc:4a:26:12:
5a:c1:b0:e2:53:4f:da:f0:e0:9d:85:7c:32:b1:98:
52:da:a6:4e:8b:5e:10:b3:64:c2:ff:bf:d4:a2:c5:
20:fd:b8:d9:e6:09:86:00:c1:34:30:4c:e0:ec:36:
6f:8c:86:c8:9d:98:04:fc:21:49:52:a2:db:26:05:
f6:e7:ce:33:fd:78:b0:8b:a6:18:32:d1:62:30:9f:
7c:78:1d:bc:e4:80:cb:fb:ce:30:97:a1:73:43:7e:
49:f6:31:f6:8b:88:80:de:8a:90:26:58:9f:5b:0b:
c8:0c:f1:6d:4a:e9:e1:d0:71:4f:97:12:9e:c2:3b:
a5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CE:8C:79:28:57:8A:BD:14:CD:37:CF:C8:1A:B8:D1:E5:F2:47:33
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e4eb0a8-322d-4197-87bb-79616b19b3a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.36.32.0/19
Signature Algorithm: sha256WithRSAEncryption
58:4f:d0:68:62:7e:df:1d:8a:7a:bf:28:d6:9c:0d:c2:de:1f:
68:5c:3b:0a:9d:65:e2:86:8e:b1:20:ff:95:40:81:66:ad:01:
62:3f:74:95:21:0d:26:cc:fa:4e:e2:3c:15:b2:3e:ce:39:15:
1f:04:f7:d4:82:22:eb:f3:86:1a:c1:25:f6:11:be:52:32:6f:
cf:e4:89:46:17:cc:99:af:10:8c:11:b2:1d:42:4f:40:64:27:
33:4c:e3:9a:a8:ce:9e:a9:40:53:36:80:3e:cb:f1:b9:e4:aa:
a6:1c:59:25:d3:63:30:22:e4:39:0a:11:42:c3:63:5b:65:9f:
a3:3a:97:f1:48:72:1b:4c:e0:d0:34:31:ce:03:36:a8:33:7b:
6a:2e:13:18:64:ce:ae:2b:44:3a:cf:07:08:6f:07:4e:a2:41:
f4:78:05:d2:e5:36:16:f1:a6:52:d4:d6:08:01:07:4c:d8:55:
66:a4:5c:b8:b9:8c:e9:39:4b:6b:1d:98:0e:92:6a:5a:d9:8c:
cd:bf:3e:e7:a7:72:97:e2:24:d2:01:13:23:e2:f6:b2:6b:db:
16:60:86:c4:7e:c5:cf:75:89:76:bb:07:fb:4f:14:86:8e:b3:
a3:29:1b:94:71:78:d7:b7:e7:71:61:80:d5:cf:05:95:fc:44:
38:a1:e6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:05:49 2025 by rpki-client