Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/71ed7f20-cc84-4c94-91d5-a6b5a60a11d7.roa
File: 71ed7f20-cc84-4c94-91d5-a6b5a60a11d7.roa (raw, json)
Hash identifier: wayFQM2gNcVq4JCpLx2RjAMJMFlkVj5wT2wYojMc6To=
Subject key identifier: 5A:82:A3:6A:2B:28:5F:D5:0D:3B:EB:B6:D0:AD:41:41:00:9B:5D:BC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6FBF8D23992A7274D4AB5199D65EE117B5EB80F5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/71ed7f20-cc84-4c94-91d5-a6b5a60a11d7.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 99.151.184.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:bf:8d:23:99:2a:72:74:d4:ab:51:99:d6:5e:e1:17:b5:eb:80:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:de:29:71:97:d9:3b:8c:53:b1:80:49:92:
d0:7b:5a:d5:56:ff:9b:c7:4a:9b:7b:4f:7a:e6:30:
b3:69:a5:49:c6:5c:4d:2d:2c:97:62:e0:29:05:fb:
9d:33:58:d3:d8:f1:39:bd:dd:ab:44:a1:bd:d5:b5:
0e:d3:14:38:5a:68:b5:af:b7:a5:49:29:c4:27:d4:
36:d0:bb:06:b3:a4:b4:8b:db:19:7f:03:00:cc:e5:
2b:cb:49:a8:42:de:89:ca:16:1a:c3:4c:c9:70:e5:
8e:48:d9:2b:dc:f9:ac:19:4e:e4:05:14:f0:b7:e4:
22:df:85:a6:cd:6a:87:df:5c:88:b7:15:0b:cd:5b:
73:13:6b:7c:f6:a8:e1:d1:8c:a3:58:68:9e:eb:4d:
72:28:b7:9e:ac:ad:51:10:ca:1e:c3:80:5d:6e:9b:
ff:6f:df:f1:d3:a4:3b:19:4d:89:61:f9:2a:3f:e2:
c6:ff:e2:ad:d4:f8:67:20:66:7f:61:c3:64:d6:e5:
85:3a:7d:db:bf:7f:c5:6d:90:5f:73:f8:7f:5d:30:
6f:a9:03:7a:6c:97:6d:c7:45:c2:54:37:bf:43:11:
7c:3d:25:d3:f0:71:c9:3e:39:4f:61:2a:7e:f4:2b:
83:a5:bc:6e:3a:85:70:70:63:00:c9:55:09:fa:12:
29:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:82:A3:6A:2B:28:5F:D5:0D:3B:EB:B6:D0:AD:41:41:00:9B:5D:BC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/71ed7f20-cc84-4c94-91d5-a6b5a60a11d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.184.0/23
Signature Algorithm: sha256WithRSAEncryption
48:e1:f5:1a:0d:4e:27:e2:71:9c:e5:69:ff:1b:1c:09:4c:88:
01:8d:9b:ff:bf:ac:1f:7c:6e:e2:d2:9a:15:f1:6b:90:e4:db:
17:f8:45:d0:93:9c:d0:59:e3:ad:37:b8:9c:b9:8f:f6:6d:85:
13:8b:32:b2:44:cc:f0:ee:8a:fd:1f:7a:29:89:21:c5:2a:3b:
03:2f:05:d3:72:f7:26:c1:c5:2f:ed:75:93:ec:8b:35:69:31:
ab:83:13:a3:e9:6a:1e:ff:21:e5:b0:40:b8:5b:de:1c:fc:9b:
6d:b2:84:3e:01:8e:fc:d9:d2:6f:fb:dc:12:37:eb:82:95:27:
27:f2:eb:1f:f2:6a:16:20:10:9f:ec:f0:55:4c:00:23:11:51:
bc:09:c2:da:5d:cc:78:08:ba:0e:28:e8:e7:c1:0f:c5:31:90:
5d:d8:ff:6d:51:d1:04:20:63:bf:73:8a:08:94:81:d6:d5:41:
3d:1a:af:4a:81:5f:a9:8b:6a:c6:17:c3:ca:a7:21:ef:1d:10:
e1:ef:85:cd:fb:45:2c:8e:f9:bb:09:d8:63:ad:16:bb:7c:ca:
1f:9c:e1:e0:a7:9d:f8:d4:93:20:04:27:9c:83:1a:50:2e:ff:
05:29:f5:87:4f:c4:5f:de:ba:1a:cd:a4:bf:3e:3f:35:c3:57:
05:ea:7b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:39 2025 by rpki-client