Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79641517-e391-45b7-95a2-53f8fb56d4b6.roa
File: 79641517-e391-45b7-95a2-53f8fb56d4b6.roa (raw, json)
Hash identifier: r1i6xQl+SGxEshqY6KpenZt83rHva8tsxVwTZOu9g/I=
Subject key identifier: AD:60:DF:1E:96:16:CD:E0:C3:54:84:E8:3F:36:66:04:D2:F9:AA:3B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 74E27AA0EC8B8D5D9F78A010414F745ADF8793B2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79641517-e391-45b7-95a2-53f8fb56d4b6.roa
Signing time: Wed 01 Jan 2025 00:00:00 +0000
ROA not before: Wed 01 Jan 2025 00:00:00 +0000
ROA not after: Wed 05 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 56.103.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:e2:7a:a0:ec:8b:8d:5d:9f:78:a0:10:41:4f:74:5a:df:87:93:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 1 00:00:00 2025 GMT
Not After : Feb 5 23:59:59 2025 GMT
Subject: serialNumber=b5e5225ada2a3f27520e3b1b33f75b9b7918fa0c7d3188c3a4519894780ab16f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:32:ad:00:a7:ad:29:ed:05:1b:e4:51:6a:
e4:87:93:89:d4:c2:ac:b3:1b:e4:61:59:fd:26:99:
3f:45:db:bd:92:3e:c4:bf:6c:1d:da:1a:77:27:82:
43:44:84:61:37:d3:95:61:ed:be:77:87:53:b1:2f:
76:85:c3:de:c5:5c:21:03:a7:60:06:24:86:e6:f1:
8f:ec:3f:bd:e0:b6:93:21:33:58:bc:f9:5a:03:e2:
2c:59:59:bc:3f:38:9b:bf:d6:32:81:09:2e:b7:c6:
f1:79:ae:a0:f1:3d:35:4b:df:5b:56:12:85:c9:c4:
ce:2b:ec:31:67:e3:9a:c9:2c:14:31:d3:01:91:82:
df:6f:03:38:4e:a7:b2:a2:1f:ab:cb:4d:8a:c4:5d:
52:ac:6c:ac:86:f3:10:bb:08:42:cf:49:33:3c:69:
62:e8:e1:6b:5f:6a:26:84:20:63:d5:55:1c:f0:3f:
64:5b:88:da:32:37:50:16:45:93:d7:f5:36:43:73:
1b:7c:71:b4:c2:bb:e7:57:de:dc:4e:47:35:70:5c:
46:b0:d6:8d:2e:67:c0:71:39:3b:d8:90:64:90:9d:
47:c1:48:fb:44:55:20:ab:ce:7f:d4:2f:53:e1:ba:
0f:3d:24:3c:24:9c:98:5a:c6:3d:9c:17:ed:b8:27:
2a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:60:DF:1E:96:16:CD:E0:C3:54:84:E8:3F:36:66:04:D2:F9:AA:3B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79641517-e391-45b7-95a2-53f8fb56d4b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3f:86:a9:80:25:84:26:91:d7:03:81:37:87:b1:e2:ea:6f:77:
7d:1e:18:5e:3a:cc:6c:f7:74:c4:0b:f8:be:d7:80:ac:42:f2:
2c:9a:5a:46:3c:2c:53:5e:4e:df:ff:69:ec:c3:41:f7:34:fa:
95:46:3a:f9:fb:ba:26:fa:f2:48:fa:fe:ae:e1:3c:20:ee:39:
97:39:ee:a6:e9:8b:5a:90:8a:c7:23:0c:21:3e:a4:eb:71:50:
2f:77:a6:53:b8:6d:f9:83:67:6d:16:ac:c1:fa:a2:fb:46:d9:
ef:8c:a6:61:eb:ce:67:44:3f:78:d6:d2:90:d2:10:9f:8c:65:
6f:3f:7c:31:e2:40:77:b6:2c:23:5a:53:5e:eb:b4:33:35:c6:
5e:e9:2e:30:bb:1c:90:dd:75:9f:4b:7b:c1:23:91:a7:02:33:
32:bd:0a:22:c2:37:5c:60:b0:6e:be:e9:c3:f1:49:0e:38:dd:
b0:3f:6b:a9:87:d8:37:2b:b9:45:a7:51:a0:aa:7d:fd:ff:9d:
24:86:6f:17:a9:27:80:5e:34:48:25:15:85:ab:1d:2d:51:bf:
91:65:c4:7c:de:a3:b5:c6:c9:77:98:a9:6d:00:c7:cf:13:ef:
23:dd:fc:0a:71:75:4b:bf:4b:a5:53:54:fd:8f:ac:f7:a6:7c:
61:33:a4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:12:48 2025 by rpki-client