Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80a41af8-06de-47fb-a4ed-919705eb8142.roa
File: 80a41af8-06de-47fb-a4ed-919705eb8142.roa (raw, json)
Hash identifier: PBXvuhiaSE3rR9uR96MsZPZtMyriHPsH+q1q86ZWr8U=
Subject key identifier: 90:62:DE:57:83:2A:27:A6:E6:1A:F9:EB:EE:27:5B:46:CA:81:A5:C7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 610817D0168984B4792E65A03F145B1EDEDAB250
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80a41af8-06de-47fb-a4ed-919705eb8142.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 56.137.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:08:17:d0:16:89:84:b4:79:2e:65:a0:3f:14:5b:1e:de:da:b2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=e4ab5efae073556b0fbd423d20df46614e683044d8a96dbf3e91ed28337c5753, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:58:ff:43:44:ed:4b:72:9d:71:11:d9:69:a0:
aa:a6:9e:3b:17:a9:6a:eb:09:70:fb:ce:17:fb:05:
34:f6:15:77:3a:e5:25:a1:1e:b9:33:9d:16:f0:d1:
2c:53:d4:dc:db:8a:5a:7e:8a:b1:af:1b:a1:fb:01:
2a:59:e7:c9:d4:76:72:68:d5:d6:61:57:50:63:b7:
d8:fd:b2:18:e8:de:6a:6f:9b:6a:62:85:fb:8d:1a:
35:1f:72:aa:99:f8:c3:fb:aa:f6:2c:e8:66:53:55:
e6:44:59:55:a3:07:11:9f:38:4c:19:9a:3e:57:30:
d5:f3:2e:69:04:b5:4a:3e:e8:8b:b8:38:df:ed:ab:
6e:35:12:36:75:9f:aa:1b:8b:b9:3e:e6:04:80:d1:
26:85:3f:7a:7a:5e:f9:23:a8:fe:22:29:10:eb:24:
45:19:24:0e:e1:f4:08:12:65:32:db:c2:e0:ea:5e:
90:1b:7b:67:a9:25:fe:34:95:e3:37:11:4b:58:aa:
f5:c0:13:23:4f:b3:e5:a7:0e:8d:fd:7a:15:b5:ee:
4f:3c:38:4b:4e:35:b4:ba:73:e9:8c:7e:d0:1e:98:
36:8b:26:2e:cd:8e:01:c0:ce:d0:f6:47:59:08:ce:
6c:ef:9d:1c:c6:40:b4:1a:7e:46:0a:96:00:44:a3:
fd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:62:DE:57:83:2A:27:A6:E6:1A:F9:EB:EE:27:5B:46:CA:81:A5:C7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80a41af8-06de-47fb-a4ed-919705eb8142.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.137.0.0/16
Signature Algorithm: sha256WithRSAEncryption
aa:c2:e0:ed:64:a9:df:39:b4:b1:e0:7d:c0:81:f1:1d:00:5f:
c4:78:de:6e:6e:4e:d7:05:ce:2d:dd:0c:ac:a5:1b:33:03:af:
ed:e7:eb:1d:98:ed:96:e6:43:8f:54:5c:cb:be:dd:20:a1:62:
67:c8:6f:30:0c:ae:14:be:1e:91:e4:cc:71:6c:7d:59:4b:88:
da:97:96:fa:86:f3:89:f1:83:78:1c:9f:93:fd:d4:60:b1:be:
3d:fd:79:96:4a:59:0b:7b:cf:a9:81:94:f1:c8:64:df:60:31:
1b:95:2f:60:c4:f2:95:2f:54:a2:0f:b2:70:dc:02:e1:19:05:
00:1c:0f:16:e4:31:99:5d:b7:af:0e:b8:d1:25:35:4b:0e:87:
02:f6:a0:65:87:3d:dc:98:a7:c4:4b:3c:46:e6:02:4a:5e:db:
78:ed:4d:72:a6:8c:f0:8a:74:95:fa:e0:45:5f:df:1f:2f:9c:
09:12:fb:91:d9:f6:57:6e:ff:9b:dc:16:50:df:6d:7b:66:4b:
10:4e:47:d1:f7:76:5d:1b:77:71:22:26:56:8b:ae:07:ee:a2:
1e:ee:3e:4b:a3:6c:ca:bb:4e:88:87:89:cc:e9:e8:90:45:25:
cc:11:97:25:97:53:4d:00:79:12:fb:69:0a:6e:37:79:e4:da:
92:e1:48:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:46:47 2025 by rpki-client