Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81ac3ec8-cd04-4260-b4b1-52b325cb8edf.roa
File: 81ac3ec8-cd04-4260-b4b1-52b325cb8edf.roa (raw, json)
Hash identifier: nxdykooM+l+Tcvp7Jzjt6aDNhO2zTiVi13XjQOBYw7o=
Subject key identifier: 80:CE:C9:78:FC:D5:D3:C8:D2:F6:8A:BE:2C:BC:4E:F7:9F:74:D4:7D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 73DC57E21EA6DE01825F057712E33CCDB0F409FF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81ac3ec8-cd04-4260-b4b1-52b325cb8edf.roa
Signing time: Tue 04 Mar 2025 15:11:05 +0000
ROA not before: Tue 04 Mar 2025 15:11:05 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 13.62.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:dc:57:e2:1e:a6:de:01:82:5f:05:77:12:e3:3c:cd:b0:f4:09:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 4 15:11:05 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: serialNumber=b2bee68f5501bec08373a90a0f063072f0e548fb50c23614699510dc6839f7d2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:de:bf:90:6a:36:df:0c:59:b3:99:f3:c9:69:
be:06:0e:37:ec:47:fb:16:92:4e:cd:e4:66:a6:36:
36:cd:f9:99:68:d1:35:c2:f9:27:5b:e4:2e:74:69:
7e:15:c0:aa:30:83:a2:bf:d4:d8:9c:38:41:b4:84:
4a:87:fb:d5:05:a6:60:7f:4d:69:07:a7:22:a3:e3:
1d:ac:ca:04:ee:a3:52:b6:3d:ab:3b:22:71:19:ff:
3a:55:47:9e:45:7a:72:07:f9:d5:93:b0:96:93:22:
8b:09:d5:9f:04:23:63:be:53:9d:53:5d:0d:a4:23:
bc:53:14:32:90:33:a5:25:92:ee:ad:45:75:c6:04:
75:04:61:4c:4f:fa:f5:a7:7e:4e:6b:79:d0:8c:2e:
82:e2:ce:eb:ab:fb:ef:8e:d8:c3:f3:42:60:2b:0c:
de:d4:7f:c9:cb:6b:52:8c:45:fe:95:73:7b:fb:e3:
44:c8:f2:2f:d4:d0:45:29:3c:20:36:ff:97:9d:86:
87:4b:d0:ee:ec:ee:19:db:5c:85:ee:0b:5c:ff:e9:
6a:64:0c:0e:a9:01:4b:42:3b:9a:e7:85:7e:61:98:
fd:e8:e8:60:ca:f7:7d:ad:ea:b8:b2:36:e9:b3:f6:
45:3e:bd:98:b2:d7:f3:99:bb:c4:ed:3a:3a:e4:a1:
f8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CE:C9:78:FC:D5:D3:C8:D2:F6:8A:BE:2C:BC:4E:F7:9F:74:D4:7D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81ac3ec8-cd04-4260-b4b1-52b325cb8edf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.62.0.0/15
Signature Algorithm: sha256WithRSAEncryption
03:4a:3f:12:f3:dd:bf:fc:f3:68:3d:86:5a:7e:76:f1:d8:1e:
30:e0:41:f0:86:df:50:da:8b:8d:83:c4:f5:3a:6e:f7:e4:fc:
c8:2b:cc:a9:19:20:a9:d3:00:0d:8a:cd:8c:03:26:96:45:bb:
f0:e9:c9:c7:eb:7b:4e:7e:18:08:af:e9:af:c7:44:69:15:5f:
48:c9:19:4f:af:42:bd:d4:ce:56:d1:e4:e3:ce:4a:aa:17:08:
16:18:e3:8a:a2:68:9b:28:63:30:d4:26:87:aa:a1:9f:62:66:
f1:49:86:c7:a3:60:46:a5:92:fc:f7:e1:d4:80:ab:71:2d:42:
d9:41:79:02:f6:c5:43:cb:e9:bb:6e:14:5d:b7:f4:7c:bf:67:
e8:6a:79:5e:85:ce:44:7c:00:83:28:38:98:a8:1c:26:00:55:
5a:b1:29:98:97:f0:37:05:1d:0e:a3:1b:c9:54:6e:41:4e:e7:
b0:88:4f:44:23:26:ac:78:0c:b4:88:35:a7:cd:e9:23:47:0e:
c4:cc:27:80:74:dd:2f:1d:27:4d:32:5e:a8:ba:57:5d:79:c8:
b9:4a:e9:ba:28:1e:c3:e2:e6:b5:45:ee:f8:81:7d:44:0d:0a:
8f:6f:f0:5e:23:8f:04:fe:e8:64:a0:94:0b:59:cd:32:a9:09:
17:9b:79:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:12:44 2025 by rpki-client