Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/852e1e45-ab96-4837-9bd7-f78e596c8b87.roa
File: 852e1e45-ab96-4837-9bd7-f78e596c8b87.roa (raw, json)
Hash identifier: +3wh2py2pu42CfyRKBcp4KQ92ibDb6kFYTPmEcCH0rU=
Subject key identifier: A9:71:E0:DD:96:18:96:00:3D:B5:1A:74:B2:E5:A9:E9:5C:48:2B:12
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2F2A4AD1628F5EA0A6E8E9001BBAA11940B0DBC4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/852e1e45-ab96-4837-9bd7-f78e596c8b87.roa
Signing time: Mon 02 Dec 2024 00:00:00 +0000
ROA not before: Mon 02 Dec 2024 00:00:00 +0000
ROA not after: Mon 06 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.46.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:2a:4a:d1:62:8f:5e:a0:a6:e8:e9:00:1b:ba:a1:19:40:b0:db:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 2 00:00:00 2024 GMT
Not After : Jan 6 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a0:bf:b8:af:f5:6b:6f:4b:bf:c0:99:27:c3:
98:da:91:2b:85:22:12:16:8a:f0:21:7c:bd:dc:cd:
6a:a0:ae:bb:4f:c2:4b:f1:ec:60:41:6d:78:f4:0b:
90:0c:ba:f2:22:1e:ae:60:9f:00:d2:c4:2e:67:85:
6a:f3:49:1b:90:b9:1e:90:9c:d0:54:4c:13:00:c1:
23:40:02:f5:7b:6d:95:9c:81:7a:d0:11:5f:2e:35:
32:86:9c:a0:1d:af:55:62:07:1a:4f:a1:61:f9:6d:
98:42:fb:2e:21:da:eb:fe:b7:58:3e:12:be:d9:23:
4c:b6:10:a0:02:13:23:cb:ea:a0:50:c1:ae:ef:02:
2a:ec:07:3c:c6:5c:3e:16:40:1f:2b:90:58:51:ef:
0d:fe:e6:d9:15:8d:6f:26:a3:1f:b9:6d:08:b0:19:
70:66:b9:7c:fc:9f:12:51:5c:ed:db:8d:dc:bb:5e:
2b:1e:70:8d:c9:9e:04:5b:3a:f6:2a:cc:6e:8b:42:
a7:45:e9:16:29:ee:16:d0:2f:0e:58:19:d2:8d:93:
de:5d:99:f8:a4:84:73:b2:30:29:c9:df:82:36:cf:
ee:bd:3c:1e:58:51:43:3e:ab:e9:6b:2c:b1:49:e1:
ff:ce:3a:3a:71:36:71:33:57:74:a4:5f:e3:e2:21:
4c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:71:E0:DD:96:18:96:00:3D:B5:1A:74:B2:E5:A9:E9:5C:48:2B:12
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/852e1e45-ab96-4837-9bd7-f78e596c8b87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.46.0.0/17
Signature Algorithm: sha256WithRSAEncryption
6b:31:8e:4b:75:50:ed:b8:86:e9:12:41:16:80:9a:a9:2f:91:
9a:49:f6:a6:6a:50:1f:c5:10:ba:5b:92:86:4b:cb:dd:88:0c:
9a:4b:4c:d8:2f:8a:d4:18:7f:b9:28:c7:c6:a6:d9:f3:2a:54:
23:bb:a9:73:79:33:fe:3e:44:43:f7:af:d7:47:a1:b9:49:0a:
3f:92:dd:65:d2:b5:95:14:d8:25:3e:9b:08:65:cc:1e:1b:31:
c2:72:66:32:70:16:1c:f1:8a:f7:47:9e:cd:5c:29:20:64:23:
69:ab:05:f1:09:33:f1:33:b9:7d:ca:ea:ba:df:d5:68:20:b1:
03:98:6d:20:28:fc:5f:0f:dd:6c:68:78:28:71:3a:a3:85:e6:
c1:1f:ea:ef:7d:9c:a1:e5:93:1e:65:a1:e0:84:4e:64:6f:d9:
f5:ef:79:d0:e8:6f:dd:4d:3c:b6:eb:f5:71:e7:2f:c7:1a:eb:
b0:30:83:de:fb:3c:5c:fd:af:3c:59:8c:0b:eb:98:72:00:99:
3c:06:44:f3:82:48:72:a8:86:56:cb:26:ed:56:95:66:c4:06:
38:6c:d3:90:56:14:d3:ef:e2:0e:26:7f:a5:96:d0:8b:04:bb:
65:69:d5:9c:35:cd:d4:c6:19:de:71:39:31:f2:f8:60:45:a8:
8f:d7:90:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:32:05 2025 by rpki-client