Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a0c57e3-2697-40bc-a86e-5f3fd09c679e.roa
File: 8a0c57e3-2697-40bc-a86e-5f3fd09c679e.roa (raw, json)
Hash identifier: 94xYZliIZeVpFts0nOuexlWcOiq1ohb9Chz7kba2b+Q=
Subject key identifier: FD:5A:1D:D8:1D:F1:FC:DE:46:3C:F7:EB:F7:47:CF:DD:8D:44:A3:9A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2A75B4392CEC914F729DD6CA47571B5148DE8774
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a0c57e3-2697-40bc-a86e-5f3fd09c679e.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 56.10.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:75:b4:39:2c:ec:91:4f:72:9d:d6:ca:47:57:1b:51:48:de:87:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: serialNumber=f3f34cb2b7eba087a3efcb88537f95fd0edacd8c69bbd786e8a20b0b789be9c1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:5d:e5:9f:53:27:95:00:0e:07:8b:68:ad:
52:d5:fb:2f:52:c8:fe:09:0b:7c:5d:fa:a0:93:63:
09:12:48:b2:e3:d5:57:51:19:63:36:4a:37:0d:eb:
a7:b8:a6:b5:a5:92:ac:71:34:f4:06:58:69:f6:52:
a0:f3:9f:8d:50:9a:e4:f6:99:e0:ed:25:85:e5:aa:
8f:52:36:1c:93:54:c5:75:33:0e:0c:da:05:f8:3f:
de:91:a2:75:4f:bf:d9:36:ba:d5:35:31:89:95:24:
bf:e0:47:3e:42:66:e2:2f:30:ae:b5:48:4e:51:c7:
62:9b:18:2d:28:f4:27:d6:b4:67:f1:ee:ad:aa:2d:
f5:6d:dc:4a:cc:ee:92:ca:07:1f:b2:50:e4:33:78:
6b:67:85:18:fa:d9:87:c1:27:52:5f:08:e2:cb:0b:
b9:7f:12:50:29:cd:fb:14:61:6e:36:98:da:5c:1e:
d7:2a:e4:6e:c9:6e:f2:b7:ee:cb:c5:60:74:9c:f9:
bb:16:a4:fe:6a:6b:39:53:82:fd:4b:99:6c:f8:68:
cc:6b:ac:79:82:34:fc:a8:18:57:02:9f:81:ba:06:
b3:23:37:11:f7:db:ac:8f:1a:59:b9:25:0a:be:ba:
a3:9a:c5:03:60:83:c9:c2:39:88:d2:31:bc:c9:d3:
d2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5A:1D:D8:1D:F1:FC:DE:46:3C:F7:EB:F7:47:CF:DD:8D:44:A3:9A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a0c57e3-2697-40bc-a86e-5f3fd09c679e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.10.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5c:2c:ff:02:d5:93:1f:53:91:ec:69:87:ed:5e:63:69:aa:d9:
fe:62:5b:e4:4b:38:b8:16:5a:28:ab:0f:ef:8c:3f:78:88:f7:
20:32:8d:62:32:f0:17:98:c0:39:fb:a2:35:8c:33:73:06:fc:
9d:d1:1c:06:69:2a:88:17:2e:e4:7d:6a:2b:8f:10:84:08:d0:
00:8c:d8:af:93:62:02:9c:10:16:06:1a:43:eb:3e:21:34:62:
5e:54:03:3b:81:33:1c:c4:f3:87:d8:54:80:cc:bb:3a:97:d0:
bc:6e:0e:e3:52:d7:69:c6:99:13:6b:31:68:04:00:ff:37:d2:
b6:0f:b5:3f:2d:92:e5:b7:6b:71:e8:61:5b:ef:0a:76:1f:78:
02:8b:30:a7:f8:82:b5:31:a9:0f:65:aa:81:a2:75:2d:8b:39:
0c:9d:ec:ae:c5:ed:23:fd:bd:87:0d:14:7d:25:fb:c2:39:16:
21:ce:18:f6:83:06:29:85:95:8e:b2:84:8c:b7:d2:59:dd:0a:
e5:26:60:a9:fc:3a:a9:2e:f7:47:0b:31:6b:ce:66:42:44:31:
ab:7e:c5:e8:10:b8:20:a3:0c:0b:30:a4:59:ed:27:36:45:cc:
eb:df:ff:2c:ef:52:2c:64:8e:e9:10:97:68:9b:75:2b:9b:a6:
b1:66:7f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:00:34 2025 by rpki-client