Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9049a2d7-3d91-4014-b9fa-968e6ab4f083.roa
File: 9049a2d7-3d91-4014-b9fa-968e6ab4f083.roa (raw, json)
Hash identifier: oXhhS+C7mvqStHiBY74wSLQBf+mA+uLavjjD5d+We+U=
Subject key identifier: FC:98:06:D8:DB:CD:8B:6B:36:8C:55:E9:87:1B:EE:86:7F:75:2D:46
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4720760E17691E89DDCC82654CF3F01B392FFAE1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9049a2d7-3d91-4014-b9fa-968e6ab4f083.roa
Signing time: Wed 15 Jan 2025 00:00:00 +0000
ROA not before: Wed 15 Jan 2025 00:00:00 +0000
ROA not after: Wed 19 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 168.84.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:20:76:0e:17:69:1e:89:dd:cc:82:65:4c:f3:f0:1b:39:2f:fa:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 15 00:00:00 2025 GMT
Not After : Feb 19 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:52:6d:9f:ba:2d:87:29:59:dd:84:a0:d0:b7:
c8:48:c3:a5:c7:4a:c3:6b:5f:a9:b5:55:7d:45:47:
2e:b7:8e:78:30:c4:89:b9:33:a9:0d:26:1c:06:11:
43:8a:ad:d8:af:af:10:d2:4c:4d:ef:c3:e8:88:b9:
ae:b8:aa:db:da:b0:17:1e:52:69:40:8f:33:f7:3c:
13:45:17:87:18:c9:cc:44:ea:b8:e5:ad:7d:8d:f0:
c6:28:3a:5b:f6:a4:e4:9b:25:89:61:04:7d:52:98:
c6:da:7b:e3:90:5b:71:59:84:ba:4e:7b:75:4e:37:
0d:03:08:4d:25:cd:70:16:98:b1:08:17:4b:94:78:
27:a0:c3:93:72:75:25:6c:a5:ef:19:ef:d4:cd:a4:
a8:01:7a:ca:22:bd:a1:7a:24:fb:e6:40:ec:dd:f5:
b3:00:42:5a:48:e4:cc:97:ac:e8:e1:18:24:a1:5b:
fb:39:3a:6c:98:a7:06:9c:9b:9d:6c:04:6d:06:76:
61:a3:f9:dd:48:13:43:6c:63:e8:e7:08:56:e1:6b:
c3:c9:fb:fc:f6:81:50:2b:8a:f5:60:45:d3:b7:0f:
a2:26:5a:c6:26:58:31:85:ae:47:41:9b:39:bc:03:
88:12:cc:42:97:87:ec:ef:f3:f2:6c:63:b8:3a:75:
85:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:98:06:D8:DB:CD:8B:6B:36:8C:55:E9:87:1B:EE:86:7F:75:2D:46
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9049a2d7-3d91-4014-b9fa-968e6ab4f083.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.84.0.0/16
Signature Algorithm: sha256WithRSAEncryption
83:8d:ed:42:f2:14:7c:6f:0c:e9:8d:ab:0c:40:4a:51:69:8c:
a1:8b:09:45:fd:fc:69:84:e6:a7:c2:58:e3:7e:e2:2a:4e:48:
18:1f:59:76:e0:c2:c0:0d:a0:eb:a1:3e:29:e3:32:a7:70:28:
02:ed:36:6b:ce:28:57:ec:c7:b8:d4:f0:b4:43:99:ec:81:61:
70:62:7a:23:7d:33:fb:00:9c:ed:77:ae:1e:0b:7d:63:46:a9:
83:49:48:e1:09:97:7e:0a:f1:c5:ff:3d:14:97:53:c1:b8:d4:
3c:f1:18:9b:51:66:db:59:00:02:e9:b4:2e:4e:57:57:ce:80:
ea:95:65:a8:b5:71:be:c2:0e:3c:5d:e0:47:9d:e5:b0:61:90:
d8:fb:2a:13:eb:36:4a:e9:3b:fe:71:8e:4b:43:c5:29:82:9f:
11:6f:f7:41:6f:10:90:e9:ff:66:40:1f:3e:ce:f0:14:2a:b1:
2e:d9:d7:19:9f:c6:b0:5e:b9:62:03:d4:ea:e8:7c:d4:9d:0b:
8d:91:15:10:ea:d8:1b:fd:13:fe:9c:01:ab:37:a5:71:2f:1f:
3f:6f:8e:e0:3b:0b:25:3e:fa:15:d9:13:9a:80:e9:9e:cf:a8:
88:e9:e8:c5:70:78:6c:29:68:52:87:46:ca:1f:2d:8c:96:f5:
b0:aa:0c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:49:13 2025 by rpki-client