Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90b9cac4-3ca9-4ec7-88e5-a809fdf74774.roa
File: 90b9cac4-3ca9-4ec7-88e5-a809fdf74774.roa (raw, json)
Hash identifier: ciX2GlcC7ImhNFbNMycUY8nHL1FKuRK6wqjqnsYkSwQ=
Subject key identifier: A4:44:DD:7B:03:CC:7C:CB:A7:D0:E2:92:34:E2:C8:71:22:40:87:E4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5383A30352B637A31E143BF1AE64D911B341A517
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90b9cac4-3ca9-4ec7-88e5-a809fdf74774.roa
Signing time: Tue 04 Mar 2025 15:11:20 +0000
ROA not before: Tue 04 Mar 2025 15:11:20 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 701
IP address blocks: 139.56.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:83:a3:03:52:b6:37:a3:1e:14:3b:f1:ae:64:d9:11:b3:41:a5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 4 15:11:20 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: serialNumber=6a94cb200a68851ba32c7399b266bacfe00dfe6b328086966f97c33d75dd3221, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7f:3a:7a:ed:06:66:0e:93:a3:36:c5:46:d1:
de:19:66:c4:ba:08:9e:d5:85:d3:b0:50:ee:20:a1:
78:c8:04:70:24:cb:70:bd:fe:de:32:b3:65:5b:23:
bd:32:36:c0:5f:66:e8:c5:25:fd:d3:db:59:63:05:
32:6b:0a:2b:a6:1c:ac:84:f2:29:ff:ab:ce:5b:08:
89:c3:9e:fb:09:08:78:5f:e9:18:94:14:3d:fc:24:
c8:02:0c:6e:37:aa:8f:a9:4b:59:1d:48:58:c0:32:
71:0b:dc:70:c9:2c:9f:22:5a:39:8a:5b:d9:7c:66:
e8:4c:00:1b:27:b8:d1:d0:bb:e7:9d:18:a7:64:f6:
53:de:3c:85:0b:21:95:20:7b:b5:df:e1:1e:1c:f2:
cf:fa:a5:cb:5c:d4:10:a4:c0:32:b9:5a:88:04:44:
e7:2a:fe:83:98:39:9a:33:d0:5e:bb:4a:0f:fa:35:
e5:91:78:04:25:43:08:0a:db:73:7e:b3:a8:af:27:
e2:ec:07:1e:4e:c1:8e:61:92:b4:16:d9:33:02:de:
94:48:7d:a1:2b:58:68:bc:a4:41:73:c2:a6:fd:8e:
0b:57:70:58:8e:78:94:cc:c1:6c:24:dd:48:50:b3:
3f:aa:75:fd:69:0b:f8:e6:f6:c2:11:84:af:f0:75:
db:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:44:DD:7B:03:CC:7C:CB:A7:D0:E2:92:34:E2:C8:71:22:40:87:E4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90b9cac4-3ca9-4ec7-88e5-a809fdf74774.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.56.4.0/24
Signature Algorithm: sha256WithRSAEncryption
19:7f:d3:6e:dd:07:cf:cf:64:ad:3c:69:bc:9e:09:01:ef:20:
24:31:e2:58:7c:8d:2b:9a:7e:3d:ff:ce:de:70:3a:5e:45:66:
7e:cd:3a:07:19:93:da:85:8a:f3:50:da:a6:ec:5d:68:28:d0:
84:51:07:55:d7:3e:82:ff:d7:5d:eb:7e:ca:19:d6:31:15:58:
4b:c8:db:a0:f5:43:4e:c4:b6:7e:f7:3b:1e:0d:50:d2:38:8a:
1e:13:ab:78:bf:83:15:52:f8:cc:f5:f4:a8:4a:76:56:b8:e6:
4c:9a:16:fb:83:51:b0:17:d6:32:d7:fa:05:fa:0d:a0:56:7c:
b9:e4:d0:2e:96:d9:dd:3e:13:8b:7f:25:57:29:1c:04:16:ec:
81:11:71:54:bd:25:e1:06:5d:ca:5a:b1:97:7f:24:f8:a2:6b:
84:5c:b5:87:0d:8e:b0:95:8d:ce:b6:a8:a8:25:93:3e:02:1e:
30:83:f2:e9:45:7c:00:e8:67:85:8d:ae:e1:99:74:55:57:e3:
2d:ae:ee:b4:d6:c8:77:54:c5:c7:7b:63:f2:80:13:14:bd:e9:
8c:d4:17:59:2d:cd:eb:c7:28:c2:0c:24:0e:5b:eb:92:d3:11:
97:df:6f:58:18:29:56:38:4d:59:2d:4f:e1:07:93:39:25:84:
9b:03:26:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:46:59 2025 by rpki-client