Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/923b7e42-24d8-4f19-8e4c-e064fc851410.roa
File: 923b7e42-24d8-4f19-8e4c-e064fc851410.roa (raw, json)
Hash identifier: 3juqebQi2VGHCym0djVQbBlG158kiTq+BCjBqxPXkyk=
Subject key identifier: 6D:74:35:24:2C:1F:14:2D:10:35:37:FC:72:79:85:D7:86:72:A3:3B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 14FAA9C23CA8F26C39408A45751583F7B52A5B7F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/923b7e42-24d8-4f19-8e4c-e064fc851410.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:fa:a9:c2:3c:a8:f2:6c:39:40:8a:45:75:15:83:f7:b5:2a:5b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:22:06:a8:4d:83:ff:05:90:93:7d:e8:6b:12:
e2:71:6f:b5:64:00:55:92:e6:be:3a:85:e9:3b:13:
f4:ac:1a:06:8d:75:58:1f:0d:0c:3a:f8:84:4f:1b:
b7:61:43:a0:4d:6f:1b:bf:7c:88:3c:ab:5a:d0:82:
32:cc:a2:3f:0c:48:e5:32:80:7c:2f:6a:85:75:69:
6c:0b:d4:2a:57:5a:20:17:20:17:8c:a7:5d:58:43:
ec:96:1d:cc:e9:69:12:07:7c:77:73:fe:c8:53:fc:
cf:e5:29:10:57:c2:72:a0:5b:b6:ac:05:e9:c1:73:
80:fc:28:cf:83:18:92:dc:b8:67:e5:2c:82:29:10:
e1:e6:9d:45:0f:2f:10:db:26:e7:09:b6:4d:84:11:
36:66:d9:9b:77:62:fd:56:0d:7c:43:07:3c:55:da:
78:1c:40:ba:7a:37:d2:66:a9:95:f1:a3:29:a1:12:
42:86:e7:44:e1:75:6f:b4:2b:82:3e:dc:f0:b6:a7:
bb:c6:eb:db:7d:1c:20:67:ee:67:2f:ae:0f:0b:27:
1c:85:e6:f8:f0:c5:6f:8d:01:73:81:1a:d1:45:a1:
50:48:25:38:dd:91:6a:38:fb:0c:73:f8:ef:42:79:
e5:d6:1e:b0:ed:a1:26:40:9b:04:91:48:38:c2:72:
53:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:74:35:24:2C:1F:14:2D:10:35:37:FC:72:79:85:D7:86:72:A3:3B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/923b7e42-24d8-4f19-8e4c-e064fc851410.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.0.0/17
Signature Algorithm: sha256WithRSAEncryption
54:c2:a3:fe:cc:73:ba:1b:37:58:df:34:68:22:db:5c:f9:c9:
6b:39:b4:cf:ae:8f:f0:55:15:76:7a:67:5e:5e:c8:f1:ea:c1:
43:e7:52:ad:bb:4d:12:1f:15:9c:4d:64:2d:10:bf:23:9e:2f:
44:d6:a5:e1:b2:ff:61:c3:6a:37:59:f7:be:62:52:63:10:60:
1f:0c:29:42:90:c1:d0:44:27:d2:90:64:61:5c:9f:a7:0b:17:
b8:dc:3f:08:be:15:4f:c9:5c:9c:fb:ab:1b:a9:c3:ff:d7:e9:
2b:16:34:fc:c6:53:1e:be:ec:e7:a4:d7:d1:61:ea:a0:53:3f:
57:8f:9b:b9:3a:b9:d8:5b:8c:18:bc:4a:36:cc:d0:4b:e4:c3:
43:a1:e6:0c:d8:88:ec:d7:da:0e:b4:1d:ed:1e:69:23:37:36:
e3:03:52:01:65:8b:61:c7:74:49:c8:ab:4a:7c:f6:52:81:87:
ba:10:b5:b2:b2:93:ff:d0:c9:d9:d7:85:02:30:66:a1:7f:d0:
ef:82:f8:da:cf:17:8d:ad:c8:b5:9f:02:86:c1:cf:8d:8d:1f:
b6:ff:a0:a6:42:14:1f:43:d1:cd:9c:68:0d:87:95:df:b2:a0:
c1:8c:b4:39:c1:2f:15:d4:4b:ae:69:07:d8:cd:22:07:f7:3d:
a5:57:33:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:22 2025 by rpki-client