Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9306ecf8-9885-4089-bf26-7e4027ac2866.roa
File: 9306ecf8-9885-4089-bf26-7e4027ac2866.roa (raw, json)
Hash identifier: EArUrq9q8GfHEcgRyo7+Z/j00W5CzGA+RBVxH95TNls=
Subject key identifier: A3:A8:31:F4:5C:F6:BC:B2:C5:A1:14:83:E7:8F:68:5A:CB:DB:B9:5F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 746EDF3054D8604428429481807D2CA82F7E4FAB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9306ecf8-9885-4089-bf26-7e4027ac2866.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 16.15.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:6e:df:30:54:d8:60:44:28:42:94:81:80:7d:2c:a8:2f:7e:4f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:89:a3:57:dd:c1:74:4e:60:9e:cc:47:77:d9:
dd:fb:f5:06:79:c5:11:10:8e:10:f7:74:73:11:e0:
86:61:d9:a4:99:82:f7:a5:8d:3a:1d:08:87:0e:24:
33:ab:c2:1c:d1:aa:f3:39:ae:9e:bf:49:72:d7:d6:
36:23:fb:53:e7:47:84:ce:70:67:a6:37:87:8a:63:
5b:53:a1:f9:fa:87:a3:dd:a8:fa:4b:e4:a3:57:33:
b8:13:94:b1:92:fe:ec:41:9a:4e:ed:db:51:00:00:
37:90:13:4e:e9:84:12:b7:57:68:a4:55:6c:bb:f8:
39:5a:94:1b:f7:7a:aa:69:84:83:69:ad:8a:3c:f7:
e0:63:98:e5:61:3b:54:52:f0:17:96:05:12:59:af:
76:b0:57:5b:ad:81:79:f9:b1:de:6b:7b:20:ae:53:
34:f0:ef:89:bd:32:ca:01:67:df:48:79:41:20:84:
10:2b:cf:b9:54:66:c7:bf:73:55:47:85:47:16:9e:
fd:e3:80:48:5e:46:59:b4:bd:a4:ce:62:06:aa:51:
3a:de:21:77:86:0f:c2:1f:b5:66:de:3a:04:78:ff:
2d:b2:2d:f8:0c:d8:ea:d0:eb:ba:df:b5:ed:42:14:
72:65:3c:f2:a6:d9:7f:33:91:9c:cc:53:d3:0a:4b:
35:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A8:31:F4:5C:F6:BC:B2:C5:A1:14:83:E7:8F:68:5A:CB:DB:B9:5F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9306ecf8-9885-4089-bf26-7e4027ac2866.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.15.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d5:e2:a1:2a:1d:1d:14:d1:3a:4f:bf:d1:6c:26:1a:bc:6f:71:
86:e2:00:2e:4a:ce:69:ac:e8:cd:df:ef:b5:3b:86:00:93:cd:
5d:c8:a3:cf:03:47:a1:0d:2d:d2:33:13:8b:83:44:c8:6e:4b:
81:8e:9f:c3:32:2e:bb:db:42:eb:60:92:ae:aa:01:ed:19:55:
c2:4d:3c:60:16:10:44:76:c2:0d:fd:80:90:55:ae:e9:2c:57:
68:53:89:62:ec:ea:92:40:6a:a8:99:1f:4f:19:fc:3d:4c:62:
6c:b5:19:2e:33:92:37:5e:30:c2:c9:45:50:55:6f:48:ff:5f:
88:67:02:e5:76:84:a3:d5:f5:89:9b:96:be:4b:32:e6:d5:2b:
6b:59:3b:66:0d:1c:db:74:3b:43:d0:e6:4c:c5:2a:08:f4:bd:
2d:2f:78:b0:14:60:c2:3f:3b:a2:eb:d5:10:f9:41:02:73:87:
bf:a3:93:6e:20:95:7c:b2:2a:3b:ec:3a:8b:a9:53:35:51:66:
ef:37:4c:a5:cb:1e:ee:9b:b9:7f:77:7f:be:dc:05:41:4d:0f:
5e:3d:20:1e:45:b2:c0:3a:c0:5b:f8:27:3f:f5:f9:6d:d8:33:
82:5b:c9:0c:9d:f3:7b:d0:3f:e9:91:2f:54:93:fc:46:05:3b:
72:f7:04:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:20 2025 by rpki-client