Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9343fac3-e1b4-464f-9c6b-b23772b23302.roa
File: 9343fac3-e1b4-464f-9c6b-b23772b23302.roa (raw, json)
Hash identifier: YlYQHG4UgvaUF1QysQGJ5ypYIzBFWn3aCCElLwVKk5Y=
Subject key identifier: A8:A5:D6:93:0C:A7:21:2E:D9:19:BA:ED:93:65:C4:29:3B:F1:F4:21
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 20AF3F35547C1E1813E4D75FBC8D5984D032DEC4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9343fac3-e1b4-464f-9c6b-b23772b23302.roa
Signing time: Tue 03 Dec 2024 00:00:00 +0000
ROA not before: Tue 03 Dec 2024 00:00:00 +0000
ROA not after: Tue 07 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 204.236.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:af:3f:35:54:7c:1e:18:13:e4:d7:5f:bc:8d:59:84:d0:32:de:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 3 00:00:00 2024 GMT
Not After : Jan 7 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:56:83:c0:3b:93:db:42:7b:7e:37:29:0d:31:
81:f3:8c:61:45:9f:ce:df:05:33:b0:09:8a:5c:e6:
3e:7a:49:4b:4e:fa:8a:13:ad:c5:31:b4:8b:5f:f2:
0e:54:44:f3:7c:50:b5:1a:c1:35:dc:ef:62:45:62:
bd:22:9f:a3:29:3b:e7:25:59:ef:ad:fc:a7:28:a0:
ef:a0:39:ba:08:1a:12:f6:a2:7f:86:cf:46:1a:98:
51:7c:6c:21:9a:bf:95:5f:1d:b2:28:a1:01:94:16:
e8:dd:07:08:53:20:d4:f5:6f:78:d6:7e:ca:78:1b:
e9:35:2f:12:9e:bb:75:29:ae:eb:32:15:d9:bf:37:
e2:00:f9:33:e8:00:d2:38:f3:a2:91:e7:14:64:e5:
0a:f8:34:7d:15:57:af:b2:c9:33:94:50:dc:6e:92:
dd:f5:77:7d:64:20:1e:b7:a9:62:10:0f:8a:52:a9:
dc:74:68:fe:0c:ab:82:e2:b3:94:ce:3b:6c:85:0a:
ea:99:39:2c:46:65:df:3d:d2:18:15:bd:ce:e8:47:
29:a1:4c:a7:63:54:89:71:d5:f5:0d:ca:7d:2e:7a:
a5:76:5f:38:00:29:c2:9d:a3:a5:4a:4f:5a:0d:7f:
dd:79:87:8e:b2:bc:1b:56:4c:fa:cf:67:ce:96:01:
63:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A5:D6:93:0C:A7:21:2E:D9:19:BA:ED:93:65:C4:29:3B:F1:F4:21
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9343fac3-e1b4-464f-9c6b-b23772b23302.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.236.128.0/17
Signature Algorithm: sha256WithRSAEncryption
c7:b6:a0:30:d0:bf:43:bc:e5:c2:08:c2:ef:db:2f:56:7e:78:
ca:f1:20:26:2d:55:82:55:ac:b2:a6:12:49:50:79:30:4d:52:
fa:26:9d:a8:7d:e3:66:e7:10:db:7c:cf:0c:24:f1:fe:3f:b4:
38:ee:3e:fb:58:16:7a:c0:02:8f:01:e0:53:b2:03:dd:1b:a1:
0a:b3:31:7a:df:a1:b4:ff:fa:8e:14:89:cd:5b:84:c5:11:c9:
bb:bc:ac:18:e9:9d:5b:28:5f:86:90:69:0b:b2:43:f9:99:29:
d2:f2:36:fd:13:6e:fd:e5:54:95:17:1f:f3:3e:50:f8:ef:ea:
f9:3d:25:99:40:7e:74:1d:02:15:1b:52:7f:9d:53:92:43:5a:
6b:c7:d7:42:f1:5d:0f:16:f5:99:a0:6e:5e:7c:42:49:15:1c:
e2:6d:14:e5:df:e2:83:be:a7:23:2e:ea:ee:17:cf:fa:72:7a:
d5:f7:75:3f:c9:44:72:e9:6a:be:af:27:bf:74:8f:a2:81:2b:
8d:dd:9d:f4:f6:13:49:1c:01:c3:0c:7c:17:0b:5c:c4:04:ca:
3f:72:f7:14:d6:ef:7f:33:58:dc:15:df:ce:88:8c:81:4d:16:
36:05:fb:96:ef:6f:8e:73:dd:48:15:6f:a0:a4:cb:3d:4c:c3:
da:cf:6b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:37:10 2025 by rpki-client