Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c269ff4-8b81-4cc9-a304-ec96a63b9b72.roa
File: 9c269ff4-8b81-4cc9-a304-ec96a63b9b72.roa (raw, json)
Hash identifier: 3zFOLVY7p5yk5dRG8Ty7HQa+A+lFRdKDCQPgTessACY=
Subject key identifier: 2D:5D:26:60:9A:5E:33:64:6F:E1:B1:79:69:05:FB:75:E1:B1:BE:C5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0BCCC7BDD4F9C7DC226DF119B74BF070809F52CB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c269ff4-8b81-4cc9-a304-ec96a63b9b72.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 96.0.0.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:cc:c7:bd:d4:f9:c7:dc:22:6d:f1:19:b7:4b:f0:70:80:9f:52:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: serialNumber=8034895aaacda00664643aa0e34118c18ebb2b5a05f4e655c4dc24c4fd713533, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:98:03:30:be:5a:25:9d:8d:ae:db:4a:03:47:
41:09:8f:0d:13:65:c6:ed:1a:27:74:a7:fa:8c:e4:
a8:37:6c:7e:c0:a6:04:58:b1:0e:6b:6c:3d:f0:fd:
cd:a2:c4:02:aa:d6:04:a2:5c:d7:e2:18:28:ed:38:
ce:7c:5d:0a:ef:6f:ee:3f:d9:7b:e0:88:63:ea:30:
b8:fd:91:fc:1e:54:de:13:03:83:0a:c1:da:99:d3:
80:28:e8:b1:2c:8c:71:03:ea:7c:d5:b5:30:50:07:
59:05:0f:6f:f0:d6:60:f0:43:46:07:95:be:56:2d:
67:92:cf:ca:3c:cf:4f:a2:0c:92:25:82:cc:63:19:
54:59:36:1b:f2:ba:78:94:b8:a2:3e:f5:ba:27:ef:
34:af:41:b2:40:9c:26:0f:ef:b8:5d:f3:16:92:18:
13:0e:6c:e5:1c:33:dc:8d:d0:a7:34:a0:af:61:f3:
bf:c0:20:36:06:1b:de:a4:61:6d:86:de:4a:33:db:
54:5b:a7:5a:48:a0:2f:95:1f:a4:6b:e3:31:e4:f6:
0f:76:4c:19:f7:9a:2f:ae:74:75:80:4f:74:e2:e8:
e8:27:4a:90:41:77:20:05:90:eb:8e:40:aa:27:49:
cf:97:cc:7b:c9:68:2b:b0:aa:7b:24:0d:46:cf:c1:
18:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5D:26:60:9A:5E:33:64:6F:E1:B1:79:69:05:FB:75:E1:B1:BE:C5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c269ff4-8b81-4cc9-a304-ec96a63b9b72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.0.0.0/21
Signature Algorithm: sha256WithRSAEncryption
ca:5a:ef:9f:47:29:65:e2:fe:05:0d:89:04:4c:33:53:5b:d8:
a0:6d:f7:66:29:87:10:67:52:de:31:5a:ef:f9:28:5a:50:dd:
32:6e:88:7c:d2:43:6f:7b:8a:a1:2f:d9:19:04:7c:44:15:04:
77:e4:59:e0:55:7b:4f:09:7a:fd:74:8d:f1:31:59:99:11:51:
10:82:e4:8c:14:17:d0:a6:ea:4d:c0:84:48:8d:39:9a:84:4c:
dd:53:74:1d:bf:9d:d7:ef:62:d6:a0:44:3b:0e:15:b5:d6:8e:
b1:95:1c:fa:bd:87:86:5d:32:b0:77:a7:6d:02:70:b3:70:93:
c0:67:21:88:26:02:87:b7:05:3b:b2:3c:51:26:ce:d0:4b:7f:
4f:c5:30:5f:8d:f9:fc:e5:83:44:e0:57:7e:51:24:70:29:18:
6b:18:00:43:ab:f0:3e:e9:65:a3:64:2f:e5:1c:28:84:4c:c6:
89:56:35:69:7d:0d:38:dc:40:e4:b1:7c:66:9a:93:cf:0d:4d:
da:4a:27:fd:a4:24:20:73:57:cf:3f:b3:f0:da:b0:a9:5d:80:
59:db:ba:f7:98:cf:78:88:57:37:75:fb:ed:4b:97:e6:17:e1:
65:dc:d4:2a:ee:07:4e:3e:23:5a:41:d7:81:cf:a5:67:0b:c1:
8f:1a:0e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:46:49 2025 by rpki-client