Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c6d02f4-be37-4541-8e26-4c3e4f77c7a1.roa
File: 9c6d02f4-be37-4541-8e26-4c3e4f77c7a1.roa (raw, json)
Hash identifier: M23pIEuqhigEdpQ6YaGjESbNckAemQN4iYdYSGYvlDQ=
Subject key identifier: 0C:43:06:0D:15:38:80:C1:B6:51:7F:EB:69:09:1B:C1:48:18:0E:48
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 35AE2ECC52E4950E6BF0CCB89910C27563BC5703
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c6d02f4-be37-4541-8e26-4c3e4f77c7a1.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 209.19.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:ae:2e:cc:52:e4:95:0e:6b:f0:cc:b8:99:10:c2:75:63:bc:57:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: serialNumber=41359f40a58f948c95900388902c50e4605741bc84b4ced33f28f2150679241b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dd:0e:84:3f:d4:93:ca:9d:c1:26:2e:51:fa:
d3:75:9e:ce:99:2b:f2:15:85:14:34:45:65:9e:58:
9a:b4:e7:e8:84:a1:9d:eb:91:8b:89:06:b1:bd:eb:
26:e1:94:f6:fc:39:62:dd:a6:48:18:5e:5f:62:e8:
4e:47:9e:84:cb:8e:65:ff:11:d1:cc:20:4a:4d:eb:
1e:5f:17:4b:e7:d7:15:6f:37:16:87:4d:7d:10:8f:
46:d2:21:f0:7d:94:bc:01:96:6e:cf:d5:93:7a:8d:
cf:90:a0:19:fb:e9:17:e3:d1:bd:b6:93:63:21:2d:
c5:6d:58:9a:7c:ed:49:1d:05:94:39:7f:1c:5a:af:
11:03:16:0c:15:7d:3f:5b:6b:3b:a1:21:1c:0b:ab:
ab:63:c2:66:14:e1:87:5d:d5:2a:c4:4c:a6:0c:cd:
3d:1c:01:b0:19:8b:44:5f:59:24:cd:66:f8:4e:0f:
3f:8e:e2:d9:d4:5b:19:36:2f:f8:81:35:da:74:8f:
8a:50:5f:92:7c:94:c3:c2:16:08:f8:c9:b1:0f:fd:
39:cc:be:4b:79:9b:1a:f9:58:b8:b1:c4:59:8e:9d:
25:32:89:6c:67:40:29:fc:00:ae:cc:ff:5b:2d:2a:
7f:0c:ef:df:1e:c2:eb:3b:fd:97:5a:9c:d5:ef:86:
9d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:43:06:0D:15:38:80:C1:B6:51:7F:EB:69:09:1B:C1:48:18:0E:48
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c6d02f4-be37-4541-8e26-4c3e4f77c7a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.19.0.0/17
Signature Algorithm: sha256WithRSAEncryption
2b:0a:e8:4f:29:e3:8a:e1:93:0f:0b:df:4b:5d:82:e0:d3:37:
cc:74:eb:03:8c:eb:7c:2b:a2:17:af:38:5d:ba:64:ab:d7:06:
5a:54:45:bb:e7:15:26:90:c7:78:35:ba:bb:bb:c2:85:e6:28:
c6:3f:c3:ca:05:e4:c2:55:8e:54:44:09:8f:0d:10:03:e4:4b:
85:a6:3f:8d:30:53:09:f7:e7:62:4e:0e:8b:8c:78:1a:c2:67:
64:e5:c5:25:d4:40:62:62:94:59:9e:9d:23:0d:33:15:5f:64:
33:55:ac:06:37:f6:12:13:b8:b8:5d:bf:b0:98:47:bd:ef:8b:
40:2e:59:74:19:ed:fd:ac:f0:f4:4c:10:f5:95:38:72:e9:55:
3a:fa:13:c8:d4:82:64:55:e9:57:36:93:e3:02:16:c6:00:b3:
4f:86:c7:6f:48:df:76:a7:c4:0b:ee:49:ad:36:88:2c:60:d5:
93:78:42:64:58:88:36:4b:71:6e:41:d3:9c:fc:28:0a:a2:3c:
f9:71:3a:ac:34:79:9b:f8:79:01:c9:88:80:c5:e7:87:dc:8e:
a9:b9:42:c7:5e:3b:1b:f9:b0:c6:1a:4a:26:8a:2a:a2:ba:e6:
24:51:31:5d:83:89:bd:f1:e6:70:ea:64:94:08:44:e0:ac:dd:
8b:cb:b4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:54:28 2025 by rpki-client