Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e330e5c-3efa-4712-b7d4-916ffbdf907b.roa
File: 9e330e5c-3efa-4712-b7d4-916ffbdf907b.roa (raw, json)
Hash identifier: uZntF5TeRIFK87mcLHEHYjrGU6qm7uuDpR2cwcwU42o=
Subject key identifier: F2:35:30:70:BA:3A:98:87:C6:FD:5A:2B:B3:DD:AB:64:D6:1A:B8:31
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 62CD63E1AAC3BA8F799D0E7D0FE52F3E2AEA4962
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e330e5c-3efa-4712-b7d4-916ffbdf907b.roa
Signing time: Wed 01 Jan 2025 00:00:00 +0000
ROA not before: Wed 01 Jan 2025 00:00:00 +0000
ROA not after: Wed 05 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 56.162.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:cd:63:e1:aa:c3:ba:8f:79:9d:0e:7d:0f:e5:2f:3e:2a:ea:49:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 1 00:00:00 2025 GMT
Not After : Feb 5 23:59:59 2025 GMT
Subject: serialNumber=c47f59693e332c00cf43bbe34b464102958f6927cef4ff8b39fdfe1543ad1726, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5b:46:ea:22:77:fb:76:0a:7c:53:1b:83:89:
f8:35:4d:b7:ed:e9:7a:94:86:61:92:9f:39:4d:eb:
95:ac:a0:60:6c:00:dd:8a:b9:28:44:87:a6:35:96:
1b:5c:69:8e:71:4e:24:2f:cc:32:60:95:d4:69:a4:
f7:69:4f:df:70:24:09:bd:e1:ca:e5:65:7c:bb:e9:
a5:4e:74:cd:fe:53:f1:d8:ee:ac:05:2d:6c:48:8a:
f0:8a:30:c8:75:62:af:1c:24:01:e8:02:1b:4e:6c:
43:d8:c4:c4:af:dd:17:46:a5:0d:c3:b7:11:68:c3:
59:bb:36:cc:ca:ad:d5:c6:b9:8c:e7:bc:a2:fa:23:
f8:f1:4a:ff:29:d3:0b:4f:e1:41:7e:0d:df:a6:43:
45:1b:5f:f8:16:8a:7b:46:54:f4:80:d2:63:bd:eb:
ee:fb:1b:eb:9c:c4:9c:b7:33:cf:51:ae:d9:2c:6c:
70:8c:7f:a1:64:83:d8:7c:db:4b:fa:1a:cc:b6:ac:
65:38:1c:fb:44:6d:8d:5d:54:15:3f:df:6e:76:c3:
cc:ba:84:34:68:c9:03:a9:9a:4f:1e:9c:fd:3a:21:
d3:2d:4d:c6:35:91:2d:9e:9e:d7:0a:2e:1f:94:96:
b0:79:99:b3:d1:db:fb:85:0a:45:0c:c2:bf:02:ac:
ec:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:35:30:70:BA:3A:98:87:C6:FD:5A:2B:B3:DD:AB:64:D6:1A:B8:31
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e330e5c-3efa-4712-b7d4-916ffbdf907b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.162.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d5:ec:e6:7d:58:24:73:1e:65:0b:d7:57:30:9a:57:af:11:c2:
e1:f3:1e:10:1e:b2:cf:a6:7f:da:f1:52:0d:0f:5b:f9:74:f6:
5e:b5:91:4e:14:c0:2e:11:84:64:14:2e:a3:25:2f:43:56:87:
19:aa:38:cd:80:8c:fd:14:0c:af:ea:86:68:3e:13:ac:98:e8:
37:72:06:ab:ff:d0:47:7a:12:5f:2c:6e:30:44:40:4c:49:18:
cd:32:63:ad:fe:7b:75:22:b6:b2:b9:c3:58:5b:4b:d7:8b:b5:
8e:5d:d6:15:4a:90:c1:5d:a2:c5:2f:41:5e:7f:92:02:67:fb:
cd:d5:b1:ac:65:ef:d4:78:b5:01:2c:72:b0:37:c4:cf:1d:25:
88:ee:5f:d3:3a:63:9c:70:cc:9a:8f:67:63:37:71:9d:6c:15:
e0:0c:16:d9:a3:fd:d4:f8:ca:c7:ae:f7:ca:ed:c0:0f:1f:70:
1f:76:16:7a:38:00:a0:b1:61:a6:76:5b:62:b5:0d:e1:90:74:
e8:d8:f7:2f:ee:f9:0c:f4:2f:45:f3:8c:d7:e3:ea:a5:32:15:
68:2b:f5:fb:85:a2:4c:e0:88:5d:31:6f:0b:4c:d2:0f:74:6f:
25:e5:c2:87:e1:33:f3:76:15:5c:5c:25:16:38:83:cd:03:65:
0f:96:ce:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:58:25 2025 by rpki-client