Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9eb7b26c-cac4-414b-8d13-16e6fbde08ce.roa
File: 9eb7b26c-cac4-414b-8d13-16e6fbde08ce.roa (raw, json)
Hash identifier: NlVSZmnu+477SLW2njBewuz2rXyuiOnrXBGMq8kfzo8=
Subject key identifier: 3D:30:11:71:D5:8A:DA:25:75:9B:15:95:B4:66:00:B4:4F:5D:B3:66
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1EDB81FB57FD0B2436D12C95E3C9EB001545F1DE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9eb7b26c-cac4-414b-8d13-16e6fbde08ce.roa
Signing time: Mon 23 Dec 2024 00:00:00 +0000
ROA not before: Mon 23 Dec 2024 00:00:00 +0000
ROA not after: Mon 27 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 16.69.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:db:81:fb:57:fd:0b:24:36:d1:2c:95:e3:c9:eb:00:15:45:f1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 23 00:00:00 2024 GMT
Not After : Jan 27 23:59:59 2025 GMT
Subject: serialNumber=4aff112e1ae17a1ab042c606531a9feb80c864b884a78ca38fa996f66e66c02c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:80:0a:ab:19:48:25:5f:42:c1:06:63:31:25:
7a:3f:d4:3f:3a:df:0c:48:f7:d9:f2:01:44:9c:ed:
b2:e7:7d:e3:4a:93:ef:10:60:fb:56:3c:a4:e4:bb:
f3:73:dd:52:3c:c4:85:0c:1e:ec:18:fc:b7:b3:47:
64:ff:6c:46:ee:5a:41:b2:fb:ac:8a:0d:78:64:61:
21:ae:2d:c4:d8:23:22:cf:78:57:23:3f:19:a3:2e:
d1:e2:7d:31:95:6d:64:92:2a:43:c0:0d:6c:58:eb:
e3:9a:e1:12:c5:d0:d4:21:7a:53:79:57:52:01:09:
ae:39:fb:ea:2c:56:5a:c3:28:f7:b0:59:59:fe:f9:
d2:38:79:02:2a:83:33:41:22:cb:28:08:8d:e0:c6:
47:c5:41:be:89:6d:77:54:4d:e8:8d:e7:cc:98:1f:
54:66:62:cc:e6:fd:10:4b:91:c6:47:48:5f:00:4c:
99:e2:3f:1a:9d:69:0b:11:97:74:d7:ea:5e:96:c2:
d4:65:a3:fc:29:8e:fc:26:81:da:45:2f:75:8b:97:
27:e3:0a:f0:12:b4:c3:f8:50:63:3c:bf:23:94:26:
94:15:5b:f0:dd:92:e2:3c:30:66:57:ab:dd:e8:47:
3f:43:12:de:b2:cc:a4:75:eb:02:77:f2:dd:c8:62:
d1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:30:11:71:D5:8A:DA:25:75:9B:15:95:B4:66:00:B4:4F:5D:B3:66
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9eb7b26c-cac4-414b-8d13-16e6fbde08ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.69.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bb:35:86:c5:f6:b7:82:88:5a:ce:93:1a:5e:dd:ea:08:b3:ad:
fc:ea:05:c2:59:29:d2:4f:f1:17:a0:71:44:08:3e:1d:c3:b2:
37:45:9e:0a:ae:a2:05:23:89:a8:86:07:b2:64:50:94:3f:96:
95:4f:04:ab:a9:df:bf:e1:a1:39:a9:1d:e7:f5:00:95:c0:88:
2c:91:91:05:be:87:5e:7c:ec:c4:86:6d:a8:d2:40:eb:cc:3a:
e2:cd:22:65:a4:8c:4f:b1:b4:00:3f:be:02:14:04:62:43:3f:
ee:5b:13:8a:4d:6f:d9:06:fc:d0:83:bb:c2:72:6b:ef:94:b3:
67:7a:d2:07:0e:b2:0c:1d:cd:a5:bf:77:94:b7:aa:61:0a:73:
2d:9e:cc:83:e5:21:4d:e8:5c:c2:ec:d7:9c:10:2b:8a:bc:f4:
2e:55:72:9d:5a:0d:7c:08:11:8b:b5:c7:89:07:2b:94:e3:d7:
4a:7e:45:99:63:a5:49:b0:ab:22:82:a3:36:4e:77:cf:0e:ea:
2f:56:c1:1a:19:c0:a2:71:54:05:61:4e:a3:c8:a9:8f:ff:29:
ac:c7:f5:e8:5b:23:0f:eb:86:7c:19:c2:9c:66:da:38:f9:f8:
0a:5e:77:0f:f0:50:d3:ac:ce:28:81:47:ac:7f:b0:ad:4a:58:
6a:39:bf:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:39:44 2025 by rpki-client