Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a065b782-6745-4a74-b481-57654058a510.roa
File: a065b782-6745-4a74-b481-57654058a510.roa (raw, json)
Hash identifier: sh396EjJKrjb1RLSF6Ahiu+5ygolNx+YsLGtQMZSCnA=
Subject key identifier: 0F:87:54:41:4E:78:83:7D:1A:E9:E7:1F:7F:0E:64:5D:F3:64:1D:43
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 070E57485FE605DBF508F9DB7A3335DAE889240A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a065b782-6745-4a74-b481-57654058a510.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 206.217.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:0e:57:48:5f:e6:05:db:f5:08:f9:db:7a:33:35:da:e8:89:24:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=a37163743176455d0948d9659ebe52adc95c5a8cee753815be1e2be572b4e158, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d0:b2:c7:f4:a0:91:a9:a0:fd:4c:d5:61:a9:
b5:28:a8:1d:1b:6a:f4:fd:c5:b4:80:59:24:52:b7:
e2:1f:f1:ac:f3:f1:9c:c1:17:cc:a3:94:e9:6c:61:
d9:48:52:ae:a6:00:e9:fe:8e:79:ea:8c:64:92:33:
60:a3:2c:76:bd:f4:a0:2e:41:f7:9c:6e:30:77:c2:
17:ca:1c:08:be:b6:01:7a:13:16:d4:7f:de:37:05:
79:32:07:d8:3a:e2:60:b9:3f:7d:5e:b0:b8:a6:3e:
fb:55:f2:99:c5:81:56:67:a4:20:e6:6b:c2:39:cb:
37:38:48:6a:54:9c:0e:39:c8:27:67:f3:ba:3a:c1:
e2:7d:04:45:4a:85:4f:f8:ef:55:f7:1a:17:0d:84:
45:da:7d:d2:e7:25:98:c3:f5:cf:36:16:16:bb:82:
f5:83:10:b7:d5:48:e9:25:d5:2b:92:a7:f0:ab:8b:
14:c6:c1:70:81:db:6a:98:a6:12:a6:1b:e7:6c:e8:
dd:c5:37:a5:22:64:8d:fd:5b:c8:a2:0b:09:3c:be:
32:d7:a5:6b:75:8e:dc:01:69:4d:a4:b7:75:80:e2:
2f:7d:b3:20:74:85:0a:96:e8:b2:97:9c:6d:63:59:
c1:e5:60:08:c1:dd:3b:42:43:d1:de:3d:c1:29:c3:
dd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:87:54:41:4E:78:83:7D:1A:E9:E7:1F:7F:0E:64:5D:F3:64:1D:43
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a065b782-6745-4a74-b481-57654058a510.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.217.32.0/19
Signature Algorithm: sha256WithRSAEncryption
d2:7e:ec:60:f3:bc:25:99:ac:dd:92:cf:29:b8:0e:4f:da:5b:
5e:e2:56:80:07:00:cf:95:e9:71:0c:2c:dd:e6:0a:e6:21:09:
a7:b9:f8:07:29:82:f3:b3:22:6f:b2:70:5f:ab:a6:94:46:77:
0f:90:ae:a7:e8:db:87:38:e6:22:5e:6e:0f:8b:fc:e5:92:1b:
a2:2b:a8:a2:07:c4:51:1d:e0:21:93:58:f7:02:81:99:2b:a8:
e3:8f:e7:82:a7:03:4e:9e:16:59:e7:a8:46:5f:ca:e4:4d:26:
d1:bc:78:df:be:06:65:ae:1a:a0:91:63:ac:37:0d:6c:60:f4:
17:bf:4f:af:5e:4e:ab:aa:60:76:95:d7:db:15:16:8a:a0:af:
51:1d:8e:2d:65:2f:75:ce:51:92:8f:f1:b5:23:78:dc:d6:23:
02:a0:34:fe:f1:d3:9b:52:f4:d0:8e:c3:30:27:b6:9a:62:c0:
3f:ee:56:e1:70:72:71:f8:4e:49:d6:fe:c5:e1:1f:05:c6:70:
21:3b:7b:12:bc:a5:94:86:87:e5:47:5f:83:51:26:64:f7:e2:
81:e6:80:f4:c5:08:18:d8:7b:11:08:16:93:c6:53:04:7a:04:
8a:75:3c:ff:c2:4b:3b:5c:5a:96:c0:36:26:97:96:d6:67:89:
b2:be:65:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:19:16 2025 by rpki-client