Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0dca666-137d-4b4e-bdf2-a21308820ff1.roa
File: a0dca666-137d-4b4e-bdf2-a21308820ff1.roa (raw, json)
Hash identifier: rLJpjlsfnNLBmDmuQkR6g/Ark43QS1dNsKUx8wkKipI=
Subject key identifier: 87:9D:AF:50:98:40:54:3E:01:3F:02:A9:D3:8A:56:2D:9A:85:F5:87
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6B92990E0FFF1D95575C882DA3C23A3C24AC82F8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0dca666-137d-4b4e-bdf2-a21308820ff1.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 16.214.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:92:99:0e:0f:ff:1d:95:57:5c:88:2d:a3:c2:3a:3c:24:ac:82:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f6:1f:e7:03:9f:5c:4c:ef:fe:eb:8c:ba:28:
18:de:17:93:2c:9e:c2:71:d8:3c:11:a6:66:70:3e:
72:db:52:65:e6:3f:61:54:26:dc:fd:00:99:27:f2:
cd:cb:37:80:af:e2:af:b1:a6:aa:c8:0f:f6:fd:ec:
e3:4f:d5:fa:7b:16:d7:3d:d2:31:83:27:e9:2c:60:
5c:0a:3a:4c:2f:aa:18:82:a3:ba:48:20:ce:87:10:
80:b0:e4:e3:2e:be:96:df:9c:a0:e9:9f:2c:39:fa:
50:ee:1a:c8:43:02:5f:1d:c3:fa:87:31:0e:85:7e:
a2:53:07:bd:07:04:7a:db:41:ff:c6:b5:45:bd:4d:
c4:07:36:bd:ad:46:2c:c3:c6:cd:e1:6c:97:96:a8:
8d:da:a8:36:5d:dc:d5:c5:1d:6e:52:35:a6:ce:9d:
ef:ad:2f:b1:cb:1f:ca:46:bb:1d:65:25:54:b6:7e:
49:da:62:62:79:4c:b0:63:a2:67:1a:da:a0:1d:6d:
dd:01:6d:ed:58:78:f4:bc:a7:a2:d3:99:75:5b:d1:
fb:a3:bc:d8:18:a2:6f:07:45:b0:42:0e:d8:81:ff:
c4:86:95:32:c5:90:d4:69:85:fd:58:28:f0:3e:3c:
af:f1:8c:79:f3:86:e7:01:cb:af:7b:a4:29:19:8d:
5f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9D:AF:50:98:40:54:3E:01:3F:02:A9:D3:8A:56:2D:9A:85:F5:87
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0dca666-137d-4b4e-bdf2-a21308820ff1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.214.0.0/16
Signature Algorithm: sha256WithRSAEncryption
50:b6:33:a7:1c:a9:7a:97:32:04:cb:94:29:8d:26:fb:03:89:
14:a7:3b:56:af:5b:24:ed:59:5b:bb:e3:b8:ed:5a:d9:89:7b:
54:5b:08:1a:4f:e4:08:dd:8c:29:38:f1:0a:68:06:dd:ad:7e:
ad:0a:03:d9:28:c5:2f:9c:65:26:6e:d1:80:a7:a5:d5:35:07:
54:ae:3f:11:56:cd:48:b7:c7:62:05:a3:2f:4f:e7:a3:64:c1:
76:6b:cd:1a:d4:d2:29:52:84:28:ad:08:e0:43:77:54:53:d4:
39:03:5e:84:de:d1:01:e8:f2:9e:62:a1:d9:6c:44:2b:61:a1:
c5:0b:d5:5c:e0:f7:d2:fe:81:75:23:e9:89:2d:56:9e:6f:4e:
4c:31:c0:b8:dd:14:7c:ea:90:dc:65:a4:ff:ae:03:68:e7:dd:
0e:d2:fc:c9:9d:d4:b0:56:08:8b:5e:e4:da:a2:6f:20:5b:0f:
44:70:39:27:f9:50:19:4a:01:3e:ea:5e:02:43:b7:23:98:b8:
74:0e:1b:2b:93:17:31:8f:64:e9:e2:6a:83:4c:b9:75:8f:6c:
e2:14:fa:98:b5:54:4e:2d:aa:93:25:90:cb:fa:4f:8b:eb:d3:
e9:2d:bf:00:a2:e5:18:98:b2:a5:f6:21:1d:17:8f:c8:c1:5e:
36:c4:45:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:35 2025 by rpki-client