Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a290a83f-349d-45ef-a97b-20a1606ac0e5.roa
File: a290a83f-349d-45ef-a97b-20a1606ac0e5.roa (raw, json)
Hash identifier: Cfe5WtoiGnIz8K8zmx0s3vB/6V3ZN/udBV0EuOcEHCo=
Subject key identifier: 48:EC:BB:B4:18:8E:5A:15:68:F1:1E:AD:FF:21:44:65:F8:CB:71:CE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 52F44FA19425AD08AA041CCF0389093C414FEC16
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a290a83f-349d-45ef-a97b-20a1606ac0e5.roa
Signing time: Mon 02 Dec 2024 00:00:00 +0000
ROA not before: Mon 02 Dec 2024 00:00:00 +0000
ROA not after: Mon 06 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.79.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:f4:4f:a1:94:25:ad:08:aa:04:1c:cf:03:89:09:3c:41:4f:ec:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 2 00:00:00 2024 GMT
Not After : Jan 6 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4c:96:10:b3:01:fd:64:ec:ab:87:c2:b5:f2:
c5:7c:2b:c2:bc:a2:48:18:4b:76:6a:f1:d7:37:ba:
44:5f:1b:4a:b3:b2:06:65:af:f2:dc:58:fd:f5:f7:
ae:be:88:6a:c0:a7:87:3f:36:0a:13:e3:ed:8d:68:
88:83:f1:c8:67:7a:87:f7:8e:48:23:87:00:5c:98:
84:99:17:b3:f4:78:cf:e3:ec:88:99:97:72:e5:dd:
e8:72:b8:0a:36:82:f8:3b:06:5c:7d:1b:fd:81:ff:
f3:39:8e:e8:8f:e4:cf:92:c7:ea:bb:19:58:d5:e0:
20:b9:7d:e1:aa:29:a1:74:13:4d:b1:5f:1e:5e:8d:
ba:9d:30:85:d8:92:e0:4b:45:a0:e5:64:f7:e2:25:
e7:8a:05:7f:3c:5a:b8:19:a5:95:2a:8f:ce:5b:55:
c9:8d:3c:92:05:41:5d:b4:99:e3:93:56:ae:fa:4b:
6f:a0:61:25:4b:bf:95:58:d3:78:f4:b2:d8:de:bf:
85:25:91:7e:f9:30:b0:6b:b8:95:f7:dd:18:45:49:
9a:dc:21:67:bb:de:6d:57:79:1a:87:f1:3d:87:54:
e3:a2:b6:d1:31:12:a2:54:f5:a8:c0:de:57:55:66:
7f:9e:15:5e:3e:35:44:12:35:45:6a:f6:7e:36:5b:
e9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:EC:BB:B4:18:8E:5A:15:68:F1:1E:AD:FF:21:44:65:F8:CB:71:CE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a290a83f-349d-45ef-a97b-20a1606ac0e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.79.0.0/16
Signature Algorithm: sha256WithRSAEncryption
aa:2c:53:c2:49:f2:2e:dc:3e:74:d1:52:9d:0c:e2:e5:6a:1b:
04:66:c0:d5:d6:db:24:9b:31:1f:eb:8d:b6:b6:78:67:5a:d1:
36:00:dd:24:a6:27:83:63:4d:e7:c4:60:bc:ba:f5:eb:56:99:
84:b1:7e:a7:85:c9:0c:b0:96:62:9a:42:d6:01:11:fc:24:87:
ca:d3:ee:7d:81:76:9a:ba:3d:1e:3e:4e:94:6e:b0:ae:0a:39:
f0:17:3c:e1:32:9e:5e:b4:4b:26:a5:91:42:eb:9d:38:6b:0a:
60:2a:1c:43:5a:b0:46:02:39:e7:78:4c:75:ae:db:b3:d7:0f:
87:6a:7d:19:84:c9:00:e1:3b:42:51:23:e2:fc:42:7c:71:9c:
b9:29:5d:e6:da:cc:83:df:4b:c3:bd:ce:2f:2a:a3:0e:de:3d:
89:a1:df:3e:6d:4e:7f:37:65:37:21:cf:05:61:d8:c5:05:fb:
35:e8:dd:5e:90:a2:67:60:8d:a6:b2:c0:df:c8:ac:0a:e2:23:
9a:f1:11:ad:4d:7a:98:9a:f4:ed:47:3d:d0:6d:51:8a:fa:d3:
e4:69:83:75:66:e6:4a:31:eb:63:4f:89:b1:79:a1:d1:2b:8e:
62:a5:0d:40:14:95:5e:dd:38:fc:3d:92:60:97:1e:8f:98:70:
d4:13:de:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:24 2025 by rpki-client