Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6ee3bf4-b262-4707-9136-78285090a852.roa
File: a6ee3bf4-b262-4707-9136-78285090a852.roa (raw, json)
Hash identifier: n5lSh2YPakMESXyUMuga7nRrTMvAVI/pxW1qtjxDVNU=
Subject key identifier: 77:87:37:F9:C4:89:DA:53:25:A5:54:8B:2E:79:83:BB:C1:41:8B:AD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 723ACECED881DF4B470BAD20448994C62C7AC8CD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6ee3bf4-b262-4707-9136-78285090a852.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 44.192.0.0/10 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:3a:ce:ce:d8:81:df:4b:47:0b:ad:20:44:89:94:c6:2c:7a:c8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: serialNumber=c7082cb4ccba6e28b67d59d62c32e7916f2d467ccf8d76f705a200ce3d862243, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a0:45:8a:26:94:0e:24:4e:f7:8e:d4:bf:f7:
cc:be:73:54:33:d0:37:aa:d8:ab:d6:9f:d8:21:14:
32:43:2b:08:db:7d:57:f6:2f:cc:cb:12:ee:43:28:
be:0b:8e:e1:c9:9c:e2:b1:6e:a3:a3:40:fd:21:fb:
79:01:3c:60:39:39:59:9b:78:f4:7b:1c:76:19:ac:
f2:72:06:a9:28:19:04:23:d0:c2:40:dc:59:ea:0a:
2f:57:ae:5a:65:ad:39:c1:54:af:f1:79:06:8c:44:
fe:55:22:59:30:d2:c8:06:9e:28:94:ac:29:70:f5:
98:46:35:95:aa:f0:3f:37:42:61:17:c3:a2:42:20:
66:62:f0:f3:ce:a2:5c:48:a8:84:13:0d:bb:d7:06:
e8:d5:b6:0b:fc:ae:1d:fb:1f:8c:d1:bc:2a:99:57:
33:25:2b:b6:7a:5a:3f:6b:fc:6c:2b:94:76:70:33:
6a:9b:5c:28:76:f2:a8:96:52:09:dd:65:49:33:95:
37:58:78:73:21:c5:60:d7:18:e5:0f:ea:47:8e:c2:
59:7e:e0:94:93:40:0c:19:42:d4:ca:5f:48:c4:f4:
f3:5b:c5:6f:4f:ee:7b:a7:af:47:32:41:49:24:ec:
ca:94:d1:35:28:d3:ac:08:e7:78:47:6a:13:0c:7b:
3a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:87:37:F9:C4:89:DA:53:25:A5:54:8B:2E:79:83:BB:C1:41:8B:AD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6ee3bf4-b262-4707-9136-78285090a852.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
44.192.0.0/10
Signature Algorithm: sha256WithRSAEncryption
21:e7:10:48:f4:73:a4:7d:56:07:59:03:42:97:0b:1d:7e:aa:
64:de:6e:80:51:06:30:0a:9d:82:88:9f:78:5d:d5:05:07:23:
30:05:e7:7f:8c:9e:5c:05:c2:0b:03:f6:3b:f9:5a:10:1b:61:
ed:e6:0b:43:9a:7d:88:5e:29:df:04:59:44:27:b0:a1:2a:d8:
e1:07:de:28:02:08:29:95:85:13:5f:83:e0:2d:68:da:c8:d3:
4d:7e:4e:e6:04:39:a0:2d:ff:9d:07:df:65:3f:8d:b2:1a:48:
fc:cf:b6:03:fe:a5:68:2b:ec:b5:13:8f:38:34:41:c9:70:ff:
1b:9b:1f:dd:60:dd:d9:5f:77:d2:38:c6:34:0e:36:23:7a:ca:
58:86:ba:b1:bf:ff:12:64:31:3e:24:a9:0f:26:a9:c9:44:69:
11:5d:09:10:24:c4:30:56:1c:a0:16:ea:f0:0d:04:06:b4:ae:
d3:1a:bc:ab:62:06:92:b7:ca:a3:9b:67:e1:65:df:ec:96:64:
45:5a:b5:ed:f5:6b:9a:27:bd:7e:42:1c:60:c2:88:f4:21:65:
8e:c9:17:d3:90:2e:56:7e:20:22:73:ed:29:a3:70:83:49:98:
24:71:26:28:6a:a7:49:79:cc:72:59:cc:d6:80:10:fe:70:2b:
a7:30:a1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:11:46 2025 by rpki-client