Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aeee70ce-6c0e-4257-8b37-66de1e6d47bf.roa
File: aeee70ce-6c0e-4257-8b37-66de1e6d47bf.roa (raw, json)
Hash identifier: iFfmLg3EJK7+SsUvrh9WDCKNmRFA44ILMPSNI2vl9e8=
Subject key identifier: B3:04:29:60:DF:9F:7D:03:EB:C1:C1:5B:5B:2A:2D:FE:80:7E:B3:86
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3798C9E200E637853CB1A0A14969655F7C82AFB3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aeee70ce-6c0e-4257-8b37-66de1e6d47bf.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 209.54.184.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:98:c9:e2:00:e6:37:85:3c:b1:a0:a1:49:69:65:5f:7c:82:af:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6d:84:38:b1:da:5d:b4:89:da:b5:df:fc:f0:
c9:36:50:55:c5:f6:ab:6e:e3:a3:d4:85:56:eb:12:
bf:a5:8c:aa:e6:82:17:5e:6e:24:d3:3f:a2:79:a7:
d5:9a:e7:f7:0a:82:eb:1d:4f:24:5a:42:c3:08:33:
78:d7:5f:37:eb:94:3b:4a:5e:c2:0d:9d:56:1a:db:
19:6d:5e:ac:fc:4a:35:66:39:78:3e:e1:b5:a8:c4:
5f:34:2e:f7:53:a2:60:0b:75:64:34:a2:7c:ea:8b:
c9:7a:23:ed:15:2d:96:0d:ec:4a:8e:62:63:ad:75:
88:0d:1e:f6:a3:54:a5:f0:3d:9e:37:c2:fb:ca:6a:
eb:67:f3:be:4f:15:7b:70:2f:5f:36:4b:8e:01:d2:
aa:78:65:19:cd:10:50:ed:29:08:fb:d1:a1:10:ae:
b8:49:87:53:45:ac:bf:3c:7b:f9:86:4d:8a:5a:7d:
ef:c5:f0:7a:d3:23:3a:a5:71:02:fa:d5:7c:ff:77:
73:a9:09:f8:4e:95:61:e9:08:92:24:2c:30:b7:7f:
7e:62:5b:a7:6e:62:6d:24:b8:cb:0d:e8:e4:8c:5f:
0d:3a:94:2e:6b:14:2e:b2:90:ee:e5:46:8f:10:c6:
da:31:22:5a:b2:b1:c4:e3:b3:4e:7e:36:ad:c2:aa:
d5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:04:29:60:DF:9F:7D:03:EB:C1:C1:5B:5B:2A:2D:FE:80:7E:B3:86
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aeee70ce-6c0e-4257-8b37-66de1e6d47bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.54.184.0/21
Signature Algorithm: sha256WithRSAEncryption
70:ce:e5:a8:cb:84:26:2a:7f:40:b8:ca:ca:d9:ee:4f:f8:f8:
3b:99:96:fb:48:ce:03:ce:a7:f0:ff:b6:c7:17:79:fa:3d:af:
3a:69:5c:ac:8a:1d:dc:2d:6a:ef:9e:15:b8:5d:df:8c:0a:1f:
d3:51:03:95:cc:f6:ed:bc:ec:11:57:b4:fd:43:5b:7e:53:13:
2e:c2:d8:f9:1c:9b:81:ec:71:cf:57:7b:35:eb:4f:c2:09:e3:
22:41:1c:19:6d:c8:25:93:aa:9e:76:e0:9c:52:98:fc:bb:42:
54:f6:56:32:71:46:5e:db:89:f4:c4:71:bc:4b:d8:89:e7:ac:
61:25:3d:c2:2e:72:a7:5b:ac:2a:eb:b0:9d:7e:a6:27:8f:59:
45:18:91:e3:1b:f4:46:17:40:97:c7:2f:f5:4a:bc:af:c9:5c:
cc:c8:67:45:74:79:b6:e1:02:80:91:43:d7:4a:b5:da:35:ac:
04:95:bb:b1:1a:fd:5e:98:61:d0:42:19:d5:13:66:19:f6:48:
ce:2f:1a:b9:b8:d4:bf:fc:1c:30:eb:c2:93:54:2d:e3:d8:fa:
0a:92:de:b7:fc:82:9b:e7:de:95:07:17:00:55:cb:3f:33:ad:
d1:10:53:62:9f:f5:52:db:e4:cf:8c:3c:a4:6b:f8:41:5e:ca:
58:7e:e3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:39:48 2025 by rpki-client