Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba1f5582-c5a7-4af1-b3e9-c22f6e35593e.roa
File: ba1f5582-c5a7-4af1-b3e9-c22f6e35593e.roa (raw, json)
Hash identifier: g9lSn0SGKica9hVcdxnmI92htTxrhW6ykmhjdqjAZ2o=
Subject key identifier: CA:C7:38:3F:B8:F0:EB:63:FC:50:96:46:17:68:98:3C:02:F8:7B:B9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 314CA4D8DCB1FDA4FCE837D693C43C3170DC9312
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba1f5582-c5a7-4af1-b3e9-c22f6e35593e.roa
Signing time: Wed 01 Jan 2025 00:00:00 +0000
ROA not before: Wed 01 Jan 2025 00:00:00 +0000
ROA not after: Wed 05 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 56.225.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:4c:a4:d8:dc:b1:fd:a4:fc:e8:37:d6:93:c4:3c:31:70:dc:93:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 1 00:00:00 2025 GMT
Not After : Feb 5 23:59:59 2025 GMT
Subject: serialNumber=537e9d9b81b196b2607e04fdbbfda5cd776afc6b5492e15080e02251d72eb2ff, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:78:07:f6:3f:4e:03:ed:fd:ff:50:0a:2c:24:
d0:3a:21:fa:e9:4d:4e:c8:2a:2a:8e:dc:0f:ee:d8:
d3:2c:d0:c6:87:72:31:d3:d6:12:05:f0:b7:c7:2d:
c9:45:87:aa:99:1d:1e:93:c5:c9:0c:13:90:38:15:
ce:3a:f3:eb:59:0b:29:00:7d:18:da:b5:1f:bf:95:
1e:24:24:30:ae:8a:34:cb:31:c6:0b:c7:d5:42:80:
66:55:27:2b:9e:d9:bc:ed:a6:57:08:21:70:8c:2f:
44:5f:1c:f9:56:43:0d:af:16:d7:b2:95:23:f4:04:
9c:57:f8:d1:62:e4:50:b5:59:c3:a9:5a:e5:09:7a:
87:3c:93:26:b8:89:38:31:79:1d:5f:15:b3:e0:4d:
c4:9b:8a:79:58:37:cb:41:2f:e9:6c:6f:06:3e:65:
c0:c9:2b:e8:c7:e5:b4:84:69:72:29:d1:93:82:7e:
52:67:c2:57:dd:36:cb:56:71:97:65:f0:3c:9f:25:
16:5e:11:d9:36:68:9a:44:84:44:77:19:2d:38:e4:
aa:79:e8:3f:bd:88:0e:d1:74:47:6e:32:1e:70:91:
45:34:77:4f:69:30:d9:3f:50:5b:68:bb:7c:fc:f8:
a2:84:87:25:2b:04:86:09:b7:10:78:de:59:89:8c:
ad:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C7:38:3F:B8:F0:EB:63:FC:50:96:46:17:68:98:3C:02:F8:7B:B9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba1f5582-c5a7-4af1-b3e9-c22f6e35593e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.225.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a7:2a:05:d4:c5:fc:04:82:50:9e:48:a7:07:fa:29:d8:5e:d2:
bd:ef:3f:61:5b:62:7b:7e:fd:b4:a0:05:73:b7:a8:a9:06:72:
cb:2a:24:22:ab:c8:0b:9d:21:af:17:af:e7:2a:2e:3a:49:f7:
a8:77:3f:c8:58:b5:ec:a5:6a:68:bf:de:ec:bc:ec:75:32:11:
eb:4f:82:3e:0c:d5:54:c2:3b:1d:71:27:cf:6d:cd:91:c7:23:
76:db:af:c1:20:65:7a:e5:83:95:aa:31:1a:1e:0b:6d:f8:9a:
58:a2:50:f2:bd:aa:e7:f2:3e:82:8f:32:31:60:c8:77:c1:98:
0b:a7:b9:4c:fe:2a:7a:30:ae:77:c9:12:df:3a:ec:02:c6:14:
7f:31:8b:c2:54:31:d1:22:9e:87:a8:f5:c3:e3:b1:13:bd:ce:
c8:87:bc:c7:61:92:f3:04:44:e5:e9:51:72:57:cc:4f:c0:4e:
c0:59:98:73:ca:39:81:10:21:4e:bf:71:53:32:58:c5:fd:79:
7b:d8:05:da:0b:ef:c0:93:56:66:cc:d8:84:a4:20:fe:34:be:
05:7b:6a:d3:4d:0a:b7:07:92:0e:b7:00:07:6d:3e:06:e6:a1:
ad:ba:c2:9e:74:f6:95:71:51:4f:17:ae:b3:b6:42:3e:c5:f9:
bc:7e:cb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:39:53 2025 by rpki-client