Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c37e4460-77ae-403f-a947-cab5c43f2b6a.roa
File: c37e4460-77ae-403f-a947-cab5c43f2b6a.roa (raw, json)
Hash identifier: wKSZWC7R40XVvqD8NbGYUn6sn45XynRuCuNDOJ7Y8Iw=
Subject key identifier: 51:97:D7:A0:39:11:1F:25:1D:BE:1A:80:A7:C6:BA:6B:8D:5C:EB:C0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 57875BB6023E6D6A572DD8A8D3BE2472AB8D71F1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c37e4460-77ae-403f-a947-cab5c43f2b6a.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 209.92.4.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:87:5b:b6:02:3e:6d:6a:57:2d:d8:a8:d3:be:24:72:ab:8d:71:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: serialNumber=c2405b17617aeb3839093bdad889c3570addbd3fdcf29974ceae053422252db4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4e:b9:c4:fc:62:4d:a7:3a:5f:53:37:35:b1:
ad:48:82:b8:88:dd:d9:1b:b1:77:e7:a2:b6:16:34:
cc:23:bc:60:a2:71:ab:a8:9e:6b:18:24:73:d3:a1:
b0:3c:c2:09:5b:8a:1c:6f:19:29:2c:d8:d0:f8:6d:
fc:3b:ef:52:f7:1e:93:5a:b3:58:23:01:28:3b:14:
83:2d:d8:9a:8b:9d:7d:7a:df:79:7a:08:33:7b:39:
f2:4b:34:2c:a9:00:6f:0d:04:a5:a6:b3:99:2d:7d:
7f:54:e0:15:41:5a:1c:9e:3a:3f:49:e5:f6:2f:39:
99:73:76:dc:16:32:90:a9:70:ac:82:cf:92:69:0f:
66:6a:3e:b6:b9:43:d7:29:db:31:7f:73:70:b0:c4:
fe:9f:96:57:1d:22:3a:09:0b:4e:49:0a:81:65:8d:
a7:d8:cf:eb:47:5d:76:2b:74:3f:e3:93:4c:1f:2c:
15:27:20:e1:fa:71:43:7f:61:12:32:63:94:41:88:
9f:a5:f1:4b:89:57:b7:be:b3:9d:39:c8:8b:e0:b9:
29:13:5d:8c:96:04:0a:81:1e:24:f7:a3:0d:5d:49:
96:9e:16:63:b8:d4:06:29:73:d3:6d:ca:69:9b:7e:
bd:7d:fd:eb:ce:79:cb:3c:99:e8:12:ee:36:5b:c1:
88:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:97:D7:A0:39:11:1F:25:1D:BE:1A:80:A7:C6:BA:6B:8D:5C:EB:C0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c37e4460-77ae-403f-a947-cab5c43f2b6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.92.4.0/23
Signature Algorithm: sha256WithRSAEncryption
cf:6e:34:66:1d:cd:47:59:a1:68:63:78:43:6b:5e:bb:f3:52:
06:63:fe:5d:87:60:74:84:63:dc:8a:be:5b:dc:f4:c8:f4:2a:
8e:9f:30:4f:19:e6:06:ae:48:9a:d9:a4:fb:c3:fa:32:aa:fb:
33:23:c0:94:32:f1:1c:bc:c5:11:40:66:4b:58:91:8e:4c:cd:
c7:3d:6d:da:d8:41:f2:ef:ee:87:ce:04:f9:9e:13:a9:1f:d4:
af:c0:e0:25:a3:53:c5:76:a3:14:91:3c:18:85:3c:9f:1a:19:
e7:62:e1:23:48:8b:95:e2:4a:2b:22:da:0f:93:ae:27:11:e3:
fb:c8:80:a8:cc:7c:0d:7a:2d:d8:04:51:05:14:80:73:2c:82:
e2:71:8c:d8:08:38:44:c0:a4:d2:fb:88:ad:eb:d0:b6:91:59:
36:f4:e9:b7:55:b4:24:ce:98:55:cf:d5:39:bf:4d:d2:b6:04:
60:c4:d5:9c:5d:e7:d1:00:08:1e:68:32:02:fa:d8:04:61:cc:
dd:ff:33:e1:a8:73:63:92:e1:75:00:a7:b3:cb:da:3f:d9:ae:
3c:8e:bc:ba:8a:f2:6b:76:9f:9e:60:b4:3b:a6:0c:3a:01:eb:
ad:59:3d:af:ed:3a:42:01:8c:83:06:a8:35:92:0c:3e:40:ca:
03:1b:7d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:46:50 2025 by rpki-client