Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3b5700b-bcb0-4810-a0f4-a6a027db1a8c.roa
File: c3b5700b-bcb0-4810-a0f4-a6a027db1a8c.roa (raw, json)
Hash identifier: S2tr8/IgF6HIuFgzSl+sI2P4Mc2eFR9mIiurfjpqQb4=
Subject key identifier: 95:D2:42:4B:5C:9D:A4:9C:8E:7A:4B:BE:D6:91:DA:BD:10:9F:52:89
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 30D3838630555005A2C1327A54D1C612B99AFC0E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3b5700b-bcb0-4810-a0f4-a6a027db1a8c.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:3000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:d3:83:86:30:55:50:05:a2:c1:32:7a:54:d1:c6:12:b9:9a:fc:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:66:ba:58:e3:2c:28:36:f3:d4:18:51:e6:bd:
83:cd:c9:21:83:04:d9:f2:6b:36:45:7c:a2:27:76:
82:07:25:92:6c:b8:6b:c7:ca:b1:7b:6b:85:25:e7:
2b:e8:8a:0c:0a:6f:bd:69:8c:e6:de:2a:54:1d:9a:
0f:ae:1d:54:ac:26:6a:60:aa:d0:67:f3:13:f1:86:
78:27:af:a5:a9:ec:b9:81:ec:12:f8:0f:0d:a6:83:
9d:ab:d3:10:59:8f:b7:ee:23:cb:24:28:82:23:75:
64:66:9a:5d:bd:03:63:79:9d:e2:91:00:99:4b:6a:
58:2d:77:87:d4:7a:76:ae:81:b6:d4:32:73:98:04:
e1:c4:fc:f9:a8:df:d5:9e:7a:c0:03:e0:12:97:6f:
62:cd:66:95:34:5a:0d:ea:14:b0:f4:a5:ab:16:11:
62:90:4e:cd:3b:c4:20:6e:8f:93:c7:36:34:0b:c1:
ba:90:fe:2d:6a:8d:bc:55:4c:11:d1:c3:58:29:10:
a6:92:fa:4e:93:3a:fb:20:7f:ce:87:e1:d5:26:5d:
03:7a:8d:66:fd:37:cc:be:52:3e:cc:c6:33:34:e7:
b5:e8:bf:30:d3:70:23:72:a1:e5:e7:47:95:4b:ba:
ff:2b:0d:f6:fe:6a:06:71:e2:a1:64:83:ab:70:74:
72:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D2:42:4B:5C:9D:A4:9C:8E:7A:4B:BE:D6:91:DA:BD:10:9F:52:89
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3b5700b-bcb0-4810-a0f4-a6a027db1a8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:3000::/40
Signature Algorithm: sha256WithRSAEncryption
75:42:a1:b1:d3:ac:71:54:27:52:fd:8c:5f:5d:45:db:a5:16:
12:e8:b5:f7:67:74:df:74:2f:4e:9f:ea:bb:bb:33:7d:26:2e:
68:48:05:a9:df:8a:81:fa:fa:01:58:38:93:8a:ee:ad:db:ab:
1b:cf:f9:b1:42:f7:d8:b9:ac:90:a7:06:d3:0f:37:5e:76:51:
28:bf:d8:bd:37:09:cb:3b:e0:a2:b8:7f:91:20:de:69:d1:75:
95:00:50:0a:df:3d:97:88:b9:df:2e:25:dd:8d:41:f8:52:8c:
6b:b6:90:4c:6f:a8:be:4b:eb:50:b7:bc:59:bd:52:11:12:e2:
eb:14:f0:97:81:f6:a4:bb:8c:bc:29:87:f4:60:19:c5:97:b2:
20:92:94:77:e0:d1:6f:e5:ff:86:10:9b:1c:43:62:2b:3e:45:
38:c8:34:3a:14:a4:e6:3a:8b:f4:17:07:02:a4:8f:65:26:1a:
b4:92:a4:da:0d:19:8e:f7:d4:5f:59:18:97:d6:82:e5:a6:98:
70:a7:17:c3:9b:43:46:45:cd:fc:7a:f6:0a:4e:4a:67:43:3e:
c8:98:57:3b:df:ec:ae:45:26:ea:60:6b:6b:48:2c:71:c4:4d:
85:21:e3:5a:60:67:60:5d:aa:7f:1b:6c:01:5d:f5:19:15:6f:
3a:be:90:6c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:25 2025 by rpki-client