Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb038489-f9e9-4064-a078-932f97ad3048.roa
File: cb038489-f9e9-4064-a078-932f97ad3048.roa (raw, json)
Hash identifier: Cfnu7fEuVK8JlMvvqIRW60Q1SWjBAqJ32TpSXFVDItI=
Subject key identifier: 12:59:09:D3:44:1C:01:39:3E:4D:B8:4C:EF:00:2F:29:05:2E:41:DC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 714A40CE1540ECD670E55E807C9D69A85E1EC12E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb038489-f9e9-4064-a078-932f97ad3048.roa
Signing time: Wed 05 Feb 2025 00:00:00 +0000
ROA not before: Wed 05 Feb 2025 00:00:00 +0000
ROA not after: Wed 12 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f30:c000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:4a:40:ce:15:40:ec:d6:70:e5:5e:80:7c:9d:69:a8:5e:1e:c1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 5 00:00:00 2025 GMT
Not After : Mar 12 23:59:59 2025 GMT
Subject: serialNumber=5a5237e0994a7e95bbad1d6080d39f937cfbf79f35491e647d085c81200ac12b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:8d:3a:a5:ec:f6:f0:0e:ad:0a:28:9b:09:
74:eb:b1:57:ce:e1:f2:9a:e2:11:e0:09:17:da:24:
bb:f8:9b:c2:13:de:9b:56:53:0b:93:3e:23:65:b0:
af:13:e1:79:de:7d:be:8a:12:30:c3:8f:22:32:d5:
ff:63:22:c1:9f:14:9a:8f:89:fa:b0:fd:7b:60:9c:
ad:85:99:5d:1a:56:d5:34:51:e0:16:b4:3c:63:1d:
31:4e:f3:ac:bd:18:a8:00:5b:ef:83:bf:63:b6:56:
6b:a6:e9:ea:e7:8d:34:04:ab:57:ff:d6:58:d9:f1:
30:2a:28:9a:67:63:4f:3a:ff:67:23:08:6f:09:e3:
41:2a:2a:26:ac:ad:0e:2c:ff:6f:71:b6:2c:f7:e5:
35:ee:b9:2d:fd:af:e7:3e:b6:8b:52:51:84:57:d2:
e4:2b:aa:50:78:9c:1f:2d:09:8d:77:7b:ae:dd:26:
6d:ed:27:b9:bf:e4:64:06:13:e6:60:d8:eb:38:de:
48:58:e2:d5:96:00:6c:47:1e:de:03:d6:2c:b0:4d:
07:10:00:61:2e:5d:6a:31:a0:91:7e:4c:2b:3f:ff:
7a:6a:72:17:5a:15:bf:cc:59:9a:bb:5f:af:b7:8f:
fd:8c:ed:2b:af:9a:35:d0:dc:71:f8:e1:32:0c:63:
a5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:59:09:D3:44:1C:01:39:3E:4D:B8:4C:EF:00:2F:29:05:2E:41:DC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb038489-f9e9-4064-a078-932f97ad3048.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f30:c000::/40
Signature Algorithm: sha256WithRSAEncryption
ac:68:8c:c2:56:31:87:46:94:6a:6a:12:fd:a6:7b:73:56:0c:
68:53:16:57:18:e8:1e:31:f6:fe:a0:97:75:e1:49:f2:3d:b2:
21:e9:89:e2:29:83:2d:f4:35:2e:b4:3a:59:1a:aa:44:76:6d:
31:4e:f0:12:71:c0:4b:27:1f:51:a7:0c:a4:e4:a7:b9:8a:08:
7f:03:bb:2c:c1:fd:6f:43:57:4e:dd:01:41:7c:f9:cd:26:f5:
9c:65:e7:63:43:69:4a:12:d4:36:a7:d9:fc:16:a8:ab:67:f6:
6a:e4:bb:a6:ea:d7:d5:cb:4d:25:a7:1e:e7:5f:44:69:a6:a7:
6c:88:a6:79:8b:1c:44:74:08:4f:34:79:74:9e:b0:e1:41:a5:
b4:eb:75:61:58:f5:04:b4:43:4b:57:28:3c:86:f2:ae:65:43:
a3:e2:85:22:c6:57:29:22:4b:4c:97:23:25:2e:d5:51:c1:5d:
3c:10:8b:3d:63:77:1a:28:31:5c:1e:29:0b:a7:79:04:d7:7d:
3f:82:87:8c:93:74:de:99:bd:88:cf:93:15:61:9d:a4:f9:c4:
3f:0c:62:ff:a5:ff:89:e4:61:64:14:51:24:0c:c4:c8:f5:4e:
3b:69:5a:71:fc:50:52:f0:cc:28:29:ae:83:f1:98:80:c4:fd:
de:e7:dc:36
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 16 16:47:07 2025 by rpki-client