Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d45c2ad2-9d29-4213-9f61-095efcb2de9b.roa
File: d45c2ad2-9d29-4213-9f61-095efcb2de9b.roa (raw, json)
Hash identifier: j8+I2QpYx0RvLKSYtYgvSGInc3XALewqyz30Uy8Ck+U=
Subject key identifier: 42:F0:C7:41:67:10:1B:B1:70:F5:C9:ED:F5:D6:4E:DE:D3:4C:B1:97
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 015C1F9D6AE63733776793070D239C6D650AB4A4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d45c2ad2-9d29-4213-9f61-095efcb2de9b.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 173.83.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:5c:1f:9d:6a:e6:37:33:77:67:93:07:0d:23:9c:6d:65:0a:b4:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:84:b7:61:e8:ff:90:d0:c4:fb:d6:81:52:b7:
20:52:a6:ab:55:89:6c:9f:bf:59:f2:57:08:e5:1a:
1a:0c:af:fe:99:61:65:c6:56:10:3e:01:0c:0a:98:
74:2c:b9:d2:3d:27:27:a9:32:c2:f3:dd:49:aa:f3:
9b:b8:a8:e2:27:aa:d6:d0:34:6c:f8:13:f9:6c:11:
0b:ec:a6:53:6b:55:e1:72:7f:07:b7:91:df:7f:ca:
59:96:ef:0d:19:49:fd:8a:bc:6c:ec:b4:27:a8:02:
d2:7a:b6:06:2b:73:76:23:15:d7:69:1d:55:14:5b:
b8:a7:5e:d1:c2:25:27:2f:c5:8f:1c:bd:44:1a:8b:
fa:09:05:68:d1:d8:90:84:a2:ed:cd:5e:d7:0d:a5:
fa:a8:a7:f3:40:6f:66:51:ee:21:f5:6e:58:bc:da:
48:9d:0a:1a:93:06:ba:da:86:57:bf:eb:58:7c:a4:
77:d0:82:a2:a4:f3:6a:51:b6:22:02:e2:fd:9a:10:
1f:1c:d7:ee:92:5f:db:5d:7b:bb:03:c8:15:b1:f5:
c3:d6:e0:c6:16:30:ba:21:bd:61:6c:8e:68:88:39:
c3:ae:81:b3:a7:e0:ce:f3:ad:2b:87:49:1b:f4:61:
a4:64:62:7a:cd:88:b2:03:f5:2c:e4:e6:dd:02:50:
9a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F0:C7:41:67:10:1B:B1:70:F5:C9:ED:F5:D6:4E:DE:D3:4C:B1:97
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d45c2ad2-9d29-4213-9f61-095efcb2de9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.83.0.0/17
Signature Algorithm: sha256WithRSAEncryption
45:7b:51:4a:12:84:89:cf:67:21:f8:de:d3:e3:44:f6:65:1a:
0e:77:f7:51:7b:90:1e:4b:6f:b8:d1:7e:a4:96:e6:8b:41:2c:
78:ca:fa:ac:a5:fe:31:7e:ef:3e:f1:04:8f:20:ce:16:f0:a9:
74:8a:66:15:38:3d:ab:e7:9c:b8:72:d6:02:23:5b:70:fb:66:
37:b0:5f:d7:e0:ee:e4:4f:2c:34:0f:96:92:b6:c7:52:1d:a0:
05:8d:0a:24:a6:43:77:30:d8:42:d3:bc:6f:9f:01:9f:60:2c:
d7:2b:4f:12:f4:4f:22:fe:da:ab:83:eb:e0:da:83:8a:0a:4e:
2a:0a:09:0e:3c:bf:0d:92:10:34:6a:2b:c8:d6:00:51:32:92:
27:97:87:92:4b:7b:2d:ef:6e:87:17:05:79:8a:14:a7:a2:29:
e1:8b:56:f6:b6:e0:ee:dc:95:92:3f:88:b9:00:0a:a9:31:bb:
5a:24:12:15:8e:a3:2e:1a:52:a9:89:4a:80:64:3f:ed:fc:45:
62:67:06:9a:d7:2d:2a:19:ed:16:72:ce:fa:12:16:c0:ab:4b:
5f:17:dc:0a:2f:e0:41:3f:71:38:37:5d:1c:66:66:09:9a:b5:
b5:c6:11:6a:f4:04:d8:8c:46:bf:33:78:dd:56:c3:1f:13:7d:
a4:5a:42:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:30 2025 by rpki-client